Commit Graph

34 Commits

Author SHA1 Message Date
ljstella 3e9684660f Endpoint detections 2024-08-15 15:36:03 -05:00
tccontre 1b66eb3d4c handala_wiper 2024-07-31 10:04:07 +02:00
Patrick 87108a5aac Improved data sources 2024-07-17 14:41:50 +02:00
Patrick 9e0d8426c1 improved data source field 2024-07-16 14:06:31 +02:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel 8789ae1419 ESCU 4.25.0 Release branch 2024-02-22 17:14:23 +00:00
Bhavin Patel 71fad8cc55 4.17.0 release branch 2023-12-06 18:40:13 +00:00
Gowthamaraj rajendran e06cfa133d Edit how_to_implement for Endpoint.Processes 2023-09-15 10:58:38 -07:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
mhaag-spl af8a47c5c2 Added - Living Off The Land Story
Added - Living Off The Land Story
2022-03-15 14:44:54 -06:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
Detection Testing Service 6fd7a4e812 test: updated supported_tas to recommended_tas 2022-01-19 17:43:41 +05:30
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
Detection Testing Service a2b6fff739 test:updated ymls 2021-12-15 21:15:02 +05:30
tlangalia 343ceae12f Updated detection files with supported TA list. 2021-12-14 13:27:55 +05:50
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3
CARS_UPDATE_MITRE_ID_B3
2021-10-13 11:07:20 +02:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
P4T12ICK 65a92a64e1 add analytic types to detections 2021-07-19 16:49:33 +02:00
mhaag-spl 72d6020209 RISKY FRISKY 2021-07-13 13:47:54 -06:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
research bot d9b977a7a6 updating docs and package bits [ci skip] 2021-02-18 18:22:48 +00:00
mhaag-spl 2e8b6e4898 Add datamodel field to yml 2021-02-18 10:56:24 -07:00
mhaag-spl 54f26f3498 story name fix 2021-02-17 13:48:49 -07:00
root 6d52565e77 Added detection testing service results inDetect Regasm Spawning a Process 2021-02-12 19:30:10 +00:00
mhaag-spl ee51149170 Regasm-regsvcs spawn a process 2021-02-12 12:05:08 -07:00