Bhavin Patel
|
22e5ea3f83
|
Release Branch - ESCU v4.34.0
|
2024-06-26 14:41:53 +00:00 |
|
Bhavin Patel
|
6c5446cfbc
|
Release Branch - ESCU v4.32.0
|
2024-05-22 16:47:39 +00:00 |
|
Bhavin Patel
|
b0eaed8f75
|
ESCU Release v4.31.0
|
2024-05-08 16:05:40 +00:00 |
|
Eric McGinnis
|
06a8a487ac
|
Release v4.18.0
|
2023-12-20 16:18:23 +00:00 |
|
Bhavin Patel
|
196d618f2f
|
Release v4.15.0
|
2023-11-01 19:24:56 +00:00 |
|
Bhavin Patel
|
b00506bd95
|
Merge branch 'develop' into sysmon_fix
|
2023-09-20 16:22:08 -07:00 |
|
Bhavin Patel
|
1d35e00366
|
testing a change for sysmon
|
2023-09-19 15:17:24 -07:00 |
|
Bhavin Patel
|
ba4a0d8919
|
updates to yamls
|
2023-08-21 13:50:31 -07:00 |
|
patel-bhavin
|
6211b72579
|
testing CI failure
|
2023-03-29 16:21:26 -05:00 |
|
P4T12ICK
|
78909f6429
|
merged with develop
|
2023-03-03 12:40:16 +01:00 |
|
Michael Haag
|
03e585fb7c
|
Added MSAccess
|
2023-02-15 07:19:07 -07:00 |
|
P4T12ICK
|
ffa1210a00
|
merged with develop
|
2023-02-02 09:15:59 +01:00 |
|
Michael Haag
|
42f4eefeae
|
more onenotes
|
2023-01-24 10:20:15 -07:00 |
|
Michael Haag
|
11ff0fa87d
|
onenote
|
2023-01-24 06:38:23 -07:00 |
|
P4T12ICK
|
fd0c8b349f
|
updated tags
|
2023-01-09 09:33:30 +01:00 |
|
P4T12ICK
|
5ae53c9368
|
Migrated all detections to v4
|
2023-01-03 13:42:10 +01:00 |
|
tccontre
|
d7830ab523
|
Update office_document_executing_macro_code.yml
|
2022-11-11 15:19:02 +01:00 |
|
tccontre
|
4160527799
|
cisa_coverage
|
2022-11-11 14:27:57 +01:00 |
|
tccontre
|
c96c6d03d3
|
qakbot_1
|
2022-10-18 11:57:58 +02:00 |
|
tccontre
|
888a148bbb
|
agent-with-tesla-1
|
2022-09-19 11:28:07 +02:00 |
|
tccontre
|
2dd87d6d33
|
dcrat-analytics
|
2022-07-26 12:02:35 +02:00 |
|
pyth0n1c
|
54203d6858
|
Fixing detection to conform to new sysmon
behavior.
|
2022-06-21 17:21:30 -07:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
4fd8604b9a
|
removed SAAWS and automated_detection_testing flag
|
2022-01-27 09:50:45 +01:00 |
|
P4T12ICK
|
84092434a2
|
fixed more detections
|
2022-01-18 12:53:54 +01:00 |
|
tccontre
|
e0299db411
|
CARS_UPDATE_MITRE_ID_B5
CARS_UPDATE_MITRE_ID_B5
|
2021-10-13 11:20:47 +02:00 |
|
patel-bhavin
|
c7bc4d7243
|
rename
|
2021-08-18 13:49:15 -07:00 |
|
patel-bhavin
|
e1ff3993cd
|
run generate again
|
2021-08-16 15:57:44 -07:00 |
|
tccontre
|
2d13569fff
|
icedid story
|
2021-07-30 12:34:15 +02:00 |
|
P4T12ICK
|
5e6e987fb7
|
resolved merge conflicts
|
2021-07-21 09:22:09 +02:00 |
|
research bot
|
44ea56053d
|
updating docs and package bits [ci skip]
|
2021-07-20 21:12:30 +00:00 |
|
mvelazco
|
589d3f92ed
|
fixing extra space
|
2021-07-20 13:53:50 -04:00 |
|
P4T12ICK
|
4ddd09fd87
|
add analytic types to detections
|
2021-07-19 17:12:54 +02:00 |
|
mvelazco
|
31496ca1b5
|
fixing variables on message
|
2021-07-14 14:40:09 -04:00 |
|
mvelazco
|
9a245fdfa0
|
Rba support Take 4
|
2021-07-13 16:03:52 -04:00 |
|
research bot
|
e80bc45423
|
updating docs and package bits [ci skip]
|
2021-05-13 22:09:29 +00:00 |
|
tcontreras
|
a845ca2f0d
|
minor_mod
|
2021-04-30 12:15:04 +02:00 |
|
tcontreras
|
051c6f9cfa
|
trickbot_1
|
2021-04-26 17:19:41 +02:00 |
|
research bot
|
25a4be5d98
|
updating docs and package bits [ci skip]
|
2021-04-22 21:55:11 +00:00 |
|
mhaag-spl
|
dc319b6eda
|
Spearphishing Attachments detections
|
2021-04-21 10:16:49 -06:00 |
|
tcontreras
|
07e5528918
|
Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach
|
2021-04-15 19:40:46 +02:00 |
|
tcontreras
|
7a0d9be5a5
|
spear_update
|
2021-04-15 19:39:21 +02:00 |
|
root
|
8cd49a3f7a
|
Added detection testing service results inOffice Document Executing Macro Code
|
2021-04-15 08:25:53 +00:00 |
|
tcontreras
|
71b663937e
|
spear_detections
|
2021-04-14 16:00:16 +02:00 |
|