Commit Graph

336 Commits

Author SHA1 Message Date
Bhavin Patel b2c176c938 Branch was auto-updated. 2024-08-22 22:16:22 +05:30
Michael Haag 39f4e3dadc Guardians of the Haaglaxy
## Story
- Ivanti Virtual Traffic Manager CVE-2024-7593

## Analytic
- Ivanti VTM New Account Creation
2024-08-20 10:53:01 -06:00
Bhavin Patel c6ac1365e4 Branch was auto-updated. 2024-08-13 11:36:01 -07:00
Michael Haag 78fb540ca0 Update linux_hosts.yml 2024-08-13 09:34:53 -06:00
tccontre c6d3eac542 linux_auditd_detection 2024-08-09 10:46:52 +02:00
Bhavin Patel 6e2d8fc0b5 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-08-05 17:48:59 -07:00
tccontre f28b995ce3 crowdstrike_analytics 2024-07-31 11:10:41 +02:00
Lou Stella 462ab1971a Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-29 10:10:26 -05:00
ljstella a980709e4b Modified macro name for clarity, updated how to implements with details 2024-07-26 14:11:24 -05:00
Lou Stella 09eb52ec50 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:32:02 -05:00
Bhavin Patel d99d5e5222 Branch was auto-updated. 2024-07-25 16:36:10 -05:00
ljstella 8b3c53f1a0 formatting on macro 2024-07-25 07:33:12 -05:00
pyth0n1c 9bb3600558 Needed to change the name of the osquery macro due to a conflict with the newly introduced osquery data_source. Additionally, fixed a serious error in mapNamesToSecurityContentObjects wherein a Security Content Object of the wrong type could be returned. 2024-07-24 16:15:54 -07:00
Lou Stella 135557163e Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-24 15:41:57 -05:00
Lou Stella a2cbf6bb3d Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-24 15:39:18 -05:00
Michael Haag b5041011c1 The Haag Returns 2024-07-24 12:16:25 -06:00
Bhavin Patel 2413b6c078 remove yamls 2024-07-17 10:18:03 -07:00
Bhavin Patel 91b313f446 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce 2024-07-10 13:58:39 -07:00
Steven Dick 2dd0a49745 Add files via upload 2024-07-09 08:49:37 -04:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 7539e88c4c Release Branch v4.33.0 2024-06-05 21:05:06 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Bhavin Patel 72e29c764f ESCU Release Branch - v4.30.0 2024-04-17 20:44:56 +00:00
Steven Dick 7f7857cbd7 Add files via upload 2024-03-16 11:33:20 -04:00
Bhavin Patel 046acb8871 ESCU v4.26.0 Release branch 2024-03-06 19:30:20 +00:00
Eric McGinnis 9fdf182033 Release v4.24.0 2024-02-14 23:54:00 +00:00
Bhavin Patel 0078f83d95 Release Branch ESCU 4.23.0 2024-01-30 20:52:05 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Bhavin Patel 71fad8cc55 4.17.0 release branch 2023-12-06 18:40:13 +00:00
Bhavin Patel f3372e03c2 Release branch v4.16.0 2023-11-16 20:33:10 +00:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
srv-rr-gh-researchbt e57d7b297c Branch was auto-updated. 2023-06-01 11:27:24 -07:00
patel-bhavin 95cc544ca1 audit 2023-06-01 10:25:12 -07:00
pyth0n1c 4bfd0c1277 content for June2023. 2023-06-01 08:18:50 -07:00
P4T12ICK c46979855b add source macro 2023-05-22 15:17:26 +02:00
Michael Haag f5e121b1eb The Haag Mile: A Journey of Redemption 2023-05-15 13:22:04 -06:00
mvelazco 21dd670a14 changes for sec 4.0 2023-04-24 17:58:57 -04:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Michael Haag 59c4718b7e inventory 2023-04-14 12:02:42 -06:00
mvelazco 406a046c40 renaming and adding new detection 2023-03-29 16:12:53 -04:00
srv-rr-gh-researchbt eb09ffd951 Branch was auto-updated. 2023-02-21 11:07:01 -08:00
mvelazco 4788c12979 update macro 2023-02-10 12:55:26 -05:00
Michael Haag 3a4380c16a fixes 2023-02-09 14:32:34 -07:00
srv-rr-gh-researchbt 1d9df4cde0 Branch was auto-updated. 2023-02-06 15:57:34 -08:00
Michael Haag b4796ccc27 Driver Inventory 2023-02-03 14:51:28 -07:00
Michael Haag ebc91326ec Cert services and MOAR 2023-02-03 06:58:50 -07:00
Rod Soto e376095429 fixsourcedtypesplunkwebxmacro 2023-02-01 16:33:44 -08:00