 mhaag-spl
|
f457ffed90
|
Update java_writing_jsp_file.yml
|
2022-04-06 13:47:38 -06:00 |
|
|
mhaag-spl
|
ebb920f47d
|
rename
|
2022-04-06 08:39:34 -06:00 |
|
|
pyth0n1c
|
bdfa26a0ed
|
Branch was auto-updated.
|
2022-04-05 14:52:17 -07:00 |
|
|
Bhavin Patel
|
c5528e72ea
|
Merge pull request #2113 from splunk/InDirectToVideo
LOLBin
|
2022-04-05 14:51:59 -07:00 |
|
|
mhaag-spl
|
a03b6719de
|
function and CVE-2022-22965 fixes
|
2022-04-05 15:36:38 -06:00 |
|
|
pyth0n1c
|
39c8ab5e12
|
Branch was auto-updated.
|
2022-04-05 13:56:48 -07:00 |
|
|
pyth0n1c
|
9638205131
|
Fixed paths to attack data sets
and updated required_fields
format to matrch the rest of the
detections in the repo.
|
2022-04-05 13:36:36 -07:00 |
|
|
pyth0n1c
|
ec2c1bff73
|
Branch was auto-updated.
|
2022-04-05 13:12:38 -07:00 |
|
|
mhaag-spl
|
0da666fc10
|
nix write jsp
|
2022-04-05 12:38:53 -06:00 |
|
|
pyth0n1c
|
c7e1a04873
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated dataset. Need to update again after dataset is merged from branch into main of attack_data
|
2022-04-05 10:21:42 -07:00 |
|
|
pyth0n1c
|
30ff35bcd8
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
|
2022-04-05 10:20:58 -07:00 |
|
|
pyth0n1c
|
b385ef2ead
|
Update windows_indirect_command_execution_via_pcalua.yml
Adding second reference for pcalua.exe
|
2022-04-05 10:15:26 -07:00 |
|
|
pyth0n1c
|
0cde033ac1
|
Update windows_indirect_command_execution_via_pcalua.yml
Added UUID
|
2022-04-05 10:13:20 -07:00 |
|
|
pyth0n1c
|
71fe3edea7
|
Update windows_indirect_command_execution_via_forfiles.yml
Added UUID
|
2022-04-05 10:12:45 -07:00 |
|
|
pyth0n1c
|
90424b7e0c
|
Update windows_indirect_command_execution_via_forfiles.yml
Updated description info on forfiles detection yaml
|
2022-04-05 10:08:49 -07:00 |
|
|
pyth0n1c
|
2d2fdb6be0
|
Update windows_indirect_command_execution_via_pcalua.yml
Updated description in YML
|
2022-04-05 10:05:21 -07:00 |
|
|
Rod Soto
|
901a73aa5f
|
secondbatchwinprivesctaghermeticwiper
|
2022-04-05 08:02:47 -07:00 |
|
|
Rod Soto
|
b3cd632c29
|
hermeticwipertagswindowsprivesc
|
2022-04-05 07:55:03 -07:00 |
|
|
pyth0n1c
|
2287e6597f
|
Branch was auto-updated.
|
2022-04-04 12:41:37 -07:00 |
|
|
Bhavin Patel
|
665c25a728
|
Update kerberos_tgt_request_using_rc4_encryption.yml
|
2022-04-04 12:04:55 -07:00 |
|
|
pyth0n1c
|
067efc3485
|
Branch was auto-updated.
|
2022-04-04 09:25:57 -07:00 |
|
|
pyth0n1c
|
6046907270
|
Branch was auto-updated.
|
2022-04-04 09:25:55 -07:00 |
|
|
tccontre
|
3ca03bc7fa
|
descp_fix
|
2022-04-04 17:11:12 +02:00 |
|
|
pyth0n1c
|
f89e4664e1
|
Branch was auto-updated.
|
2022-04-04 04:15:08 -07:00 |
|
|
pyth0n1c
|
92957c039d
|
Branch was auto-updated.
|
2022-04-04 04:15:07 -07:00 |
|
|
pyth0n1c
|
6e72249df8
|
Branch was auto-updated.
|
2022-04-04 03:47:13 -07:00 |
|
|
P4T12ICK
|
4049334910
|
small change
|
2022-04-04 10:43:01 +02:00 |
|
|
tccontre
|
6a4b0b2581
|
service_name_added
|
2022-04-04 09:50:56 +02:00 |
|
|
tccontre
|
e0e83fc266
|
service_name_added
|
2022-04-04 09:49:00 +02:00 |
|
|
mvelazco
|
94d9c211f0
|
Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2
|
2022-04-01 11:59:22 -04:00 |
|
|
mvelazco
|
96e3a537d9
|
adding extra references
|
2022-04-01 11:59:20 -04:00 |
|
|
pyth0n1c
|
0f897416ef
|
Branch was auto-updated.
|
2022-04-01 08:12:11 -07:00 |
|
|
pyth0n1c
|
4efe461ae1
|
Branch was auto-updated.
|
2022-04-01 08:12:03 -07:00 |
|
|
P4T12ICK
|
41f3b86ed4
|
bug fix description log4j detection
|
2022-04-01 15:46:48 +02:00 |
|
|
P4T12ICK
|
a2bc62ddc6
|
Recreated Issue 2019
|
2022-04-01 15:36:25 +02:00 |
|
|
Rod Soto
|
8298acf18e
|
powershelldetectionstaghermetic
|
2022-03-31 15:29:51 -07:00 |
|
|
mvelazco
|
30a97b14fd
|
adding new kerberos constrained delegation discovery
|
2022-03-31 14:34:31 -04:00 |
|
|
P4T12ICK
|
8c84a7826d
|
plutil mac os detection
|
2022-03-29 15:39:30 +02:00 |
|
|
mvelazco
|
63901e5471
|
adding new detection for unconstrained delegation discovery
|
2022-03-28 19:14:06 -04:00 |
|
|
mvelazco
|
d7dc6c0d2f
|
Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2
|
2022-03-28 18:21:46 -04:00 |
|
|
mvelazco
|
79684bc988
|
missing pipe
|
2022-03-28 18:21:44 -04:00 |
|
|
pyth0n1c
|
6fce4c5446
|
Branch was auto-updated.
|
2022-03-28 12:21:05 -07:00 |
|
|
pyth0n1c
|
c72efcf8d5
|
Branch was auto-updated.
|
2022-03-28 12:21:04 -07:00 |
|
|
mvelazco
|
2c2448f4a3
|
Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2
|
2022-03-28 15:02:18 -04:00 |
|
|
mvelazco
|
a1f1e21882
|
adding detection for unconstrained delegation discovery using PowerView
|
2022-03-28 15:02:16 -04:00 |
|
|
patel-bhavin
|
0627d28ae3
|
adding CIS tags
|
2022-03-28 11:25:05 -07:00 |
|
|
pyth0n1c
|
7429b5eb6a
|
Branch was auto-updated.
|
2022-03-28 08:32:40 -07:00 |
|
|
pyth0n1c
|
6f46686078
|
Branch was auto-updated.
|
2022-03-28 08:32:39 -07:00 |
|
|
tccontre
|
d4a42814bd
|
Update windows_deleted_registry_by_a_non_critical_process_file_path.yml
|
2022-03-28 17:16:28 +02:00 |
|
|
tccontre
|
1e95f4c502
|
Update windows_deleted_registry_by_a_non_critical_process_file_path.yml
|
2022-03-28 17:16:03 +02:00 |
|