 Bhavin Patel
|
b2581a900a
|
Merge branch 'develop' into installutil_improvement
|
2025-02-25 10:52:59 -08:00 |
|
|
research-bot
|
5204e68914
|
updating detection
|
2025-02-25 10:51:47 -08:00 |
|
|
Bhavin Patel
|
85de9817c2
|
Merge branch 'develop' into curl_proxy_fix
|
2025-02-25 09:56:35 -08:00 |
|
|
Bhavin Patel
|
06b4947c33
|
Merge branch 'develop' into installutil_improvement
|
2025-02-24 13:02:47 -08:00 |
|
|
pyth0n1c
|
02ce36a21f
|
remove field that does not exist
from the by clause
|
2025-02-21 14:22:54 -08:00 |
|
|
research-bot
|
b7596a632e
|
updating message
|
2025-02-21 10:08:09 -08:00 |
|
|
research-bot
|
6c5688364d
|
updating the search for better output
|
2025-02-21 08:57:46 -08:00 |
|
|
pyth0n1c
|
ec007d4a28
|
Merge branch 'develop' into cisco_ai_defense
|
2025-02-20 15:19:04 -08:00 |
|
|
research-bot
|
ebdd770afd
|
udpating name
|
2025-02-20 15:08:25 -08:00 |
|
|
research-bot
|
d25d712781
|
updating detection
|
2025-02-20 15:07:29 -08:00 |
|
|
Bhavin Patel
|
49fa1c1900
|
Merge branch 'develop' into cisco_ai_defense
|
2025-02-20 15:02:29 -08:00 |
|
|
pyth0n1c
|
d77736f7e4
|
Update detect_web_access_to_decommissioned_s3_bucket.yml
fix tests key again
|
2025-02-20 14:57:35 -08:00 |
|
|
pyth0n1c
|
7104c5c84b
|
Update detect_dns_query_to_decommissioned_s3_bucket.yml
Fix bad alignment of tests section
|
2025-02-20 14:55:30 -08:00 |
|
|
Jose Enrique Hernandez
|
9428a91911
|
Merge branch 'develop' into 8_million_requests
|
2025-02-20 17:53:03 -05:00 |
|
|
research-bot
|
aba0bdc4d3
|
updating detection
|
2025-02-20 14:47:37 -08:00 |
|
|
research-bot
|
63facf9e78
|
updating detection
|
2025-02-20 14:47:35 -08:00 |
|
|
Jose Hernandez
|
36f3b6eb35
|
shipping as experimental
|
2025-02-20 17:11:38 -05:00 |
|
|
Jose Hernandez
|
441ba47f3d
|
fixing merge conflicts
|
2025-02-20 17:06:33 -05:00 |
|
|
Bhavin Patel
|
74c102b8a0
|
Update windows_service_created_with_suspicious_service_name.yml
|
2025-02-20 10:02:51 -08:00 |
|
|
Bhavin Patel
|
43b9a93839
|
user_id
|
2025-02-20 09:58:57 -08:00 |
|
|
Bhavin Patel
|
2eb0c4698a
|
revert date
|
2025-02-20 09:50:12 -08:00 |
|
|
research-bot
|
347caf1538
|
remove empty coloums
|
2025-02-20 09:04:20 -08:00 |
|
|
research-bot
|
ecf4948604
|
manual test
|
2025-02-20 08:52:07 -08:00 |
|
|
research-bot
|
bfd2b1c050
|
updating to user
|
2025-02-20 08:47:38 -08:00 |
|
|
☕️
|
df4dbde293
|
Merge branch 'develop' into curl_proxy_fix
|
2025-02-20 01:51:35 +00:00 |
|
|
research-bot
|
e6711e779a
|
updating spl
|
2025-02-19 17:06:11 -08:00 |
|
|
Bhavin Patel
|
405064ec97
|
Update windows_process_execution_in_temp_dir.yml
|
2025-02-19 16:31:14 -08:00 |
|
|
research-bot
|
dc9561dec9
|
udpating from integration test
|
2025-02-19 16:29:22 -08:00 |
|
|
pyth0n1c
|
fde93c6d32
|
convert csv lookup to kvstore lookup.
Update references in description files
as well.
|
2025-02-19 14:50:53 -08:00 |
|
|
0xC0FFEEEE
|
d0fe9a8cd1
|
add whitespace to regex
|
2025-02-19 22:36:24 +00:00 |
|
|
0xC0FFEEEE
|
756956328f
|
reduce fps through case sensitive matching
|
2025-02-19 22:30:24 +00:00 |
|
|
Bhavin Patel
|
bdb79594e5
|
Merge branch 'develop' into 8_million_requests
|
2025-02-19 13:57:40 -08:00 |
|
|
Nasreddine Bencherchali
|
ea641c5f97
|
Merge branch 'develop' into nterl0k-t1569-windows-sus-services-lookup
|
2025-02-19 22:05:45 +01:00 |
|
|
Bhavin Patel
|
82bdfb3956
|
Merge pull request #3333 from nterl0k/nterl0k-t1546-compattelrunnner-abuse
Nterl0k - T1546 The curious case of CompatTelRunner and some sneaky persistence.
|
2025-02-19 12:49:50 -08:00 |
|
|
Bhavin Patel
|
86c6bbb464
|
Merge branch 'develop' into nterl0k-t1546-compattelrunnner-abuse
|
2025-02-19 12:39:03 -08:00 |
|
|
Nasreddine Bencherchali
|
d2ca0de2d7
|
Merge branch 'develop' into update-exchange-macro
|
2025-02-19 21:16:59 +01:00 |
|
|
Nasreddine Bencherchali
|
7df0472037
|
update exchange macro
|
2025-02-19 21:11:52 +01:00 |
|
|
Bhavin Patel
|
d0b24c6581
|
Merge branch 'develop' into 8_million_requests
|
2025-02-19 12:00:47 -08:00 |
|
|
Nasreddine Bencherchali
|
dac07f62d0
|
Update windows_compatibility_telemetry_tampering_through_registry.yml
|
2025-02-19 20:59:45 +01:00 |
|
|
pyth0n1c
|
fe00a4bbb3
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
add missing "search" keyword which caused unit testing to fail.
|
2025-02-19 11:52:46 -08:00 |
|
|
Nasreddine Bencherchali
|
b19c6e67a6
|
Merge branch 'develop' into nterl0k-t1546-compattelrunnner-abuse
|
2025-02-19 20:48:28 +01:00 |
|
|
Nasreddine Bencherchali
|
5ff1deea69
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:35:33 +01:00 |
|
|
pyth0n1c
|
58a6e70e77
|
Merge branch 'develop' into new-rules
|
2025-02-19 11:33:51 -08:00 |
|
|
Nasreddine Bencherchali
|
4f0bbc250f
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:32:52 +01:00 |
|
|
Nasreddine Bencherchali
|
c47a2b85af
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:31:55 +01:00 |
|
|
Steven Dick
|
e66e5e364c
|
Update windows_compatibility_telemetry_tampering_through_registry.yml
description updated
|
2025-02-19 14:26:38 -05:00 |
|
|
Steven Dick
|
4d04bccb69
|
Update detections/endpoint/windows_compatibility_telemetry_tampering_through_registry.yml
As you say
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>
|
2025-02-19 14:24:38 -05:00 |
|
|
Bhavin Patel
|
b68524f194
|
Merge branch 'develop' into remove-uncomatible-ds
|
2025-02-19 11:16:33 -08:00 |
|
|
Bhavin Patel
|
7c402fab3d
|
Merge branch 'develop' into nterl0k-t1567-o365-sus-file-exfil
|
2025-02-19 11:05:17 -08:00 |
|
|
pyth0n1c
|
b3c215afd5
|
Merge branch 'develop' into new-rules
|
2025-02-19 10:47:03 -08:00 |
|