 Detection Testing Service
|
4f8b5ad361
|
Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak
|
2021-08-12 10:11:40 +00:00 |
|
|
root
|
a89eeababf
|
Added detection testing service results inRundll32 LockWorkStation
|
2021-08-12 10:11:39 +00:00 |
|
|
root
|
6e7280e936
|
Added detection testing service results inUninstall App Using MsiExec
|
2021-08-12 10:06:47 +00:00 |
|
|
tccontre
|
568fa87c40
|
conti_leak
|
2021-08-12 11:48:18 +02:00 |
|
|
root
|
899e9d01c0
|
Added detection testing service results inPowershell Execute COM Object
|
2021-08-12 09:19:27 +00:00 |
|
|
github-actions[bot]
|
74e20eb919
|
Branch was auto-updated.
|
2021-08-12 08:59:58 +00:00 |
|
|
github-actions[bot]
|
70d87bc2ce
|
Branch was auto-updated.
|
2021-08-12 08:59:52 +00:00 |
|
|
github-actions[bot]
|
6b4ae84e01
|
Branch was auto-updated.
|
2021-08-12 08:59:50 +00:00 |
|
|
tccontre
|
c8d21347b1
|
Merge pull request #1549 from splunk/icedid
icedid
|
2021-08-12 10:59:31 +02:00 |
|
|
root
|
0f7d5aa104
|
Added detection testing service results inFsutil Zeroing File
|
2021-08-12 08:07:27 +00:00 |
|
|
tccontre
|
dcfab01e14
|
icedid
|
2021-08-12 09:25:43 +02:00 |
|
|
github-actions[bot]
|
f078e35f81
|
Branch was auto-updated.
|
2021-08-11 19:35:37 +00:00 |
|
|
github-actions[bot]
|
e35372d8bc
|
Branch was auto-updated.
|
2021-08-11 19:35:36 +00:00 |
|
|
github-actions[bot]
|
e0507705c3
|
Branch was auto-updated.
|
2021-08-11 19:35:31 +00:00 |
|
|
github-actions[bot]
|
7fef077ac9
|
Branch was auto-updated.
|
2021-08-11 19:35:30 +00:00 |
|
|
github-actions[bot]
|
4e09f8834e
|
Branch was auto-updated.
|
2021-08-11 19:35:29 +00:00 |
|
|
Michael Haag
|
c84a3b3b25
|
Merge pull request #1555 from splunk/blackbolt_1
duplicate
|
2021-08-11 13:35:12 -06:00 |
|
|
patel-bhavin
|
9f71b88e6c
|
duplicate
|
2021-08-11 11:24:14 -07:00 |
|
|
tccontre
|
fa681a604f
|
lockbit_ttp
|
2021-08-11 18:37:03 +02:00 |
|
|
miskoSplunk
|
055ed9ca2d
|
Merge branch 'develop' into misko_scores
|
2021-08-10 15:14:52 -07:00 |
|
|
Stanislav Miskovic
|
971315f40e
|
Fixing score rounding for two detections
|
2021-08-10 14:57:40 -07:00 |
|
|
Stanislav Miskovic
|
64b1a1f926
|
Correcting non-integer scores for two detections
|
2021-08-10 14:53:31 -07:00 |
|
|
tccontre
|
680db63bd5
|
conti_leak
|
2021-08-10 16:03:22 +02:00 |
|
|
tccontre
|
25917a36d6
|
conti_leak
|
2021-08-10 14:24:54 +02:00 |
|
|
tccontre
|
78177e9fe6
|
conti_leak
|
2021-08-10 14:16:33 +02:00 |
|
|
tccontre
|
1250e85540
|
conti_leak
|
2021-08-10 14:13:54 +02:00 |
|
|
tccontre
|
94c05bbb18
|
Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak
|
2021-08-10 13:27:43 +02:00 |
|
|
tccontre
|
bf47d0fa1f
|
conti leak
conti leak
|
2021-08-10 13:27:30 +02:00 |
|
|
P4T12ICK
|
6607ca9508
|
Merge branch 'develop' into analytic_types
|
2021-08-10 11:02:18 +02:00 |
|
|
Stanislav Miskovic
|
833ffcc2e7
|
Misko: Adding RBA fields to SSA detections - message, risk_score, impact, confidence, context, observable, etc.
|
2021-08-09 17:55:28 -07:00 |
|
|
github-actions[bot]
|
f6f2744f72
|
Branch was auto-updated.
|
2021-08-09 18:42:37 +00:00 |
|
|
github-actions[bot]
|
7c85b0dfd8
|
Branch was auto-updated.
|
2021-08-09 18:42:36 +00:00 |
|
|
github-actions[bot]
|
befd0e60e6
|
Branch was auto-updated.
|
2021-08-09 18:42:33 +00:00 |
|
|
Jose Enrique Hernandez
|
da6a9c2d0f
|
Merge pull request #1550 from splunk/ssa_TR-770_add_event_id
TR-770 added event_id to ssa detections
|
2021-08-09 11:42:14 -07:00 |
|
|
tccontre
|
341a7f16d6
|
conti_leak
conti_leak
|
2021-08-09 17:04:36 +02:00 |
|
|
root
|
4e3dc7fe9c
|
Added detection testing service results inSqlite Module In Temp Folder
|
2021-08-05 15:43:52 +00:00 |
|
|
tccontre
|
9a79673dbd
|
Merge branch 'icedid' of github.com:splunk/security_content into icedid
|
2021-08-05 17:22:51 +02:00 |
|
|
tccontre
|
5e8393c3b7
|
icedid
|
2021-08-05 17:22:35 +02:00 |
|
|
root
|
665a99e197
|
Added detection testing service results inSuspicious IcedID Regsvr32 Cmdline
|
2021-08-05 14:54:43 +00:00 |
|
|
Detection Testing Service
|
765f7a184f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:26:04 +00:00 |
|
|
root
|
442cbd9787
|
Added detection testing service results inDrop IcedID License dat
|
2021-08-05 14:26:02 +00:00 |
|
|
Detection Testing Service
|
ba91dfc63f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:25:26 +00:00 |
|
|
root
|
a79f8718eb
|
Added detection testing service results inIcedID Exfiltrated Archived File Creation
|
2021-08-05 14:25:26 +00:00 |
|
|
Detection Testing Service
|
40cf94a229
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:11:56 +00:00 |
|
|
root
|
8c20f6fdb0
|
Added detection testing service results inCHCP Command Execution
|
2021-08-05 14:11:56 +00:00 |
|
|
Detection Testing Service
|
549cb603b8
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:10:59 +00:00 |
|
|
root
|
ea12f51783
|
Added detection testing service results inOffice Application Spawn Regsvr32 process
|
2021-08-05 14:10:58 +00:00 |
|
|
Detection Testing Service
|
83dd255433
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:09:32 +00:00 |
|
|
root
|
2b3346a7c5
|
Added detection testing service results inCreate Remote Thread In Shell Application
|
2021-08-05 14:09:32 +00:00 |
|
|
Detection Testing Service
|
b109f5517e
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:08:17 +00:00 |
|