P4T12ICK
|
3f7f50814d
|
new automated detection testing
|
2021-05-26 14:45:51 +02:00 |
|
tccontre
|
91978e5c10
|
Update enable_rdp_in_other_port_number.test.yml
|
2021-05-26 13:37:03 +02:00 |
|
tccontre
|
80210ef7d8
|
casper1
|
2021-05-26 13:33:47 +02:00 |
|
P4T12ICK
|
58b0385e5b
|
new automated detection testing
|
2021-05-26 13:24:00 +02:00 |
|
tccontre
|
f925bdc572
|
Merge branch 'develop' of github.com:splunk/security_content into develop
|
2021-05-25 15:12:14 +02:00 |
|
research bot
|
351be39b61
|
updating docs and package bits [ci skip]
|
2021-05-24 20:58:23 +00:00 |
|
Bhavin Patel
|
fd7e136120
|
Merge pull request #1415 from splunk/restore_yanked_out_UI
restored from commits
v3.22.0
|
2021-05-24 13:34:32 -07:00 |
|
Michael Haag
|
5ac5e86558
|
Merge branch 'develop' into restore_yanked_out_UI
|
2021-05-24 14:29:26 -06:00 |
|
bpatel
|
891122875a
|
remove package folder
|
2021-05-24 13:18:55 -07:00 |
|
bpatel
|
5769165c6b
|
restored from commits
|
2021-05-24 12:53:37 -07:00 |
|
research bot
|
2d61b8e675
|
updating docs and package bits [ci skip]
|
2021-05-24 17:47:29 +00:00 |
|
github-actions[bot]
|
04227fd8ee
|
Branch was auto-updated.
|
2021-05-21 17:57:32 +00:00 |
|
Bhavin Patel
|
efa3db50c5
|
Merge pull request #1413 from splunk/den-haag
The Haag Is Not Enough
|
2021-05-21 10:57:16 -07:00 |
|
Bhavin Patel
|
45d45a345e
|
Merge branch 'develop' into den-haag
|
2021-05-21 10:53:33 -07:00 |
|
root
|
40a7a4494d
|
Added detection testing service results inServices Escalate Exe
|
2021-05-21 17:50:02 +00:00 |
|
mhaag-spl
|
b411f2b1fc
|
CVE-2021-31166
|
2021-05-21 11:25:37 -06:00 |
|
tccontre
|
ce81bcc4c8
|
Merge branch 'develop' of github.com:splunk/security_content into develop
|
2021-05-21 12:55:59 +02:00 |
|
github-actions[bot]
|
5ad14e5dbd
|
Branch was auto-updated.
|
2021-05-21 00:33:35 +00:00 |
|
Rod Soto
|
9a2a30ae97
|
Merge pull request #1412 from splunk/tr-662_risk_scores
Adding risk tags for all Mustang searches
|
2021-05-20 17:33:21 -07:00 |
|
github-actions[bot]
|
1a3df7445e
|
Branch was auto-updated.
|
2021-05-20 23:01:11 +00:00 |
|
github-actions[bot]
|
9155a244a3
|
Branch was auto-updated.
|
2021-05-20 23:01:08 +00:00 |
|
Bhavin Patel
|
618a06fda1
|
Merge pull request #1381 from splunk/xmrig
xmrig_ir
|
2021-05-20 16:00:47 -07:00 |
|
bpatel
|
a5b0e785ae
|
adding risk tags
|
2021-05-20 13:00:47 -07:00 |
|
Bhavin Patel
|
ece4317cc9
|
Merge branch 'develop' into xmrig
|
2021-05-20 11:15:23 -07:00 |
|
tccontre
|
e0e8d2b322
|
xmr_str
|
2021-05-20 10:56:00 +02:00 |
|
bpatel
|
7f4d032edd
|
updating story name
|
2021-05-19 15:21:25 -07:00 |
|
Bhavin Patel
|
92485f1f2c
|
Merge pull request #1411 from splunk/updating_darkside_date
date of story is wrong
|
2021-05-19 13:31:33 -07:00 |
|
Jose Enrique Hernandez
|
7dce7ba174
|
date of story is wrong
|
2021-05-19 16:26:40 -04:00 |
|
Bhavin Patel
|
5a5ea37b5d
|
Merge pull request #1294 from splunk/TR-532_escu_remove_ui
TR-532 ESCU remove jquery and update UI
|
2021-05-19 12:38:33 -07:00 |
|
Jose Enrique Hernandez
|
8ce5e748d2
|
Merge branch 'develop' into TR-532_escu_remove_ui
|
2021-05-19 14:42:25 -04:00 |
|
Jose Enrique Hernandez
|
193f6ae9d3
|
Merge pull request #1345 from splunk/allow_skew
allow skew setting for mustang detections
|
2021-05-19 14:41:59 -04:00 |
|
Jose Enrique Hernandez
|
54210d1cf6
|
Merge branch 'develop' into allow_skew
|
2021-05-19 14:37:35 -04:00 |
|
Michael Haag
|
9ace8fb3fd
|
Update xmrig.yml
|
2021-05-19 10:05:12 -06:00 |
|
Michael Haag
|
5f7f6fb7cd
|
Update xmrig_driver_loaded.yml
|
2021-05-19 09:36:10 -06:00 |
|
divious1
|
f6aa338124
|
adding doc_gen and reportin to the updated tools
|
2021-05-19 11:00:41 -04:00 |
|
Michael Haag
|
66c567ef4f
|
Update suspicious_process_file_path.yml
|
2021-05-19 08:49:51 -06:00 |
|
Michael Haag
|
5109ed792c
|
Update suspicious_driver_loaded_path.yml
|
2021-05-19 08:29:34 -06:00 |
|
Michael Haag
|
b3d12aaf91
|
Update schtasks_run_task_on_demand.yml
|
2021-05-19 08:24:01 -06:00 |
|
Michael Haag
|
e6df825b27
|
Update process_kill_base_on_file_path.yml
|
2021-05-19 08:21:30 -06:00 |
|
Michael Haag
|
134db53975
|
Update modify_acl_permission_to_files_or_folder.yml
|
2021-05-19 08:11:59 -06:00 |
|
Michael Haag
|
8e0c29a6a7
|
Update icacls_grant_command.yml
|
2021-05-19 08:08:39 -06:00 |
|
tccontre
|
99681d7f46
|
lndn1
|
2021-05-19 16:06:45 +02:00 |
|
Michael Haag
|
b592b27f8d
|
Update icacls_deny_command.yml
|
2021-05-19 07:19:26 -06:00 |
|
Michael Haag
|
53451f407d
|
Update hide_user_account_from_sign_in_screen.yml
|
2021-05-19 07:17:18 -06:00 |
|
Michael Haag
|
14b838e094
|
Update executables_or_script_creation_in_suspicious_path.yml
|
2021-05-19 07:13:11 -06:00 |
|
Michael Haag
|
2473db53a1
|
Update excessive_usage_of_taskkill.yml
|
2021-05-19 07:06:39 -06:00 |
|
Michael Haag
|
1b65498b30
|
Update excessive_usage_of_net_app.yml
|
2021-05-19 07:04:54 -06:00 |
|
Michael Haag
|
cf576cc1ab
|
Update excessive_usage_of_cacls_app.yml
|
2021-05-19 07:01:09 -06:00 |
|
Michael Haag
|
84b8fd6732
|
Update excessive_service_stop_attempt.yml
|
2021-05-19 06:59:04 -06:00 |
|
Michael Haag
|
fb5dc80beb
|
Update excessive_attempt_to_disable_services.yml
|
2021-05-19 06:55:09 -06:00 |
|