Commit Graph

9119 Commits

Author SHA1 Message Date
tccontre 9844a5b656 n 2021-05-17 10:57:09 +02:00
tccontre 8273460c4a notes 2021-05-17 10:55:17 +02:00
tccontre 767f562d58 rns_notes 2021-05-17 10:50:49 +02:00
tcontreras 0f2607f04c Merge branch 'xmrig' of github.com:splunk/security_content into xmrig 2021-05-17 10:01:09 +02:00
tcontreras 3d3ff91c2b removed 2021-05-17 10:00:36 +02:00
tccontre 5aeeb51d5b Delete powershell.yml
already merged
2021-05-17 09:51:28 +02:00
tccontre e72000cca2 Delete ransomware_notes_bulk_creation.yml
already merged in other PR
2021-05-17 09:50:43 +02:00
tccontre e15810de9b Delete delete_shadowcopy_with_powershell.yml
already merged in other PR
2021-05-17 09:49:40 +02:00
tccontre 2bad2f8635 Delete delete_shadowcopy_with_powershell.test.yml
already in merged with other PR
2021-05-17 09:48:56 +02:00
tcontreras c89adcba8c remove_rel1 2021-05-14 10:06:16 +02:00
research bot e80bc45423 updating docs and package bits [ci skip] 2021-05-13 22:09:29 +00:00
github-actions[bot] 3ccb1368a8 Branch was auto-updated. 2021-05-13 21:41:03 +00:00
github-actions[bot] f63a6e9d20 Branch was auto-updated. 2021-05-13 21:40:59 +00:00
github-actions[bot] 33ad8f804c Branch was auto-updated. 2021-05-13 21:40:58 +00:00
github-actions[bot] 753083b7b8 Branch was auto-updated. 2021-05-13 21:40:56 +00:00
github-actions[bot] a729969172 Branch was auto-updated. 2021-05-13 21:40:55 +00:00
github-actions[bot] aa5dae7047 Branch was auto-updated. 2021-05-13 21:40:54 +00:00
github-actions[bot] dffab1a807 Branch was auto-updated. 2021-05-13 21:40:52 +00:00
Bhavin Patel 2c1bc16640 Merge pull request #1383 from splunk/darkside
Darkside Ransomware
v3.21.0
2021-05-13 14:40:29 -07:00
bpatel a55a6bff0a delete test file 2021-05-13 14:26:55 -07:00
bpatel 90cae048e2 Merge branch 'darkside' of github.com:splunk/security_content into darkside 2021-05-13 14:22:16 -07:00
bpatel 888aae21d3 moving to experimental 2021-05-13 14:22:07 -07:00
Michael Haag 9a7ac4edf8 Update slui_spawning_a_process.yml 2021-05-13 14:44:05 -06:00
Michael Haag eac3adc300 Update slui_runas_elevated.yml 2021-05-13 14:43:12 -06:00
Michael Haag 2d0c62921c Update detect_renamed_rclone.yml 2021-05-13 14:41:54 -06:00
Michael Haag 1acad6953e Update detect_rclone_command_line_usage.yml 2021-05-13 14:40:25 -06:00
Michael Haag 7c15ac9730 Update detect_rclone_command_line_usage.yml 2021-05-13 14:39:55 -06:00
Michael Haag 2d22e600c8 Update delete_shadowcopy_with_powershell.yml 2021-05-13 14:39:11 -06:00
bpatel 9fed6af501 Merge branch 'darkside' of github.com:splunk/security_content into darkside 2021-05-13 13:36:54 -07:00
bpatel d003c79d2f search_formatting 2021-05-13 13:36:28 -07:00
Michael Haag 0a5f0acc65 Update cmlua_or_cmstplua_uac_bypass.yml 2021-05-13 14:33:34 -06:00
Detection Testing Service e81a3eb9c8 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside 2021-05-13 20:14:19 +00:00
root 18ff60e231 Added detection testing service results inSLUI RunAs Elevated 2021-05-13 20:14:18 +00:00
root bab3434e54 Added detection testing service results inSLUI Spawning a Process 2021-05-13 20:11:55 +00:00
mhaag-spl dccb38e877 Update slui_spawning_a_process.yml 2021-05-13 13:34:37 -06:00
Detection Testing Service 485a811663 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside 2021-05-13 19:15:49 +00:00
root 8c175d5af3 Added detection testing service results inExtract SAM from Registry 2021-05-13 19:15:48 +00:00
Detection Testing Service 07ee4b0b62 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside 2021-05-13 19:15:06 +00:00
root 7b32d0f413 Added detection testing service results inDetect Renamed RClone 2021-05-13 19:15:05 +00:00
Detection Testing Service 6b94433de7 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside 2021-05-13 19:06:15 +00:00
root 13af359b6b Added detection testing service results inDetect RClone Command-Line Usage 2021-05-13 19:06:14 +00:00
root b3dd86837d Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass 2021-05-13 19:02:02 +00:00
tcontreras 54a3f8e3a7 com 2021-05-13 20:43:54 +02:00
bpatel 3f8f5aab30 conflicts 2021-05-13 11:39:51 -07:00
bpatel 2db1f87aff manifest errors 2021-05-13 11:38:40 -07:00
tcontreras 03e516338f com_obj 2021-05-13 20:35:56 +02:00
tcontreras d631a7e2f2 fail 2021-05-13 20:32:25 +02:00
bpatel fbe24284be Merge branch 'darkside' of github.com:splunk/security_content into darkside 2021-05-13 11:27:59 -07:00
tcontreras 118ea316b7 com 2021-05-13 20:24:04 +02:00
tcontreras eaae607c12 com_obj2 2021-05-13 20:21:22 +02:00