 github-actions[bot]
|
bdff1aaeb8
|
Branch was auto-updated.
|
2021-04-22 18:19:49 +00:00 |
|
|
github-actions[bot]
|
3790936f7a
|
Branch was auto-updated.
|
2021-04-22 18:19:49 +00:00 |
|
|
Bhavin Patel
|
24c0967b15
|
Merge pull request #1343 from splunk/rename_product_splunk_behavioral_analytics
renaming product to new name
|
2021-04-22 11:19:34 -07:00 |
|
|
mhaag-spl
|
8491518f08
|
Update winword_spawning_windows_script_host.yml
|
2021-04-22 11:59:19 -06:00 |
|
|
mhaag-spl
|
aa62997e60
|
removed detections
|
2021-04-22 11:52:20 -06:00 |
|
|
Detection Testing Service
|
4ef58f8af2
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-22 17:49:23 +00:00 |
|
|
root
|
9c7965ed1f
|
Added detection testing service results inOffice Product Spawning Rundll32 with no DLL
|
2021-04-22 17:49:23 +00:00 |
|
|
Bhavin Patel
|
cf41087f7b
|
Update aws_iam_failure_group_deletion.yml
|
2021-04-22 10:47:38 -07:00 |
|
|
Bhavin Patel
|
60842e5dc9
|
Update aws_iam_delete_policy.yml
|
2021-04-22 10:46:57 -07:00 |
|
|
Bhavin Patel
|
69debe6e26
|
Update aws_iam_assume_role_policy_brute_force.yml
|
2021-04-22 10:46:16 -07:00 |
|
|
Bhavin Patel
|
fbb1986114
|
Update aws_iam_successful_group_deletion.yml
|
2021-04-22 10:44:46 -07:00 |
|
|
Bhavin Patel
|
102ccc889b
|
Update aws_iam_root_account_login.yml
|
2021-04-22 10:44:02 -07:00 |
|
|
Bhavin Patel
|
47212a6443
|
Update aws_iam_root_account_login.yml
|
2021-04-22 10:42:12 -07:00 |
|
|
Bhavin Patel
|
621a5ec81b
|
Update aws_iam_accessdenied_discovery_events.yml
|
2021-04-22 10:41:02 -07:00 |
|
|
mhaag-spl
|
56c645560a
|
Update winword_spawning_windows_script_host.test.yml
|
2021-04-22 11:29:59 -06:00 |
|
|
mhaag-spl
|
77d1364c16
|
Office Product Spawning Rundll32 with no DLL
|
2021-04-22 11:20:45 -06:00 |
|
|
root
|
ddf4aaf210
|
Added detection testing service results inWinword Spawning Cmd
|
2021-04-22 16:40:19 +00:00 |
|
|
Detection Testing Service
|
7a5e449119
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-22 16:22:45 +00:00 |
|
|
root
|
48acf37045
|
Added detection testing service results inSearchProtocolHost with no Command Line with Network
|
2021-04-22 16:22:45 +00:00 |
|
|
mhaag-spl
|
2b40cfec8b
|
remove root aws detections and update aws detection
|
2021-04-22 10:21:36 -06:00 |
|
|
mhaag-spl
|
88688f9960
|
duplicate detection
|
2021-04-22 10:10:47 -06:00 |
|
|
mhaag-spl
|
029c463ce8
|
Update searchprotocolhost_with_no_command_line_with_network.test.yml
|
2021-04-22 10:00:32 -06:00 |
|
|
mhaag-spl
|
b86ece00d8
|
Update winword_spawning_cmd.test.yml
|
2021-04-22 09:52:23 -06:00 |
|
|
mhaag-spl
|
c00de66c2f
|
winword cmd
|
2021-04-22 09:50:32 -06:00 |
|
|
root
|
57bfcdaf62
|
Added detection testing service results inExcessive Usage of NSLOOKUP App
|
2021-04-22 15:47:09 +00:00 |
|
|
root
|
9bb6de8ed2
|
Added detection testing service results inDNS Exfiltration Using Nslookup App
|
2021-04-22 15:29:40 +00:00 |
|
|
mhaag-spl
|
6973e30290
|
winword wsh
|
2021-04-22 09:23:46 -06:00 |
|
|
root
|
28a498daa7
|
Added detection testing service results inExcel Spawning Windows Script Host
|
2021-04-22 14:01:17 +00:00 |
|
|
tcontreras
|
6ed8a29e4e
|
fix_error
|
2021-04-22 15:48:54 +02:00 |
|
|
mhaag-spl
|
5f85f5e7e9
|
Excel WSH
|
2021-04-22 07:38:08 -06:00 |
|
|
tcontreras
|
162b9f0cc3
|
net_exfil
|
2021-04-22 15:37:09 +02:00 |
|
|
divious1
|
a8a69a97a5
|
renaming product to new name
|
2021-04-21 18:23:09 -04:00 |
|
|
Michael Haag
|
62473d7fb1
|
Update multiple_users_failing_to_authenticate_from_host_using_kerberos.yml
|
2021-04-21 15:04:57 -06:00 |
|
|
Michael Haag
|
e40721c648
|
Update multiple_disabled_users_failing_to_authenticate_from_host_using_kerberos.yml
|
2021-04-21 15:04:01 -06:00 |
|
|
mvelazco
|
0ae6b31e32
|
Merge branch 'develop' into password_spraying_TR-515
|
2021-04-21 13:56:43 -07:00 |
|
|
mvelazco
|
4647b51f9c
|
Fixing yaml issues
|
2021-04-21 16:54:55 -04:00 |
|
|
mvelazco
|
21d2a14ece
|
adding required fields
|
2021-04-21 16:17:06 -04:00 |
|
|
mvelazco
|
9782bf5029
|
removing detection with no dataset
|
2021-04-21 16:10:29 -04:00 |
|
|
mvelazco
|
6bfafdd4a5
|
removing unused filepath
|
2021-04-21 16:07:26 -04:00 |
|
|
mvelazco
|
35525253a4
|
file and detection name updates
|
2021-04-21 16:04:12 -04:00 |
|
|
divious1
|
2d5ea36b0f
|
upgrading detection to avoid FPs and also added bodies
|
2021-04-21 15:54:11 -04:00 |
|
|
root
|
c0835e27c4
|
Added detection testing service results inExcel Spawning PowerShell
|
2021-04-21 19:42:18 +00:00 |
|
|
mhaag-spl
|
93bde1ecea
|
Update excel_spawning_powershell.yml
|
2021-04-21 13:13:37 -06:00 |
|
|
mhaag-spl
|
59b1f289d7
|
Excel posh
|
2021-04-21 13:11:40 -06:00 |
|
|
root
|
94df7ff665
|
Added detection testing service results inDLLHost with no Command Line Arguments with Network
|
2021-04-21 18:14:25 +00:00 |
|
|
Detection Testing Service
|
9bce42d494
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-21 17:56:42 +00:00 |
|
|
root
|
b6ad8f0efb
|
Added detection testing service results inWinword Spawning PowerShell
|
2021-04-21 17:56:41 +00:00 |
|
|
mhaag-spl
|
ae87327c98
|
dllhost test again
|
2021-04-21 11:55:18 -06:00 |
|
|
mhaag-spl
|
5d51234dec
|
Update winword_spawning_powershell.yml
|
2021-04-21 11:34:42 -06:00 |
|
|
github-actions[bot]
|
d5b4f28efa
|
Branch was auto-updated.
|
2021-04-21 17:31:38 +00:00 |
|