 bpatel
|
c0e9a5dc1d
|
search name and file renames
|
2021-04-20 13:10:00 -07:00 |
|
|
bpatel
|
3e44ef77fa
|
validate check for search length name
|
2021-04-20 12:49:32 -07:00 |
|
|
mhaag-spl
|
0a55bf791f
|
updated queries
|
2021-04-20 13:05:11 -06:00 |
|
|
root
|
dee37ff335
|
Added detection testing service results inOffice Document Spawned Child Process To Download
|
2021-04-20 16:04:58 +00:00 |
|
|
root
|
868af21f74
|
Added detection testing service results inGPUpdate with no Command Line Arguments with Network
|
2021-04-19 21:30:03 +00:00 |
|
|
mhaag-spl
|
64288e39c7
|
searchprotocolhost
|
2021-04-19 13:41:41 -06:00 |
|
|
mhaag-spl
|
4925bae6b5
|
typo
|
2021-04-19 13:13:17 -06:00 |
|
|
mhaag-spl
|
962aa311d2
|
Update dllhost_with_no_command_line_arguments_with_network.test.yml
|
2021-04-19 13:10:15 -06:00 |
|
|
mhaag-spl
|
1d6c20d587
|
dllhost and gpupdate fix
|
2021-04-19 13:08:04 -06:00 |
|
|
Detection Testing Service
|
9fb74f12ea
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-19 19:00:08 +00:00 |
|
|
root
|
b8e07910a4
|
Added detection testing service results inWinEvent Scheduled Task Created to Spawn Shell
|
2021-04-19 19:00:07 +00:00 |
|
|
mhaag-spl
|
5daf227b3f
|
gpupdate
|
2021-04-19 12:58:24 -06:00 |
|
|
mvelazco
|
a69c363313
|
Update active_directory_password_spraying.yml
update description
|
2021-04-19 14:54:00 -04:00 |
|
|
mhaag-spl
|
c143c99ad8
|
Update winevent_scheduled_task_created_to_spawn_shell.test.yml
|
2021-04-19 12:37:35 -06:00 |
|
|
root
|
b9d4c096b9
|
Added detection testing service results inRundll32 with no Command Line Arguments with Network
|
2021-04-19 18:17:41 +00:00 |
|
|
mhaag-spl
|
9579f2d708
|
Update rundll32_with_no_command_line_arguments_with_network.test.yml
|
2021-04-19 11:57:51 -06:00 |
|
|
root
|
868df41593
|
Added detection testing service results inShedule Task with HTTP Command Arguments
|
2021-04-19 17:26:14 +00:00 |
|
|
mhaag-spl
|
663d1b04a2
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-19 11:21:19 -06:00 |
|
|
mhaag-spl
|
b2dc244920
|
rundll32
|
2021-04-19 11:21:05 -06:00 |
|
|
root
|
8f119308cc
|
Added detection testing service results inWinEvent Scheduled Task Created Within Public Path
|
2021-04-19 16:58:36 +00:00 |
|
|
tcontreras
|
a5cf51e9d5
|
task_sched
|
2021-04-19 18:58:16 +02:00 |
|
|
mhaag-spl
|
ac370189ee
|
winevent fix
|
2021-04-19 10:39:42 -06:00 |
|
|
tcontreras
|
0e3bf4835f
|
spear2
|
2021-04-19 16:45:03 +02:00 |
|
|
tcontreras
|
3d390bc1d6
|
Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach
|
2021-04-19 16:41:30 +02:00 |
|
|
tcontreras
|
8f80520df7
|
spear
|
2021-04-19 16:40:53 +02:00 |
|
|
mvelazco
|
4cb46fcd21
|
Update active_directory_password_spraying.yml
description update
|
2021-04-16 10:48:18 -04:00 |
|
|
Stanislav Miskovic
|
6139a30ce7
|
Adding a more deterministic matching of command line options.
|
2021-04-15 15:49:59 -07:00 |
|
|
mhaag-spl
|
5d81ce6926
|
winevent public path
|
2021-04-15 15:14:50 -06:00 |
|
|
Michael Haag
|
5361b73924
|
Merge branch 'develop' into cloudywithachanceofhaags
|
2021-04-15 15:05:15 -06:00 |
|
|
mhaag-spl
|
18586f6bb0
|
winevents task registered
|
2021-04-15 14:54:22 -06:00 |
|
|
mhaag-spl
|
a74171d7e3
|
removals
|
2021-04-15 14:25:15 -06:00 |
|
|
root
|
cc38063d6f
|
Added detection testing service results inAWS IAM Successful Group Deletion
|
2021-04-15 20:16:33 +00:00 |
|
|
root
|
10d6fccda7
|
Added detection testing service results inAWS IAM Failure Group Deletion
|
2021-04-15 19:53:19 +00:00 |
|
|
research bot
|
a40dc12832
|
updating docs and package bits [ci skip]
|
2021-04-15 19:40:20 +00:00 |
|
|
Detection Testing Service
|
7c192a8e44
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-15 19:21:10 +00:00 |
|
|
root
|
7f30daf301
|
Added detection testing service results inAWS IAM Delete Policy
|
2021-04-15 19:21:10 +00:00 |
|
|
Detection Testing Service
|
7b0e2bbf68
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-15 19:17:21 +00:00 |
|
|
root
|
f07a6cd445
|
Added detection testing service results inAWS IAM Assume Role Policy Brute Force
|
2021-04-15 19:17:21 +00:00 |
|
|
github-actions[bot]
|
2e6fab0dc0
|
Branch was auto-updated.
|
2021-04-15 19:10:19 +00:00 |
|
|
github-actions[bot]
|
436906b79f
|
Branch was auto-updated.
|
2021-04-15 19:10:18 +00:00 |
|
|
github-actions[bot]
|
26ada2e1f7
|
Branch was auto-updated.
|
2021-04-15 19:10:17 +00:00 |
|
|
github-actions[bot]
|
456e4e3722
|
Branch was auto-updated.
|
2021-04-15 19:10:15 +00:00 |
|
|
github-actions[bot]
|
4e9f4a8175
|
Branch was auto-updated.
|
2021-04-15 19:10:14 +00:00 |
|
|
github-actions[bot]
|
7ada42b190
|
Branch was auto-updated.
|
2021-04-15 19:10:13 +00:00 |
|
|
github-actions[bot]
|
31f285a4b0
|
Branch was auto-updated.
|
2021-04-15 19:10:11 +00:00 |
|
|
github-actions[bot]
|
5373b817bc
|
Branch was auto-updated.
|
2021-04-15 19:10:10 +00:00 |
|
|
Jose Enrique Hernandez
|
85220f56bf
|
Merge pull request #1335 from splunk/saaws_appinspect
remove configs that are not needed by saaws
|
2021-04-15 15:09:53 -04:00 |
|
|
bpatel
|
cc3d3cd7e2
|
remove configs that are not needed by saaws
|
2021-04-15 12:00:29 -07:00 |
|
|
root
|
d6a32d4bd5
|
Added detection testing service results inAWS IAM AccessDenied Discovery Events
|
2021-04-15 18:47:13 +00:00 |
|
|
root
|
453b0accec
|
Added detection testing service results inAWS Excessive List Command Usage
|
2021-04-15 18:13:33 +00:00 |
|