 mhaag-spl
|
fe7817f28a
|
Update detect_html_help_renamed.yml
Fixing issue #1849
|
2021-11-29 13:43:41 -07:00 |
|
|
P4T12ICK
|
49170484ea
|
Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
|
2021-11-25 14:31:31 +01:00 |
|
|
Bhavin Patel
|
c778a2e35c
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
|
tccontre
|
2451defe2a
|
Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
|
2021-11-25 14:07:03 +01:00 |
|
|
Detection Testing Service
|
6d8151d915
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:13:52 +00:00 |
|
|
root
|
1b28033819
|
Added detection testing service results inPowershell Windows Defender Exclusion Commands
|
2021-11-25 12:13:51 +00:00 |
|
|
Detection Testing Service
|
724101f8ed
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
4ed89e21a2
|
Added detection testing service results inWindows Defender Exclusion Registry Entry
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
b6bb18d20c
|
Added detection testing service results inAdd or Set Windows Defender Exclusion
|
2021-11-25 11:55:39 +00:00 |
|
|
tccontre
|
dfd210cf29
|
remcos_evasion
|
2021-11-25 12:27:39 +01:00 |
|
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
|
tccontre
|
06b65d7163
|
Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
|
2021-11-25 10:25:05 +01:00 |
|
|
Bhavin Patel
|
0a01fb8181
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
|
Bhavin Patel
|
c753fb67c3
|
Branch was auto-updated.
|
2021-11-25 01:04:15 -08:00 |
|
|
P4T12ICK
|
a14e50ac10
|
Merge pull request #1847 from splunk/improvements
Improvements
|
2021-11-25 10:03:58 +01:00 |
|
|
P4T12ICK
|
e1844e0333
|
removed devsecops
|
2021-11-25 08:55:22 +01:00 |
|
|
P4T12ICK
|
2993c66134
|
Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:37:12 +01:00 |
|
|
P4T12ICK
|
40a80473a2
|
Merge branch 'develop' into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:36:33 +01:00 |
|
|
Bhavin Patel
|
28ad164d89
|
Branch was auto-updated.
|
2021-11-24 23:36:30 -08:00 |
|
|
Bhavin Patel
|
a619c9829e
|
Branch was auto-updated.
|
2021-11-24 23:36:29 -08:00 |
|
|
P4T12ICK
|
2eda496ddd
|
Merge pull request #1845 from splunk/ssa_test_ci_cd_pipeline
Ssa test ci cd pipeline
|
2021-11-25 08:36:00 +01:00 |
|
|
Bhavin Patel
|
c57f06c3a9
|
Branch was auto-updated.
|
2021-11-24 09:13:35 -08:00 |
|
|
Bhavin Patel
|
61b717f51d
|
Branch was auto-updated.
|
2021-11-24 09:13:34 -08:00 |
|
|
Bhavin Patel
|
fd77109f22
|
Branch was auto-updated.
|
2021-11-24 09:13:34 -08:00 |
|
|
Michael Haag
|
694e5ef724
|
Merge pull request #1844 from splunk/TR-1085_LateralMovement_3
Lateral Movement Content Update #3
|
2021-11-24 10:13:14 -07:00 |
|
|
Michael Haag
|
144b6971d2
|
Update wsmprovhost_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:08:13 -07:00 |
|
|
Michael Haag
|
097683ffbb
|
Update wmiprsve_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:07:35 -07:00 |
|
|
root
|
ba111107f8
|
Added detection testing service results inWindows Service Created Within Public Path
|
2021-11-24 15:24:21 +00:00 |
|
|
root
|
9f122d542c
|
Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn
|
2021-11-24 14:58:42 +00:00 |
|
|
mvelazco
|
42913444c4
|
update dataset location
|
2021-11-24 09:37:47 -05:00 |
|
|
P4T12ICK
|
1fa6e25756
|
ssa test ci cd
|
2021-11-24 15:14:31 +01:00 |
|
|
P4T12ICK
|
704e469362
|
ssa test ci cd
|
2021-11-24 14:38:08 +01:00 |
|
|
P4T12ICK
|
ebbc82c8c3
|
ssa test ci cd
|
2021-11-24 14:09:39 +01:00 |
|
|
P4T12ICK
|
7baeb01691
|
ssa test ci cd
|
2021-11-24 13:28:56 +01:00 |
|
|
P4T12ICK
|
e7a55b8d29
|
ssa test ci cd
|
2021-11-24 13:15:50 +01:00 |
|
|
P4T12ICK
|
b02e05a11c
|
ssa test ci cd
|
2021-11-24 13:12:39 +01:00 |
|
|
P4T12ICK
|
312209bea7
|
ssa test ci cd
|
2021-11-24 13:10:56 +01:00 |
|
|
P4T12ICK
|
395ef2c546
|
ssa test ci cd
|
2021-11-24 12:46:18 +01:00 |
|
|
P4T12ICK
|
2eea8708ed
|
ssa test ci cd
|
2021-11-24 12:34:55 +01:00 |
|
|
P4T12ICK
|
59b3520084
|
ssa test ci cd
|
2021-11-24 11:50:45 +01:00 |
|
|
P4T12ICK
|
b4e4c1385f
|
ssa test ci cd
|
2021-11-24 11:33:10 +01:00 |
|
|
P4T12ICK
|
9310c27941
|
ssa test ci cd
|
2021-11-24 09:17:42 +01:00 |
|
|
P4T12ICK
|
421aebbf68
|
ssa test ci cd
|
2021-11-24 08:28:45 +01:00 |
|
|
mvelazco
|
46aa673605
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 21:04:10 -05:00 |
|
|
mvelazco
|
33e9597304
|
updating logic and adding datasets
|
2021-11-23 21:04:04 -05:00 |
|
|
root
|
9e165574c0
|
Added detection testing service results inWsmprovhost.exe LOLBAS Execution Process Spawn
|
2021-11-24 01:53:58 +00:00 |
|
|
mvelazco
|
eba7f33aa9
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 20:33:28 -05:00 |
|
|
mvelazco
|
ad273d4ca1
|
update datasets
|
2021-11-23 20:33:27 -05:00 |
|
|
Detection Testing Service
|
25a60dfdc7
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-24 00:03:26 +00:00 |
|
|
root
|
6c45a549e3
|
Added detection testing service results inWmiprsve.exe LOLBAS Execution Process Spawn
|
2021-11-24 00:03:25 +00:00 |
|