7871 Commits

Author SHA1 Message Date
github-actions[bot] 387ff82093 Branch was auto-updated. 2021-06-23 18:46:49 +00:00
Jose Enrique Hernandez 14a21d531e Merge pull request #1405 from splunk/dependabot/pip/azure-mgmt-network-19.0.0
Bump azure-mgmt-network from 16.0.0 to 19.0.0
2021-06-23 14:46:32 -04:00
github-actions[bot] b70a65f32f Branch was auto-updated. 2021-06-23 17:54:42 +00:00
github-actions[bot] 8894544766 Branch was auto-updated. 2021-06-23 17:54:35 +00:00
Bhavin Patel fd7b7b43d3 Merge pull request #1435 from splunk/den-haag
The Haag Beyond the Pines
2021-06-23 12:54:15 -05:00
Bhavin Patel b276ecf8fb Update script_execution_via_wmi.yml 2021-06-23 12:41:34 -05:00
Bhavin Patel 285b2c5006 Update process_execution_via_wmi.yml 2021-06-23 11:57:28 -05:00
github-actions[bot] 81b916991d Branch was auto-updated. 2021-06-22 21:32:16 +00:00
github-actions[bot] d5533ca607 Branch was auto-updated. 2021-06-22 21:32:15 +00:00
github-actions[bot] 320d3b2e8e Branch was auto-updated. 2021-06-22 21:32:10 +00:00
Michael Haag 5e8318af65 Merge pull request #1453 from splunk/TR-745_refactor
TR-745 - Refactor Windows Event Log Cleared detections
2021-06-22 15:31:55 -06:00
mhaag-spl f164626ac8 Updated Windows event log cleared 2021-06-22 14:59:47 -06:00
root 192c2159f8 Added detection testing service results inSuspicious Event Log Service Behavior 2021-06-22 20:45:30 +00:00
mhaag-spl 15a86efb80 Update suspicious_event_log_service_behavior.yml 2021-06-22 14:24:22 -06:00
github-actions[bot] 8fef77f716 Branch was auto-updated. 2021-06-22 20:01:05 +00:00
github-actions[bot] a880b5c101 Branch was auto-updated. 2021-06-22 20:00:58 +00:00
github-actions[bot] e03fde8770 Branch was auto-updated. 2021-06-22 20:00:55 +00:00
github-actions[bot] 30e4b35d56 Branch was auto-updated. 2021-06-22 20:00:53 +00:00
mvelazco 960a398f80 Merge pull request #1446 from splunk/deprecation_of_detections
Deprecation of detections
2021-06-22 16:00:35 -04:00
divious1 8c150335fd readding mitre lookup it was a mistake I left in here 2021-06-22 15:56:14 -04:00
github-actions[bot] 208fb06daa Branch was auto-updated. 2021-06-22 14:26:42 +00:00
github-actions[bot] 359e9e861e Branch was auto-updated. 2021-06-22 14:26:39 +00:00
github-actions[bot] da3ac94544 Branch was auto-updated. 2021-06-22 14:26:39 +00:00
github-actions[bot] 05c441a480 Branch was auto-updated. 2021-06-22 14:26:33 +00:00
github-actions[bot] 14980f46b5 Branch was auto-updated. 2021-06-22 14:26:32 +00:00
peter 8e6733e922 Merge pull request #1454 from splunk/ssa_remove_old_lolbas
Removing old, deprecated version of the parent-child-lolbas detection
2021-06-22 09:26:09 -05:00
peter-cg eeddaf1200 Removing old, deprecated version of the parent-child-lolbas detection 2021-06-22 09:23:48 -05:00
github-actions[bot] 0304f6dda9 Branch was auto-updated. 2021-06-22 02:30:41 +00:00
github-actions[bot] ddaef35ab4 Branch was auto-updated. 2021-06-22 02:30:40 +00:00
github-actions[bot] b53edbf0a2 Branch was auto-updated. 2021-06-22 02:30:35 +00:00
github-actions[bot] 733c071bb1 Branch was auto-updated. 2021-06-22 02:30:34 +00:00
github-actions[bot] 35ac3c38a1 Branch was auto-updated. 2021-06-22 02:30:32 +00:00
peter 3008438d10 Merge pull request #1447 from splunk/TR-724_fixing_bodies_error
TR-723 fixing bodies error
2021-06-21 21:30:15 -05:00
mhaag-spl 4166bb3104 Update windows_event_log_cleared.yml 2021-06-21 16:15:10 -06:00
mhaag-spl b7e73f5f60 quick updates 2021-06-21 16:14:31 -06:00
mvelazco ee1362204b Merge branch 'TR-745_refactor' of github.com:splunk/security_content into TR-745_refactor 2021-06-21 17:54:47 -04:00
mvelazco 19ea75d969 adding references 2021-06-21 17:50:09 -04:00
mhaag-spl b3d2ddba58 Minor fixes 2021-06-21 15:47:47 -06:00
mvelazco e4f5a3894d fixing errors
fixing filter name
2021-06-21 17:10:54 -04:00
mvelazco 8d0b0caa91 Update suspicious_event_log_service_behavior.yml
updating filter name
2021-06-21 16:45:52 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
mhaag-spl ad85879e89 Fixing descriptions 2021-06-18 13:41:54 -06:00
root f612fd6d3e Added detection testing service results inRemote WMI Command Attempt 2021-06-18 17:22:24 +00:00
mhaag-spl 35492c75fb wrong data 2021-06-18 11:00:34 -06:00
mhaag-spl a7b838d473 Update script_execution_via_wmi.yml 2021-06-18 10:58:38 -06:00
mhaag-spl f39a270c0e Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 10:55:03 -06:00
mhaag-spl 2b9f393585 Update script_execution_via_wmi.yml 2021-06-18 10:54:52 -06:00
Detection Testing Service ca4ad15654 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 16:53:51 +00:00
root 7d543761b6 Added detection testing service results inDetect WMI Event Subscription Persistence 2021-06-18 16:53:50 +00:00
mhaag-spl 1d95339bbd Update script_execution_via_wmi.yml 2021-06-18 10:52:51 -06:00