Michael Haag
|
29ab52ac0b
|
ProxyNotShell - A Tale of CVE-2022-41040 and CVE-2022-41082
|
2022-09-30 05:26:16 -06:00 |
|
Michael Haag
|
2fa429127b
|
CISA AA22-257A tag
|
2022-09-15 10:07:38 -06:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
truptilangalia-crest
|
179134e8ef
|
test:removed cim version
|
2022-02-08 12:05:05 +05:30 |
|
truptilangalia-crest
|
08f0ff6405
|
test: Removed tas with mapping from detection files
|
2022-01-31 19:46:09 +05:30 |
|
P4T12ICK
|
4fd8604b9a
|
removed SAAWS and automated_detection_testing flag
|
2022-01-27 09:50:45 +01:00 |
|
Detection Testing Service
|
6fd7a4e812
|
test: updated supported_tas to recommended_tas
|
2022-01-19 17:43:41 +05:30 |
|
P4T12ICK
|
338f22f7e2
|
fixed more detections
|
2022-01-18 13:13:30 +01:00 |
|
P4T12ICK
|
84092434a2
|
fixed more detections
|
2022-01-18 12:53:54 +01:00 |
|
rushabhs-crest
|
a4a1aead17
|
Merge branch 'splunk:develop' into test/enrich_detections
|
2022-01-13 13:10:39 +05:30 |
|
Detection Testing Service
|
a2b6fff739
|
test:updated ymls
|
2021-12-15 21:15:02 +05:30 |
|
tlangalia
|
343ceae12f
|
Updated detection files with supported TA list.
|
2021-12-14 13:27:55 +05:50 |
|
mhaag-spl
|
12c8dccc59
|
added T
|
2021-12-07 14:46:35 -07:00 |
|
tccontre
|
da17a2a938
|
CARS_UPDATE_MITRE_ID_B3
CARS_UPDATE_MITRE_ID_B3
|
2021-10-13 11:07:20 +02:00 |
|
root
|
dc5033186d
|
Added detection testing service results inDetect Exchange Web Shell, ProxyLogon
|
2021-10-05 16:18:46 +00:00 |
|
mhaag-spl
|
eb39fe5937
|
Updated PowerShell and Exchange Web Shell
|
2021-10-05 09:50:13 -06:00 |
|
research bot
|
2783c3fe43
|
updating docs and package bits [ci skip]
|
2021-09-09 19:07:07 +00:00 |
|
Bhavin Patel
|
07a732bf06
|
Update detect_exchange_web_shell.yml
|
2021-08-31 12:12:04 -07:00 |
|
mhaag-spl
|
dfab9d28b7
|
ProxyShell
|
2021-08-24 12:53:07 -06:00 |
|
P4T12ICK
|
5e6e987fb7
|
resolved merge conflicts
|
2021-07-21 09:22:09 +02:00 |
|
research bot
|
44ea56053d
|
updating docs and package bits [ci skip]
|
2021-07-20 21:12:30 +00:00 |
|
P4T12ICK
|
65a92a64e1
|
add analytic types to detections
|
2021-07-19 16:49:33 +02:00 |
|
mhaag-spl
|
72d6020209
|
RISKY FRISKY
|
2021-07-13 13:47:54 -06:00 |
|
research bot
|
6212932c35
|
updating docs and package bits [ci skip]
|
2021-03-25 19:35:07 +00:00 |
|
mhaag-spl
|
17cbdf590c
|
Update detect_exchange_web_shell.yml
|
2021-03-22 09:27:09 -06:00 |
|
root
|
3657fc8ea7
|
Added detection testing service results inDetect Exchange Web Shell, ProxyLogon
|
2021-03-22 12:54:27 +00:00 |
|
mhaag-spl
|
5f1b737ace
|
Update detect_exchange_web_shell.yml
|
2021-03-22 06:27:06 -06:00 |
|
mhaag-spl
|
a912985629
|
Update detect_exchange_web_shell.yml
|
2021-03-19 06:27:24 -06:00 |
|
mhaag-spl
|
1a15d623cf
|
Update detect_exchange_web_shell.yml
UID
|
2021-03-18 21:06:38 -06:00 |
|
mhaag-spl
|
34e69271f3
|
Updated Detect Exchange Web Shell
Updated Detect Exchange Web Shell based on data
|
2021-03-18 21:00:09 -06:00 |
|