Commit Graph

32 Commits

Author SHA1 Message Date
Michael Haag 29ab52ac0b ProxyNotShell - A Tale of CVE-2022-41040 and CVE-2022-41082 2022-09-30 05:26:16 -06:00
Michael Haag 2fa429127b CISA AA22-257A tag 2022-09-15 10:07:38 -06:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
Detection Testing Service 6fd7a4e812 test: updated supported_tas to recommended_tas 2022-01-19 17:43:41 +05:30
P4T12ICK 338f22f7e2 fixed more detections 2022-01-18 13:13:30 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
rushabhs-crest a4a1aead17 Merge branch 'splunk:develop' into test/enrich_detections 2022-01-13 13:10:39 +05:30
Detection Testing Service a2b6fff739 test:updated ymls 2021-12-15 21:15:02 +05:30
tlangalia 343ceae12f Updated detection files with supported TA list. 2021-12-14 13:27:55 +05:50
mhaag-spl 12c8dccc59 added T 2021-12-07 14:46:35 -07:00
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3
CARS_UPDATE_MITRE_ID_B3
2021-10-13 11:07:20 +02:00
root dc5033186d Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-10-05 16:18:46 +00:00
mhaag-spl eb39fe5937 Updated PowerShell and Exchange Web Shell 2021-10-05 09:50:13 -06:00
research bot 2783c3fe43 updating docs and package bits [ci skip] 2021-09-09 19:07:07 +00:00
Bhavin Patel 07a732bf06 Update detect_exchange_web_shell.yml 2021-08-31 12:12:04 -07:00
mhaag-spl dfab9d28b7 ProxyShell 2021-08-24 12:53:07 -06:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
P4T12ICK 65a92a64e1 add analytic types to detections 2021-07-19 16:49:33 +02:00
mhaag-spl 72d6020209 RISKY FRISKY 2021-07-13 13:47:54 -06:00
research bot 6212932c35 updating docs and package bits [ci skip] 2021-03-25 19:35:07 +00:00
mhaag-spl 17cbdf590c Update detect_exchange_web_shell.yml 2021-03-22 09:27:09 -06:00
root 3657fc8ea7 Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-03-22 12:54:27 +00:00
mhaag-spl 5f1b737ace Update detect_exchange_web_shell.yml 2021-03-22 06:27:06 -06:00
mhaag-spl a912985629 Update detect_exchange_web_shell.yml 2021-03-19 06:27:24 -06:00
mhaag-spl 1a15d623cf Update detect_exchange_web_shell.yml
UID
2021-03-18 21:06:38 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell
Updated Detect Exchange Web Shell based on data
2021-03-18 21:00:09 -06:00