Commit Graph

33 Commits

Author SHA1 Message Date
Rod Soto 8298acf18e powershelldetectionstaghermetic 2022-03-31 15:29:51 -07:00
P4T12ICK e6c8254ede Added automaticc generation of finding report 2022-03-14 12:12:48 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5
CARS_UPDATE_MITRE_ID_B5
2021-10-13 11:20:47 +02:00
root 36476e9d69 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-09-21 19:59:40 +00:00
Michael Haag c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm 2021-08-17 11:19:42 -06:00
mhaag-spl 20000828f3 Macro'd powershell 2021-08-17 11:15:36 -06:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
mvelazco 589d3f92ed fixing extra space 2021-07-20 13:53:50 -04:00
P4T12ICK 4ddd09fd87 add analytic types to detections 2021-07-19 17:12:54 +02:00
mvelazco 31496ca1b5 fixing variables on message 2021-07-14 14:40:09 -04:00
mvelazco 8a7629740c RBA support take 4 2021-07-13 14:28:33 -04:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
P4T12ICK d5d1298db9 fix a description 2021-01-25 18:28:25 +01:00
P4T12ICK daf978228e fix a description 2021-01-25 18:19:03 +01:00
root 40be1e58a8 Added detection testing service results inMalicious PowerShell Process With Obfuscation Techniques 2021-01-19 13:35:25 +00:00
P4T12ICK 094c88a6ce new test file 2021-01-19 14:17:24 +01:00
P4T12ICK feb909bb55 new test file 2021-01-19 14:08:44 +01:00
P4T12ICK 0d75faf323 new test file 2021-01-19 13:55:33 +01:00
P4T12ICK 81162132d7 wrong detections in deprecated 2020-12-16 15:59:08 +01:00
P4T12ICK c50404646b new test file 2020-11-23 11:37:22 +01:00
divious1 443d86c864 moved detections to their respective folders 2020-10-07 10:31:25 -04:00