Commit Graph

1762 Commits

Author SHA1 Message Date
pyth0n1c 7d9ab52fee Branch was auto-updated. 2022-03-18 07:04:24 -07:00
mhaag-spl 6682521e40 SSA DotNet and LOLBin Analytics 2022-03-18 06:15:50 -06:00
pyth0n1c 0b0465ba0d Branch was auto-updated. 2022-03-18 00:09:19 -07:00
pyth0n1c 240955cdce Branch was auto-updated. 2022-03-18 00:09:18 -07:00
patel-bhavin 99829330c1 all the changes again 2022-03-16 13:35:48 -07:00
mvelazco 2cfe9dd271 updating test file 2022-03-15 16:41:59 -04:00
mvelazco 2acb812397 Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-03-15 16:37:08 -04:00
mvelazco 5eaba0d9dd adding golden ticket detection 2022-03-15 16:37:04 -04:00
pyth0n1c 505ab9f987 Branch was auto-updated. 2022-03-15 09:57:09 -07:00
pyth0n1c 8f19c1faea Branch was auto-updated. 2022-03-15 09:57:02 -07:00
pyth0n1c ada894cae9 Branch was auto-updated. 2022-03-15 03:48:32 -07:00
pyth0n1c ec81facd0c Branch was auto-updated. 2022-03-15 03:48:29 -07:00
pyth0n1c 2b52de4968 Branch was auto-updated. 2022-03-15 03:48:28 -07:00
tccontre 3e17633789 More_Registry 2022-03-15 10:39:08 +01:00
pyth0n1c 48c79663ac Branch was auto-updated. 2022-03-14 14:16:21 -07:00
pyth0n1c 1561ad0c5b Branch was auto-updated. 2022-03-14 14:16:20 -07:00
pyth0n1c e1e1fd66f5 Branch was auto-updated. 2022-03-14 14:16:17 -07:00
pyth0n1c dd3b778036 Branch was auto-updated. 2022-03-14 14:16:04 -07:00
tccontre 9c1d3dedd8 More_Registry 2022-03-14 14:01:48 +01:00
tccontre bcdff5f486 More_Registry 2022-03-14 11:51:51 +01:00
pyth0n1c d63cffe883 Updated name of detection and test files.
Updated path for data file, which has not been
uploaded yet.  Updated most of the fields in the
detection.
2022-03-11 18:09:09 -08:00
mvelazco 6302da697e adding new detection for Kerberos user enumeration 2022-03-11 11:11:18 -05:00
Bhavin Patel 5c6fbad1c2 Update unknown_process_using_the_kerberos_protocol.test.yml 2022-03-10 10:56:30 -08:00
mvelazco eb1e22a7bf Merge branch 'TR_1550_Kerberos_Coverage_2' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_2 2022-03-10 12:31:33 -05:00
mvelazco 6fc644f493 adding new detection 2022-03-10 12:31:31 -05:00
pyth0n1c 529603436e Branch was auto-updated. 2022-03-10 07:15:16 -08:00
pyth0n1c c34e7bde0a Branch was auto-updated. 2022-03-10 07:15:09 -08:00
P4T12ICK 10c25b2014 Refactored security content 2022-03-10 10:27:29 +01:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
mvelazco 94f0d8fb27 adding hew detection for over pass the hash technique 2022-03-08 14:41:37 -05:00
tccontre 3a4ec118b1 More_Registry 2022-03-08 12:32:39 +01:00
tccontre 60da2593e7 More_Registry 2022-03-08 12:14:56 +01:00
pyth0n1c 98f83c7469 First commit of initial detection work. Skeleton detection
is good, but may need more details.  Still need to work
on documentation in detection yaml file and uploading
the dataset
2022-03-04 17:13:18 -08:00
pyth0n1c 0ef77362db Branch was auto-updated. 2022-03-04 12:21:38 -08:00
pyth0n1c 30251bd629 Branch was auto-updated. 2022-03-04 12:21:31 -08:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
pyth0n1c 998204a6a5 Branch was auto-updated. 2022-03-04 09:33:57 -08:00
pyth0n1c be4dea31df Branch was auto-updated. 2022-03-04 09:33:49 -08:00
P4T12ICK 8937a5fec7 MacOS detections 2022-03-04 16:35:30 +01:00
pyth0n1c 33433e72d6 Branch was auto-updated. 2022-03-03 19:48:05 -08:00
mhaag-spl d57ee25f18 msb 2022-03-03 15:01:10 -07:00
mhaag-spl fbb5c6ab70 msbuild 2022-03-03 12:53:17 -07:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
pyth0n1c d012d6707d Branch was auto-updated. 2022-03-02 13:12:50 -08:00
pyth0n1c 3537572cb1 Branch was auto-updated. 2022-03-02 13:12:43 -08:00
pyth0n1c 6fbdb57f78 Branch was auto-updated. 2022-03-02 13:12:42 -08:00
pyth0n1c 130d8132d8 Branch was auto-updated. 2022-03-02 12:50:10 -08:00
pyth0n1c 2c2da3d113 Branch was auto-updated. 2022-03-02 12:50:07 -08:00
pyth0n1c d2fe38692c Branch was auto-updated. 2022-03-02 12:50:01 -08:00
pyth0n1c 3e1328b17a Branch was auto-updated. 2022-03-02 12:50:00 -08:00