Commit Graph

1762 Commits

Author SHA1 Message Date
pyth0n1c 91d785bac6 Branch was auto-updated. 2022-06-24 10:15:58 -07:00
mvelazco 757e6b92b8 updating field name to use ScriptBlockText 2022-06-24 11:18:28 -04:00
mvelazco 2637c12014 updating sourcetype to xmlwineventlog 2022-06-24 11:05:02 -04:00
gowthamarajr fd78ddcb6f Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections 2022-06-24 10:17:56 -04:00
gowthamarajr 0f23640526 Updating test file for PowerView SPN detection 2022-06-24 10:17:52 -04:00
tccontre e9137cc822 azorult-bomb2 2022-06-24 14:20:37 +02:00
pyth0n1c 3f7cd8dcc3 Branch was auto-updated. 2022-06-23 13:55:29 -07:00
pyth0n1c 6f30962fd6 Branch was auto-updated. 2022-06-23 13:55:27 -07:00
mhaag-spl 056b07a686 remove detection 2022-06-23 11:09:07 -06:00
tccontre 54a23a2a77 Update and rename windows_modify_registry_suppress_win_defender_notifs.test.yml to windows_modify_registry_suppress_win_defender_notif.test.yml 2022-06-23 15:25:17 +02:00
tccontre 5c85507b8f Update and rename windows_modify_registry_disable_windows_security_center_notifs.test.yml to windows_modify_registry_disable_windows_security_center_notif.test.yml 2022-06-23 15:24:51 +02:00
tccontre 71e4bd8ebf Update windows_modify_registry_disable_toast_notifications.test.yml 2022-06-23 13:57:11 +02:00
tccontre 8321cf9c1d Update and rename windows_modify_registry_disable_windows_security_center_notifications.test.yml to windows_modify_registry_disable_windows_security_center_notifs.test.yml 2022-06-23 13:35:02 +02:00
tccontre 2e4eac9eaa Update windows_modify_registry_suppress_win_defender_notifs.test.yml 2022-06-23 13:28:26 +02:00
tccontre c4f248b11b azorult-bomb 2022-06-23 12:38:07 +02:00
tccontre 9d9b782b4e azorult-bomb 2022-06-23 12:27:43 +02:00
gowthamarajr 28eefb325d adding 2 new detections for kerberoasting 2022-06-22 17:35:37 -04:00
pyth0n1c 8d67c4f0a2 Branch was auto-updated. 2022-06-22 07:17:50 -07:00
tccontre d2c419e596 azorult-bomb 2022-06-22 13:31:48 +02:00
pyth0n1c ff0a57e526 Branch was auto-updated. 2022-06-21 16:45:18 -07:00
pyth0n1c cc03d129c3 Branch was auto-updated. 2022-06-21 16:07:17 -07:00
pyth0n1c 62ed8fe817 Branch was auto-updated. 2022-06-21 16:07:16 -07:00
pyth0n1c b44da42de6 Branch was auto-updated. 2022-06-21 15:28:40 -07:00
pyth0n1c 6616463196 Branch was auto-updated. 2022-06-21 15:28:39 -07:00
pyth0n1c 6cbace8412 Branch was auto-updated. 2022-06-21 15:28:38 -07:00
patel-bhavin d5d0868005 merge from develop 2022-06-21 14:53:25 -07:00
pyth0n1c de30c530eb Branch was auto-updated. 2022-06-21 14:46:29 -07:00
pyth0n1c 25e4a180b1 Branch was auto-updated. 2022-06-21 14:46:28 -07:00
pyth0n1c c42c8acce2 Branch was auto-updated. 2022-06-21 14:46:22 -07:00
pyth0n1c 6b06ab718b Fixing a link to a dataset that has been moved. 2022-06-21 13:13:50 -07:00
Lou Stella e681b766c2 Fixing field name 2022-06-21 14:59:48 -05:00
Lou Stella 85f4f107a3 Changed to anomaly 2022-06-21 14:45:43 -05:00
patel-bhavin 2ea683be87 Merge branch 'develop' into inspired_2194 2022-06-21 11:04:27 -07:00
mhaag-spl 56394444ce fix 2022-06-17 13:09:37 -06:00
mhaag-spl 2788e8e63c path fix 2022-06-17 10:22:24 -06:00
mhaag-spl 9a25da4387 T1218.007 - MSIExec 2022-06-17 09:36:34 -06:00
tccontre bc57962c0c more-defense-evasion 2022-06-07 13:13:02 +02:00
tccontre 7c2dd368cd more-defense-evasion 2022-06-07 12:53:31 +02:00
tccontre 066ac9ffb3 more-defense-evasion 2022-06-07 11:50:27 +02:00
tccontre 136a3a1b92 detection-fix-due-to-splunk-time 2022-06-03 16:30:32 +02:00
pyth0n1c b19550f6c0 Branch was auto-updated. 2022-06-01 13:10:06 -07:00
patel-bhavin f4237cac86 updating datasets after sim 2022-06-01 12:34:48 -07:00
tccontre 223f4b73ba follina_path_traversal_update 2022-06-01 16:14:46 +02:00
pyth0n1c 588c301d84 Branch was auto-updated. 2022-05-31 10:32:07 -07:00
mhaag-spl 87a9aea4dd Complete Follina 2022-05-31 07:16:05 -06:00
tccontre 7153bf7b80 path_traversal 2022-05-30 15:44:52 +02:00
patel-bhavin 529faf008b adding files from PR 2194 2022-05-27 14:35:43 -07:00
patel-bhavin 236edce7e1 updating mitre ids and other metadata 2022-05-26 13:39:49 -07:00
pyth0n1c 048e8e469e Branch was auto-updated. 2022-05-23 13:38:43 -04:00
pyth0n1c 71f4f77b3e Branch was auto-updated. 2022-05-23 13:37:59 -04:00