tccontre
|
e2bbcdb9b9
|
ssa_sdelete
|
2021-11-17 11:20:05 +01:00 |
|
tccontre
|
5a93a95a75
|
ssa_sdelete
|
2021-11-17 11:16:54 +01:00 |
|
mvelazco
|
f521e76d0a
|
adding two extra detections
|
2021-11-16 17:41:01 -05:00 |
|
mvelazco
|
37845b815d
|
adding 2 extra detections
|
2021-11-15 22:42:22 -05:00 |
|
mhaag-spl
|
ee3e77b45c
|
DefaultAccount
|
2021-11-15 14:30:14 -07:00 |
|
mhaag-spl
|
084e781385
|
dcrypt
|
2021-11-15 14:22:39 -07:00 |
|
mhaag-spl
|
7f5475ff8b
|
plink
|
2021-11-15 14:17:20 -07:00 |
|
mvelazco
|
d7e88b2e1a
|
adding first two detections
|
2021-11-15 15:09:47 -05:00 |
|
tccontre
|
e6cc42371e
|
minor_ssa_update
|
2021-11-15 11:39:06 +01:00 |
|
mhaag-spl
|
878c0c775b
|
InstallUTIL 🍺
|
2021-11-12 13:05:19 -07:00 |
|
mvelazco
|
aebcc438f4
|
fixing test yml
|
2021-11-12 14:45:56 -05:00 |
|
mvelazco
|
44d590dc2b
|
fixing test file
|
2021-11-12 13:14:45 -05:00 |
|
mvelazco
|
a1a28600d0
|
datasets ready
|
2021-11-12 13:11:10 -05:00 |
|
mhaag-spl
|
1d2a186ed7
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-12 08:08:00 -07:00 |
|
mhaag-spl
|
a5a1157c77
|
Update wmic_xsl_execution_via_url.test.yml
|
2021-11-12 08:07:59 -07:00 |
|
Bhavin Patel
|
af8e4ff6c6
|
Branch was auto-updated.
|
2021-11-12 06:49:39 -08:00 |
|
mhaag-spl
|
e65c62b66b
|
The Prodigal Haag Returns
|
2021-11-12 05:29:31 -07:00 |
|
Bhavin Patel
|
a7437132e8
|
Branch was auto-updated.
|
2021-11-11 14:37:46 -08:00 |
|
mvelazco
|
47087cfc08
|
initial 5 new detections and update on existing
|
2021-11-11 17:23:13 -05:00 |
|
patel-bhavin
|
464d42703b
|
remove test file
|
2021-11-11 11:46:56 -08:00 |
|
Bhavin Patel
|
34f5e4a8bb
|
Branch was auto-updated.
|
2021-11-10 10:38:51 -08:00 |
|
mhaag-spl
|
cdabce8248
|
🍺
|
2021-11-10 10:53:55 -07:00 |
|
Bhavin Patel
|
c592310865
|
Branch was auto-updated.
|
2021-11-10 09:41:39 -08:00 |
|
mhaag-spl
|
7b82199ce9
|
Curl to upload
|
2021-11-10 08:59:59 -07:00 |
|
mhaag-spl
|
205f059ed2
|
updated
|
2021-11-10 05:53:31 -07:00 |
|
mhaag-spl
|
24779bc8ef
|
Update winevent_windows_task_scheduler_event_action_started.test.yml
|
2021-11-09 13:47:05 -07:00 |
|
mhaag-spl
|
9ef1d009e8
|
Update winevent_windows_task_scheduler_event_action_started.test.yml
|
2021-11-09 13:18:00 -07:00 |
|
tccontre
|
dbce330eb0
|
fix_issues
|
2021-11-09 13:14:31 +01:00 |
|
tccontre
|
2230e866b4
|
fix_issues
|
2021-11-09 11:47:06 +01:00 |
|
Bhavin Patel
|
d6135381ad
|
Branch was auto-updated.
|
2021-11-03 15:58:14 -07:00 |
|
patel-bhavin
|
da9d9ae021
|
updates
|
2021-11-03 13:40:22 -07:00 |
|
Bhavin Patel
|
571276f9f5
|
Branch was auto-updated.
|
2021-11-02 09:57:01 -07:00 |
|
Bhavin Patel
|
a23b06e780
|
Branch was auto-updated.
|
2021-10-28 11:18:44 -07:00 |
|
Bhavin Patel
|
cd5dac3ebf
|
Branch was auto-updated.
|
2021-10-28 11:18:42 -07:00 |
|
mhaag-spl
|
3dda0e6571
|
Update winevent_windows_task_scheduler_event_action_started.test.yml
|
2021-10-21 13:02:34 -06:00 |
|
mhaag-spl
|
0772e6352b
|
taskscheduler hunting
|
2021-10-21 09:56:27 -06:00 |
|
tccontre
|
bb1a684667
|
iceid_ttps
|
2021-10-21 12:24:22 +02:00 |
|
mhaag-spl
|
f7112aca62
|
fixes
|
2021-10-20 07:08:14 -06:00 |
|
tccontre
|
efdc9df9d5
|
iceid_ttps
|
2021-10-20 11:38:22 +02:00 |
|
mhaag-spl
|
f8d6ce147d
|
Curling
|
2021-10-19 10:44:17 -06:00 |
|
pyth0n1c
|
cebe2118e5
|
Fixed name of one of the test files.
|
2021-10-18 16:45:34 -07:00 |
|
tccontre
|
fc7e90bd37
|
iceid_ttps
|
2021-10-18 17:11:53 +02:00 |
|
tccontre
|
794adbe6f3
|
iceid_ttps
|
2021-10-18 16:56:46 +02:00 |
|
pyth0n1c
|
69b809579d
|
Fixed filenames on some tests. There were named
*.yml.test.yml instead of *.test.yml
|
2021-10-15 14:58:21 -07:00 |
|
mhaag-spl
|
9b8ff687ae
|
HaagRoast
|
2021-10-15 12:31:33 -06:00 |
|
tccontre
|
fce06ed262
|
Merge pull request #1700 from splunk/pterodactyl
Tomorrow Never Haags
|
2021-10-13 14:53:35 +02:00 |
|
mhaag-spl
|
69d72deb15
|
Delete powershell_reflective_load.test.yml
|
2021-10-08 12:37:20 -06:00 |
|
tccontre
|
5226dbd99c
|
privilege_escalation_persistence
|
2021-10-08 14:23:55 +02:00 |
|
tccontre
|
87e17c3505
|
privilege_escalation_persistence
|
2021-10-07 14:53:56 +02:00 |
|
tccontre
|
fb296c8508
|
privilege_escalation_persistence
|
2021-10-06 11:15:47 +02:00 |
|