Commit Graph

2360 Commits

Author SHA1 Message Date
tccontre e2bbcdb9b9 ssa_sdelete 2021-11-17 11:20:05 +01:00
tccontre 5a93a95a75 ssa_sdelete 2021-11-17 11:16:54 +01:00
mvelazco f521e76d0a adding two extra detections 2021-11-16 17:41:01 -05:00
mvelazco 37845b815d adding 2 extra detections 2021-11-15 22:42:22 -05:00
mhaag-spl ee3e77b45c DefaultAccount 2021-11-15 14:30:14 -07:00
mhaag-spl 084e781385 dcrypt 2021-11-15 14:22:39 -07:00
mhaag-spl 7f5475ff8b plink 2021-11-15 14:17:20 -07:00
mvelazco d7e88b2e1a adding first two detections 2021-11-15 15:09:47 -05:00
tccontre e6cc42371e minor_ssa_update 2021-11-15 11:39:06 +01:00
mhaag-spl 878c0c775b InstallUTIL 🍺 2021-11-12 13:05:19 -07:00
mvelazco aebcc438f4 fixing test yml 2021-11-12 14:45:56 -05:00
mvelazco 44d590dc2b fixing test file 2021-11-12 13:14:45 -05:00
mvelazco a1a28600d0 datasets ready 2021-11-12 13:11:10 -05:00
mhaag-spl 1d2a186ed7 Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag 2021-11-12 08:08:00 -07:00
mhaag-spl a5a1157c77 Update wmic_xsl_execution_via_url.test.yml 2021-11-12 08:07:59 -07:00
Bhavin Patel af8e4ff6c6 Branch was auto-updated. 2021-11-12 06:49:39 -08:00
mhaag-spl e65c62b66b The Prodigal Haag Returns 2021-11-12 05:29:31 -07:00
Bhavin Patel a7437132e8 Branch was auto-updated. 2021-11-11 14:37:46 -08:00
mvelazco 47087cfc08 initial 5 new detections and update on existing 2021-11-11 17:23:13 -05:00
patel-bhavin 464d42703b remove test file 2021-11-11 11:46:56 -08:00
Bhavin Patel 34f5e4a8bb Branch was auto-updated. 2021-11-10 10:38:51 -08:00
mhaag-spl cdabce8248 🍺 2021-11-10 10:53:55 -07:00
Bhavin Patel c592310865 Branch was auto-updated. 2021-11-10 09:41:39 -08:00
mhaag-spl 7b82199ce9 Curl to upload 2021-11-10 08:59:59 -07:00
mhaag-spl 205f059ed2 updated 2021-11-10 05:53:31 -07:00
mhaag-spl 24779bc8ef Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:47:05 -07:00
mhaag-spl 9ef1d009e8 Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:18:00 -07:00
tccontre dbce330eb0 fix_issues 2021-11-09 13:14:31 +01:00
tccontre 2230e866b4 fix_issues 2021-11-09 11:47:06 +01:00
Bhavin Patel d6135381ad Branch was auto-updated. 2021-11-03 15:58:14 -07:00
patel-bhavin da9d9ae021 updates 2021-11-03 13:40:22 -07:00
Bhavin Patel 571276f9f5 Branch was auto-updated. 2021-11-02 09:57:01 -07:00
Bhavin Patel a23b06e780 Branch was auto-updated. 2021-10-28 11:18:44 -07:00
Bhavin Patel cd5dac3ebf Branch was auto-updated. 2021-10-28 11:18:42 -07:00
mhaag-spl 3dda0e6571 Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-10-21 13:02:34 -06:00
mhaag-spl 0772e6352b taskscheduler hunting 2021-10-21 09:56:27 -06:00
tccontre bb1a684667 iceid_ttps 2021-10-21 12:24:22 +02:00
mhaag-spl f7112aca62 fixes 2021-10-20 07:08:14 -06:00
tccontre efdc9df9d5 iceid_ttps 2021-10-20 11:38:22 +02:00
mhaag-spl f8d6ce147d Curling 2021-10-19 10:44:17 -06:00
pyth0n1c cebe2118e5 Fixed name of one of the test files. 2021-10-18 16:45:34 -07:00
tccontre fc7e90bd37 iceid_ttps 2021-10-18 17:11:53 +02:00
tccontre 794adbe6f3 iceid_ttps 2021-10-18 16:56:46 +02:00
pyth0n1c 69b809579d Fixed filenames on some tests. There were named
*.yml.test.yml instead of *.test.yml
2021-10-15 14:58:21 -07:00
mhaag-spl 9b8ff687ae HaagRoast 2021-10-15 12:31:33 -06:00
tccontre fce06ed262 Merge pull request #1700 from splunk/pterodactyl
Tomorrow Never Haags
2021-10-13 14:53:35 +02:00
mhaag-spl 69d72deb15 Delete powershell_reflective_load.test.yml 2021-10-08 12:37:20 -06:00
tccontre 5226dbd99c privilege_escalation_persistence 2021-10-08 14:23:55 +02:00
tccontre 87e17c3505 privilege_escalation_persistence 2021-10-07 14:53:56 +02:00
tccontre fb296c8508 privilege_escalation_persistence 2021-10-06 11:15:47 +02:00