2360 Commits

Author	SHA1	Message	Date
srv-rr-gh-researchbt	75de8f40b8	Branch was auto-updated.	2022-10-18 11:23:53 -07:00
srv-rr-gh-researchbt	f7d938e663	Branch was auto-updated.	2022-10-18 11:23:50 -07:00
srv-rr-gh-researchbt	d3a8d6091a	Branch was auto-updated.	2022-10-18 11:23:46 -07:00
pyth0n1c	aef8daef2f	moved test file from detections folder to tests folder	2022-10-18 09:58:21 -07:00
josehelps	0219203fa9	adding 9 BA lolbas detection	2022-10-18 12:48:18 -04:00
mvelazco	142d52872f	updating detection	2022-10-18 11:36:29 -04:00
d1vious	e534b9dd94	adding 1 example	2022-10-17 14:35:42 -04:00
mvelazco	2afe6af188	fixing yaml issues	2022-10-17 11:44:39 -04:00
Michael Haag	744dd3c713	Data add to Forti	2022-10-15 06:43:09 -06:00
mvelazco	7bada443b3	Merge branch 'gcp_account_takeover' of github.com:splunk/security_content into gcp_account_takeover	2022-10-14 15:03:56 -04:00
mvelazco	744bc50190	adding 4 GCP account takeover detections	2022-10-14 15:03:54 -04:00
tccontre	6da0d7913a	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 17:50:56 +02:00
tccontre	0295a489d4	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 11:14:07 +02:00
tccontre	b67c3bf8ce	Update windows_mshta_execution_in_registry.test.yml	2022-10-14 10:45:52 +02:00
tccontre	135e12500f	mshta_reg	2022-10-14 10:28:30 +02:00
patel-bhavin	56abcaeb12	new sourcetype	2022-10-13 18:07:01 -07:00
patel-bhavin	92f0ff7f5f	gcp_stdev	2022-10-13 15:58:37 -07:00
Michael Haag	5ad0c5b3d6	BA	2022-10-13 14:59:54 -06:00
patel-bhavin	cd70fb50e7	adding gcp configs	2022-10-12 18:09:41 -07:00
Michael Haag	571efe6385	analytics	2022-10-12 14:12:34 -06:00
Michael Haag	df804a8343	ProxyShell ProxyNotShell Behavior Detected	2022-10-09 07:31:02 -06:00
Michael Haag	8f9257f883	rename	2022-10-09 06:58:13 -06:00
Michael Haag	343a8d3698	Updates + new	2022-10-05 10:20:07 -06:00
patel-bhavin	9c1f8bccc4	new SFA detection	2022-10-04 13:48:48 -07:00
patel-bhavin	47b0525a18	mfa_disabled	2022-10-04 11:50:03 -07:00
Michael Haag	517048e2b8	Merge branch 'develop' into exchange2shell	2022-10-04 04:43:34 -06:00
Michael Haag	60310f355b	Windows Exchange Autodiscover Abuse	2022-10-03 22:07:25 -06:00
srv-rr-gh-researchbt	9a30a90fea	Branch was auto-updated.	2022-10-03 17:04:14 -07:00
srv-rr-gh-researchbt	5f93886f62	Branch was auto-updated.	2022-10-03 17:04:07 -07:00
patel-bhavin	07a9ec11c9	new detectoion	2022-10-03 16:48:23 -07:00
patel-bhavin	e39385fb34	new_mfa_Detections	2022-10-03 15:42:16 -07:00
srv-rr-gh-researchbt	a61ae71c5f	Branch was auto-updated.	2022-10-03 13:18:06 -07:00
srv-rr-gh-researchbt	c38c37a71f	Branch was auto-updated.	2022-10-03 13:18:03 -07:00
Bhavin Patel	8a6bc4e348	Merge branch 'develop' into OktaHaag	2022-10-03 13:15:37 -07:00
srv-rr-gh-researchbt	7bf4f766ae	Branch was auto-updated.	2022-09-29 11:11:47 -07:00
srv-rr-gh-researchbt	df9f9af37f	Branch was auto-updated.	2022-09-29 11:11:44 -07:00
Michael Haag	a1880f5770	data fix	2022-09-27 09:55:53 -06:00
Michael Haag	63f679f2fc	Office Product Spawning Windows Script Host	2022-09-27 08:00:34 -06:00
pyth0n1c	c640bd2b53	Branch was auto-updated.	2022-09-26 17:15:20 -07:00
pyth0n1c	033aaf8fcf	Branch was auto-updated.	2022-09-26 17:15:15 -07:00
pyth0n1c	5c0cf5ab00	Branch was auto-updated.	2022-09-26 17:15:12 -07:00
pyth0n1c	7c545cbce4	Branch was auto-updated.	2022-09-26 17:15:10 -07:00
patel-bhavin	86c4816f98	nnew detection and multiple searches	2022-09-26 16:25:49 -05:00
patel-bhavin	0c0603e701	password spray detection std dev	2022-09-26 15:56:29 -05:00
Michael Haag	94787c626f	New content	2022-09-26 13:00:17 -06:00
Jose Enrique Hernandez	1557acd7ab	Update ssa___windows_system_binary_proxy_execution_compiled_html_file_decompile.test.yml	2022-09-26 10:16:04 -04:00
tccontre	16d4d226c3	agent-with-tesla-2	2022-09-21 10:27:23 +02:00
pyth0n1c	5bad55c6d8	Branch was auto-updated.	2022-09-16 12:53:49 -07:00
Michael Haag	593c433ae8	fixes ... fixes	2022-09-16 12:47:19 -06:00
Michael Haag	6d1734b902	msdt	2022-09-15 13:43:28 -06:00