2360 Commits

Author	SHA1	Message	Date
pyth0n1c	5c4d054652	Update linux_kernel_module_enumeration.test.yml ... Changing sourcetype from linux_sysmon --> sysmon_linux	2022-09-02 18:50:48 -04:00
mvelazco	3d308b862f	adding new detection	2022-09-02 18:25:34 -04:00
mvelazco	441a1542bd	adding new detection. fixing types. adding line to lookup	2022-09-02 18:03:14 -04:00
Michael Haag	6287645f48	BA	2022-09-02 14:44:39 -06:00
Michael Haag	affae7229d	SSA all things	2022-09-01 15:02:44 -06:00
tccontre	25ec32f85d	Merge branch 'brute-ratel-3' of github.com:splunk/security_content into brute-ratel-3	2022-09-01 15:18:54 +02:00
tccontre	c1491e38d1	brute-ratel-3	2022-09-01 15:18:30 +02:00
tccontre	a04fd01b34	Delete windows_gather_victim_identity_sam_info.test.yml	2022-09-01 13:20:14 +02:00
tccontre	42cf9d4d02	Delete windows_hijack_execution_flow_version_dll_side_load.test.yml	2022-09-01 13:20:04 +02:00
tccontre	183f1f689e	Delete windows_input_capture_using_credential_ui_dll.test.yml	2022-09-01 13:19:55 +02:00
tccontre	22721a4554	Delete windows_phishing_recent_iso_exec_registry.test.yml	2022-09-01 13:19:45 +02:00
tccontre	ce4f5e5ad3	Delete windows_remote_access_software_brc4_loaded_dll.test.yml	2022-09-01 13:19:35 +02:00
tccontre	506732a62b	brute-ratel-3	2022-09-01 13:16:24 +02:00
tccontre	1557a528cf	brute-ratel-2	2022-08-31 10:12:55 +02:00
mvelazco	9e94c62a6a	adding new detection	2022-08-30 18:25:25 -04:00
mvelazco	927d46a74e	adding new detection	2022-08-30 13:07:41 -04:00
tccontre	b401ed9d50	brute-ratel-2	2022-08-30 13:08:04 +02:00
mvelazco	79f7f9c16e	adding new detection	2022-08-29 17:00:05 -04:00
pyth0n1c	e000e583ca	Branch was auto-updated.	2022-08-26 11:42:39 -07:00
pyth0n1c	8046a7933e	Branch was auto-updated.	2022-08-26 11:42:38 -07:00
pyth0n1c	4de4752350	Branch was auto-updated.	2022-08-26 11:42:37 -07:00
pyth0n1c	22c7650bed	Branch was auto-updated.	2022-08-26 10:01:48 -07:00
pyth0n1c	8f2a3bd754	Branch was auto-updated.	2022-08-26 10:01:45 -07:00
pyth0n1c	f00171c89c	Branch was auto-updated.	2022-08-26 10:01:43 -07:00
pyth0n1c	bd2d1515cb	Branch was auto-updated.	2022-08-26 10:01:42 -07:00
mvelazco	2a0c7a69d1	adding new detection	2022-08-25 16:02:54 -04:00
mvelazco	779ec07f0e	adding description. updating dataset url	2022-08-24 11:13:03 -04:00
mvelazco	f0926a5372	update detections	2022-08-23 23:40:54 -04:00
mvelazco	0a6592b9e2	adding new detection. fixing another	2022-08-23 21:45:22 -04:00
mvelazco	63398504c5	Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence	2022-08-23 16:28:56 -04:00
mvelazco	63f87f5a12	adding new detection	2022-08-23 16:28:55 -04:00
pyth0n1c	0ae64ea317	Branch was auto-updated.	2022-08-23 13:05:57 -07:00
pyth0n1c	4788d6c4e3	Branch was auto-updated.	2022-08-23 13:05:54 -07:00
pyth0n1c	84ca877947	Branch was auto-updated.	2022-08-23 13:05:53 -07:00
pyth0n1c	a1b3e4c6f7	Branch was auto-updated.	2022-08-23 13:05:52 -07:00
pyth0n1c	7f5507a4c2	Branch was auto-updated.	2022-08-23 12:49:59 -07:00
pyth0n1c	6413bdb41c	Branch was auto-updated.	2022-08-23 12:49:58 -07:00
pyth0n1c	80c9e04de8	Branch was auto-updated.	2022-08-23 12:49:55 -07:00
pyth0n1c	58d617267b	Branch was auto-updated.	2022-08-23 12:49:53 -07:00
pyth0n1c	b1fc807d1c	Branch was auto-updated.	2022-08-23 12:49:52 -07:00
Michael Haag	8248278109	Remote Access Software	2022-08-22 21:57:53 -06:00
Michael Haag	13d400611a	LSA 🐍 SS	2022-08-22 21:16:12 -06:00
mvelazco	0a10ef85d6	fixing detection. adding azure_audit macro	2022-08-22 15:36:25 -04:00
Michael Haag	fd88c88762	Hijack Libraries	2022-08-19 14:37:29 -06:00
gowthamarajr	136cbb1ea8	Add detection for "Azure AD External Guest User Invited"	2022-08-19 10:39:07 -04:00
mvelazco	fae2c64476	adding new detection. other minor changes	2022-08-19 00:16:18 -04:00
mvelazco	38ee247989	Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence	2022-08-18 14:50:18 -04:00
mvelazco	7b137ad6b9	adding new detection and fixing a few others	2022-08-18 14:50:16 -04:00
gowthamarajr	41a7f4380e	Add 2 detections	2022-08-17 18:43:40 -04:00
d1vious	19f3a3b982	fixing on all places	2022-08-16 15:01:56 -04:00