 pyth0n1c
|
c76e167d05
|
Branch was auto-updated.
|
2022-01-10 13:06:25 -08:00 |
|
|
pyth0n1c
|
a2732c6644
|
Branch was auto-updated.
|
2022-01-10 13:06:24 -08:00 |
|
|
pyth0n1c
|
eff3b414f5
|
Branch was auto-updated.
|
2022-01-10 13:06:23 -08:00 |
|
|
pyth0n1c
|
efe19be3e0
|
Branch was auto-updated.
|
2022-01-10 13:06:21 -08:00 |
|
|
pyth0n1c
|
416b961f10
|
Branch was auto-updated.
|
2022-01-10 13:06:20 -08:00 |
|
|
pyth0n1c
|
5f00114818
|
Branch was auto-updated.
|
2022-01-10 13:06:19 -08:00 |
|
|
pyth0n1c
|
a6a7028bfa
|
Branch was auto-updated.
|
2022-01-10 13:06:18 -08:00 |
|
|
Bhavin Patel
|
43e2b40935
|
Merge pull request #1907 from splunk/linux_persist_priv_batch_2
linux_persist_priv_batch_2
|
2022-01-10 13:05:56 -08:00 |
|
|
Bhavin Patel
|
3362c243ae
|
Update linux_setuid_using_setcap_utility.yml
|
2022-01-10 12:59:21 -08:00 |
|
|
Bhavin Patel
|
26f945c52a
|
Update linux_setuid_using_setcap_utility.yml
|
2022-01-10 12:56:56 -08:00 |
|
|
Bhavin Patel
|
fabd820804
|
Update linux_setuid_using_chmod_utility.yml
|
2022-01-10 12:55:51 -08:00 |
|
|
Bhavin Patel
|
19d907da37
|
Update linux_service_started_or_enabled.yml
|
2022-01-10 12:53:45 -08:00 |
|
|
Bhavin Patel
|
a505181149
|
Update linux_service_restarted.yml
|
2022-01-10 12:52:25 -08:00 |
|
|
Bhavin Patel
|
8bd5c20eac
|
Update linux_file_creation_in_profile_directory.yml
|
2022-01-10 12:46:34 -08:00 |
|
|
Bhavin Patel
|
4a08f745b2
|
Update linux_service_file_created_in_systemd_directory.yml
|
2022-01-10 12:41:02 -08:00 |
|
|
Bhavin Patel
|
527d8103b8
|
Update linux_file_creation_in_profile_directory.yml
|
2022-01-10 12:33:47 -08:00 |
|
|
Bhavin Patel
|
2944d1690b
|
Update linux_file_creation_in_init_boot_directory.yml
|
2022-01-10 12:32:10 -08:00 |
|
|
Bhavin Patel
|
b60f4a2b5a
|
Update linux_file_creation_in_init_boot_directory.yml
|
2022-01-10 12:30:55 -08:00 |
|
|
d1vious
|
6edaa90519
|
updated generate to match javiers feedback
|
2022-01-10 15:12:30 -05:00 |
|
|
pyth0n1c
|
ff6b6c4397
|
Branch was auto-updated.
|
2022-01-10 12:11:52 -08:00 |
|
|
pyth0n1c
|
273bf8a809
|
Branch was auto-updated.
|
2022-01-10 12:11:51 -08:00 |
|
|
pyth0n1c
|
4e81a8f541
|
Branch was auto-updated.
|
2022-01-10 12:11:49 -08:00 |
|
|
pyth0n1c
|
aa4f1a8cbc
|
Branch was auto-updated.
|
2022-01-10 12:11:48 -08:00 |
|
|
pyth0n1c
|
f1c16ea6c9
|
Branch was auto-updated.
|
2022-01-10 12:11:47 -08:00 |
|
|
pyth0n1c
|
ef018cd9cb
|
Branch was auto-updated.
|
2022-01-10 12:11:45 -08:00 |
|
|
pyth0n1c
|
20cfa5d7db
|
Branch was auto-updated.
|
2022-01-10 12:11:37 -08:00 |
|
|
pyth0n1c
|
10e575a793
|
Branch was auto-updated.
|
2022-01-10 12:11:36 -08:00 |
|
|
pyth0n1c
|
787a5afd99
|
Branch was auto-updated.
|
2022-01-10 12:11:34 -08:00 |
|
|
Bhavin Patel
|
0bdcacd7b3
|
Merge pull request #1869 from splunk/T1059
The Haag at The Gates
|
2022-01-10 12:11:15 -08:00 |
|
|
d1vious
|
871a66ebae
|
changed to use srs and complex division
|
2022-01-10 14:59:29 -05:00 |
|
|
tccontre
|
856635f601
|
linux_persist_priv_batch_4
|
2022-01-10 12:51:04 +01:00 |
|
|
tccontre
|
ef99a8c8bc
|
Update linux_sudoers_tmp_file_creation.yml
|
2022-01-10 12:36:33 +01:00 |
|
|
tccontre
|
f48713b301
|
Update linux_possible_append_command_to_at_allow_config_file.yml
|
2022-01-10 09:46:50 +01:00 |
|
|
tccontre
|
265a1f0494
|
Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.yml
|
2022-01-10 09:44:05 +01:00 |
|
|
tccontre
|
72859e63e8
|
Update linux_possible_append_command_to_at_allow_config_file.yml
|
2022-01-10 09:43:33 +01:00 |
|
|
d1vious
|
067b6e5bbe
|
cleaning up detections
|
2022-01-07 16:04:51 -05:00 |
|
|
d1vious
|
20c0196d7f
|
moving things around
|
2022-01-07 16:04:21 -05:00 |
|
|
Jose Enrique Hernandez
|
6d206d9646
|
Merge pull request #1922 from splunk/doc_gen_remcos
Update docs for upcoming blog
|
2022-01-06 17:45:27 -05:00 |
|
|
Lou Stella
|
a8e2af5782
|
Update docs for upcoming blog
|
2022-01-06 16:38:33 -06:00 |
|
|
Jose Enrique Hernandez
|
b7597fc509
|
Merge pull request #1919 from splunk/playbook_mig_remcos
Playbook migration for remcos
|
2022-01-06 17:08:37 -05:00 |
|
|
Lou Stella
|
988f5d157a
|
Created test dataset & moved detection out of experimental
|
2022-01-06 16:08:08 -06:00 |
|
|
Lou Stella
|
049482c74c
|
Fixed casing per request
|
2022-01-06 15:16:52 -06:00 |
|
|
mhaag-spl
|
89f37444f4
|
Update msi_module_loaded_by_non_system_binary.yml
|
2022-01-06 10:06:40 -07:00 |
|
|
pyth0n1c
|
1dea66d75c
|
Added authorize.conf.tar to make it possible to delete data from completed searches properly.
|
2022-01-05 15:26:43 -08:00 |
|
|
pyth0n1c
|
64abbe4458
|
Significant changes. Most importantly, instead of a hard-coded wait time after uploading data, we poll to make sure that all the data has been indexed. When this is complete, we move ahead with the test. While this costs extra in terms of CPU and Disk access, it usually allows us to go much faster since wait time is usually just a few seconds. Better tracking of time per test and time estimation.
|
2022-01-05 14:39:13 -08:00 |
|
|
Lou Stella
|
334fb25cd0
|
Added malware hunt and contain playbook
|
2022-01-05 13:41:59 -06:00 |
|
|
Lou Stella
|
6819bb1be7
|
Added email notification for malware playbook
|
2022-01-05 13:28:38 -06:00 |
|
|
Lou Stella
|
e396a3b9d4
|
Added block_indicators playbook
|
2022-01-05 12:17:54 -06:00 |
|
|
root
|
9bcad3d21b
|
Added detection testing service results inLinux Change File Owner To Root
|
2022-01-05 16:34:58 +00:00 |
|
|
tccontre
|
cebc5ac4fd
|
Update linux_edit_cron_table_parameter.yml
|
2022-01-05 16:38:48 +01:00 |
|