Commit Graph

18530 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 5309d6546d Update ssa___credential_extraction_getaddbaccount_from_dump.yml 2021-04-28 13:52:05 -04:00
Jose Enrique Hernandez 1298161c3a Update ssa___credential_extraction_fgdump_cachedump_v_option.yml 2021-04-28 13:51:01 -04:00
Jose Enrique Hernandez c9953b5c8a Update ssa___credential_extraction_fgdump_cachedump_s_option.yml 2021-04-28 13:50:45 -04:00
Jose Enrique Hernandez ff215bb999 Update ssa___credential_extraction_dsinternals_modules.yml 2021-04-28 13:50:29 -04:00
Jose Enrique Hernandez 0ac46abe29 Update ssa___credential_extraction_dsinternals_conversion_modules.yml 2021-04-28 13:50:09 -04:00
Jose Enrique Hernandez f2953fe5ea Update ssa___attempted_credential_dump_from_registry_via_reg_exe.yml 2021-04-28 13:49:49 -04:00
Jose Enrique Hernandez 6e043a8e9a Update ssa___assess_credential_strength_via_dsinternals_modules.yml 2021-04-28 13:49:27 -04:00
Jose Enrique Hernandez 38706ea53e Update ssa___applying_stolen_credentials_via_powersploit_modules.yml 2021-04-28 13:49:01 -04:00
Jose Enrique Hernandez 76083b30b2 Update ssa___applying_stolen_credentials_via_mimikatz_modules.yml 2021-04-28 13:48:15 -04:00
Michael Haag 2b8ab04c98 Merge branch 'develop' into ssa_tbd 2021-04-28 10:28:39 -06:00
mhaag-spl 79dd8f833c all SSA TBD bodies Done 2021-04-28 10:25:26 -06:00
mhaag-spl 458147e1e7 SSA TBD 2021-04-27 14:32:30 -06:00
github-actions[bot] 468dd8bfaa Branch was auto-updated. 2021-04-27 17:56:18 +00:00
github-actions[bot] 645e03b42e Branch was auto-updated. 2021-04-27 17:56:17 +00:00
github-actions[bot] 8064cb61ad Branch was auto-updated. 2021-04-27 17:56:16 +00:00
github-actions[bot] 8bf1f213f4 Branch was auto-updated. 2021-04-27 17:56:15 +00:00
github-actions[bot] 213909a17c Branch was auto-updated. 2021-04-27 17:56:13 +00:00
github-actions[bot] b6f893a49a Branch was auto-updated. 2021-04-27 17:56:11 +00:00
github-actions[bot] 3c87ec47d8 Branch was auto-updated. 2021-04-27 17:56:09 +00:00
github-actions[bot] 0d86201ab8 Branch was auto-updated. 2021-04-27 17:56:08 +00:00
github-actions[bot] 84c4943005 Branch was auto-updated. 2021-04-27 17:56:07 +00:00
Bhavin Patel 82dea3c467 Merge pull request #1346 from splunk/Double-The-Haags
Double The Haag's
2021-04-27 10:55:50 -07:00
Detection Testing Service 4c23246262 Merge branch 'trickbot' of https://github.com/splunk/security_content into trickbot 2021-04-27 14:01:04 +00:00
root b54eec9d68 Added detection testing service results inWrite Executable in SMB Share 2021-04-27 14:01:03 +00:00
root ae67238718 Added detection testing service results inOffice Product Spawning MSHTA 2021-04-27 13:57:16 +00:00
root 4ace6d2556 Added detection testing service results inTrickbot Named Pipe 2021-04-27 13:51:45 +00:00
root 4f0dbbe5f6 Added detection testing service results inSchedule Task with Rundll32 Command Trigger 2021-04-27 13:34:47 +00:00
Detection Testing Service ddf322cb1e Merge branch 'Double-The-Haags' of https://github.com/splunk/security_content into Double-The-Haags 2021-04-27 13:07:53 +00:00
root aa4fed6f4d Added detection testing service results inOffice Product Spawning BITSAdmin 2021-04-27 13:07:53 +00:00
Detection Testing Service e9e49a3548 Merge branch 'Double-The-Haags' of https://github.com/splunk/security_content into Double-The-Haags 2021-04-27 13:05:05 +00:00
root a6f2d71e81 Added detection testing service results inOffice Product Spawning Wmic 2021-04-27 13:05:04 +00:00
root d4470a8910 Added detection testing service results inOffice Product Spawning CertUtil 2021-04-27 13:04:46 +00:00
mhaag-spl f8b712c04e Office products spawning things 2021-04-27 06:39:12 -06:00
github-actions[bot] 65a79da987 Branch was auto-updated. 2021-04-27 10:33:09 +00:00
github-actions[bot] 21de8d28c1 Branch was auto-updated. 2021-04-27 10:33:08 +00:00
github-actions[bot] f5d74c7804 Branch was auto-updated. 2021-04-27 10:33:06 +00:00
github-actions[bot] ba40b4a2f7 Branch was auto-updated. 2021-04-27 10:33:05 +00:00
github-actions[bot] 4d7d95cdfe Branch was auto-updated. 2021-04-27 10:33:03 +00:00
github-actions[bot] a27073cc68 Branch was auto-updated. 2021-04-27 10:33:02 +00:00
github-actions[bot] 5a6cb66607 Branch was auto-updated. 2021-04-27 10:33:00 +00:00
github-actions[bot] 08b4dd98d5 Branch was auto-updated. 2021-04-27 10:32:59 +00:00
github-actions[bot] 05ed80eb3c Branch was auto-updated. 2021-04-27 10:32:59 +00:00
github-actions[bot] c89fd74360 Branch was auto-updated. 2021-04-27 10:32:58 +00:00
tccontre 0b662dbc75 Merge pull request #1344 from splunk/net_exfil
net_exfil
2021-04-27 12:32:41 +02:00
Bhavin Patel f2b6938726 Update dns_exfiltration_using_nslookup_app.yml
fixing a minor typo
2021-04-26 13:15:22 -07:00
mhaag-spl 2b5eb6fbc4 Masquerading - detections + analytic story 2021-04-26 13:38:52 -06:00
github-actions[bot] 292659900f Branch was auto-updated. 2021-04-26 16:34:32 +00:00
github-actions[bot] 6b93f0b356 Branch was auto-updated. 2021-04-26 16:34:31 +00:00
github-actions[bot] 2d37cb3a40 Branch was auto-updated. 2021-04-26 16:34:30 +00:00
github-actions[bot] 800050d2db Branch was auto-updated. 2021-04-26 16:34:29 +00:00