Commit Graph

18530 Commits

Author SHA1 Message Date
Bhavin Patel 3002e2e963 Merge pull request #2339 from splunk/TR-2390_Additional_Azure_Detections
Update Azure AD Account Takeover Analytic Story
2022-09-14 11:17:05 -05:00
d1vious 864ee0cda7 Merge branch 'develop' into TR-2408_rba_search_improvements 2022-09-14 12:02:34 -04:00
tccontre 1d4f5c6921 Update windows_gather_victim_identity_sam_info.yml 2022-09-14 14:43:13 +02:00
tccontre 71ff090c37 Update windows_process_injection_with_public_source_path.yml 2022-09-14 14:39:40 +02:00
patel-bhavin a1023ca839 rename to account takeover 2022-09-13 19:26:11 -05:00
patel-bhavin 96e81ef195 adding test file updates 2022-09-13 18:49:00 -05:00
pyth0n1c e710cc4582 Wrong dataset file specified in the test file for bitsadmin_download_file.test.yml 2022-09-13 16:41:29 -07:00
patel-bhavin 10e820d817 search updates 2022-09-13 18:37:55 -05:00
pyth0n1c 5f95c424ce Path to wrong data files in creation_of_shadow_copy detection. This caused a CI failure because the proper events were not being replayed. 2022-09-13 15:48:46 -07:00
patel-bhavin 3a0fefff73 validationn 2022-09-13 17:40:20 -05:00
patel-bhavin 7ae6ec7be1 search updates and datasets 2022-09-13 17:37:24 -05:00
patel-bhavin b94575579a Merge branch 'lawsochaos_updates' of github.com:splunk/security_content into lawsochaos_updates 2022-09-13 17:19:48 -05:00
pyth0n1c 97af8730e5 Branch was auto-updated. 2022-09-13 13:53:09 -07:00
pyth0n1c 1093237e08 Branch was auto-updated. 2022-09-13 13:53:08 -07:00
pyth0n1c a5c171c3e0 Branch was auto-updated. 2022-09-13 13:53:08 -07:00
pyth0n1c 480a6e7d1d Branch was auto-updated. 2022-09-13 13:53:05 -07:00
pyth0n1c 697e7a9151 Branch was auto-updated. 2022-09-13 13:53:05 -07:00
pyth0n1c f3e0313032 Branch was auto-updated. 2022-09-13 13:53:04 -07:00
pyth0n1c 806c74e179 Branch was auto-updated. 2022-09-13 13:53:03 -07:00
pyth0n1c 4fe7e81c38 Branch was auto-updated. 2022-09-13 13:53:02 -07:00
pyth0n1c f8d4b08af5 Branch was auto-updated. 2022-09-13 13:53:01 -07:00
pyth0n1c 51ef75aa2d Branch was auto-updated. 2022-09-13 13:53:00 -07:00
pyth0n1c cf1e620611 Branch was auto-updated. 2022-09-13 13:52:59 -07:00
pyth0n1c 8812d838fa Branch was auto-updated. 2022-09-13 13:52:59 -07:00
pyth0n1c 766dee2cfa Branch was auto-updated. 2022-09-13 13:52:58 -07:00
pyth0n1c 8ed1be5c93 Branch was auto-updated. 2022-09-13 13:52:57 -07:00
d1vious 940598b6c2 pass CI testing 2022-09-13 16:52:39 -04:00
patel-bhavin 2c4745b22d Merge branch 'lawsochaos_updates' of github.com:splunk/security_content into lawsochaos_updates 2022-09-13 15:33:57 -05:00
patel-bhavin fd475e9625 adding datasets 2022-09-13 15:33:46 -05:00
Michael Haag 4978fdfc07 Some fixes 2022-09-13 12:53:25 -06:00
pyth0n1c 6f668df817 Branch was auto-updated. 2022-09-13 10:12:30 -07:00
pyth0n1c 58daa0c0c2 Branch was auto-updated. 2022-09-13 10:12:29 -07:00
pyth0n1c 8f15e2d351 Branch was auto-updated. 2022-09-13 10:12:28 -07:00
pyth0n1c 754583e5f5 Branch was auto-updated. 2022-09-13 10:12:27 -07:00
pyth0n1c c4f53b7ae4 Branch was auto-updated. 2022-09-13 10:12:26 -07:00
pyth0n1c b80ed32428 Branch was auto-updated. 2022-09-13 10:12:25 -07:00
pyth0n1c 12599b6566 Branch was auto-updated. 2022-09-13 10:12:24 -07:00
pyth0n1c 934844a293 Branch was auto-updated. 2022-09-13 10:12:23 -07:00
pyth0n1c 7664fe8dc4 Branch was auto-updated. 2022-09-13 10:12:22 -07:00
pyth0n1c 750e250fbb Branch was auto-updated. 2022-09-13 10:12:18 -07:00
pyth0n1c d792fcf09d Branch was auto-updated. 2022-09-13 10:12:17 -07:00
pyth0n1c 502fa10484 Branch was auto-updated. 2022-09-13 10:12:14 -07:00
pyth0n1c 87167f92a5 Branch was auto-updated. 2022-09-13 10:12:13 -07:00
pyth0n1c 439e903c3f Branch was auto-updated. 2022-09-13 10:12:12 -07:00
d1vious 64908593d4 adds RBA to correlation rule titles 2022-09-13 13:11:51 -04:00
Michael Haag fb15ba799a Update windows_identify_protocol_handlers.yml 2022-09-13 10:48:22 -06:00
Michael Haag a2b8a48b86 Merge branch 'develop' into TR-2408_rba_search_improvements 2022-09-13 10:42:16 -06:00
patel-bhavin 56917d780e 2352 2022-09-12 18:21:33 -05:00
Lou Stella 6d1fe61568 Adding _time 2022-09-12 12:29:37 -05:00
patel-bhavin c3dbdfa3cc updated search from 2343 2022-09-12 10:29:00 -05:00