Commit Graph

18530 Commits

Author SHA1 Message Date
github-actions[bot] 73d8b17a98 Branch was auto-updated. 2021-04-20 22:08:45 +00:00
Bhavin Patel ead6b26dfb Merge pull request #1339 from splunk/pyattck_bug
fixing pyattck bug plus some minor things with references
2021-04-20 15:08:29 -07:00
divious1 cfdef45bfb fixing pyattck bug plus some minor things with references 2021-04-20 18:02:44 -04:00
divious1 c829a64ddd updating reqs with latest pyattck 2021-04-20 17:55:06 -04:00
divious1 2efc199543 fixing minor doc gen bug 2021-04-20 17:44:12 -04:00
mvelazco c0169b76ee adding dataset metadata 2021-04-20 17:41:57 -04:00
mhaag-spl 310bbc8884 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-20 15:16:14 -06:00
bpatel 609c1e275e minor 2021-04-20 13:24:16 -07:00
bpatel 8e12d73bde minor 2021-04-20 13:14:33 -07:00
bpatel c0e9a5dc1d search name and file renames 2021-04-20 13:10:00 -07:00
bpatel 3e44ef77fa validate check for search length name 2021-04-20 12:49:32 -07:00
mhaag-spl 0a55bf791f updated queries 2021-04-20 13:05:11 -06:00
root dee37ff335 Added detection testing service results inOffice Document Spawned Child Process To Download 2021-04-20 16:04:58 +00:00
root 868af21f74 Added detection testing service results inGPUpdate with no Command Line Arguments with Network 2021-04-19 21:30:03 +00:00
mhaag-spl 64288e39c7 searchprotocolhost 2021-04-19 13:41:41 -06:00
mhaag-spl 4925bae6b5 typo 2021-04-19 13:13:17 -06:00
mhaag-spl 962aa311d2 Update dllhost_with_no_command_line_arguments_with_network.test.yml 2021-04-19 13:10:15 -06:00
mhaag-spl 1d6c20d587 dllhost and gpupdate fix 2021-04-19 13:08:04 -06:00
Detection Testing Service 9fb74f12ea Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-19 19:00:08 +00:00
root b8e07910a4 Added detection testing service results inWinEvent Scheduled Task Created to Spawn Shell 2021-04-19 19:00:07 +00:00
mhaag-spl 5daf227b3f gpupdate 2021-04-19 12:58:24 -06:00
mvelazco a69c363313 Update active_directory_password_spraying.yml
update description
2021-04-19 14:54:00 -04:00
mhaag-spl c143c99ad8 Update winevent_scheduled_task_created_to_spawn_shell.test.yml 2021-04-19 12:37:35 -06:00
root b9d4c096b9 Added detection testing service results inRundll32 with no Command Line Arguments with Network 2021-04-19 18:17:41 +00:00
mhaag-spl 9579f2d708 Update rundll32_with_no_command_line_arguments_with_network.test.yml 2021-04-19 11:57:51 -06:00
root 868df41593 Added detection testing service results inShedule Task with HTTP Command Arguments 2021-04-19 17:26:14 +00:00
mhaag-spl 663d1b04a2 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-19 11:21:19 -06:00
mhaag-spl b2dc244920 rundll32 2021-04-19 11:21:05 -06:00
root 8f119308cc Added detection testing service results inWinEvent Scheduled Task Created Within Public Path 2021-04-19 16:58:36 +00:00
tcontreras a5cf51e9d5 task_sched 2021-04-19 18:58:16 +02:00
mhaag-spl ac370189ee winevent fix 2021-04-19 10:39:42 -06:00
tcontreras 0e3bf4835f spear2 2021-04-19 16:45:03 +02:00
tcontreras 3d390bc1d6 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach 2021-04-19 16:41:30 +02:00
tcontreras 8f80520df7 spear 2021-04-19 16:40:53 +02:00
mvelazco 4cb46fcd21 Update active_directory_password_spraying.yml
description update
2021-04-16 10:48:18 -04:00
Stanislav Miskovic 6139a30ce7 Adding a more deterministic matching of command line options. 2021-04-15 15:49:59 -07:00
mhaag-spl 5d81ce6926 winevent public path 2021-04-15 15:14:50 -06:00
Michael Haag 5361b73924 Merge branch 'develop' into cloudywithachanceofhaags 2021-04-15 15:05:15 -06:00
mhaag-spl 18586f6bb0 winevents task registered 2021-04-15 14:54:22 -06:00
mhaag-spl a74171d7e3 removals 2021-04-15 14:25:15 -06:00
root cc38063d6f Added detection testing service results inAWS IAM Successful Group Deletion 2021-04-15 20:16:33 +00:00
root 10d6fccda7 Added detection testing service results inAWS IAM Failure Group Deletion 2021-04-15 19:53:19 +00:00
research bot a40dc12832 updating docs and package bits [ci skip] 2021-04-15 19:40:20 +00:00
Detection Testing Service 7c192a8e44 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-15 19:21:10 +00:00
root 7f30daf301 Added detection testing service results inAWS IAM Delete Policy 2021-04-15 19:21:10 +00:00
Detection Testing Service 7b0e2bbf68 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-15 19:17:21 +00:00
root f07a6cd445 Added detection testing service results inAWS IAM Assume Role Policy Brute Force 2021-04-15 19:17:21 +00:00
github-actions[bot] 2e6fab0dc0 Branch was auto-updated. 2021-04-15 19:10:19 +00:00
github-actions[bot] 436906b79f Branch was auto-updated. 2021-04-15 19:10:18 +00:00
github-actions[bot] 26ada2e1f7 Branch was auto-updated. 2021-04-15 19:10:17 +00:00