 github-actions[bot]
|
456e4e3722
|
Branch was auto-updated.
|
2021-04-15 19:10:15 +00:00 |
|
|
github-actions[bot]
|
4e9f4a8175
|
Branch was auto-updated.
|
2021-04-15 19:10:14 +00:00 |
|
|
github-actions[bot]
|
7ada42b190
|
Branch was auto-updated.
|
2021-04-15 19:10:13 +00:00 |
|
|
github-actions[bot]
|
31f285a4b0
|
Branch was auto-updated.
|
2021-04-15 19:10:11 +00:00 |
|
|
github-actions[bot]
|
5373b817bc
|
Branch was auto-updated.
|
2021-04-15 19:10:10 +00:00 |
|
|
Jose Enrique Hernandez
|
85220f56bf
|
Merge pull request #1335 from splunk/saaws_appinspect
remove configs that are not needed by saaws
|
2021-04-15 15:09:53 -04:00 |
|
|
bpatel
|
cc3d3cd7e2
|
remove configs that are not needed by saaws
|
2021-04-15 12:00:29 -07:00 |
|
|
root
|
d6a32d4bd5
|
Added detection testing service results inAWS IAM AccessDenied Discovery Events
|
2021-04-15 18:47:13 +00:00 |
|
|
root
|
453b0accec
|
Added detection testing service results inAWS Excessive List Command Usage
|
2021-04-15 18:13:33 +00:00 |
|
|
tcontreras
|
07e5528918
|
Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach
|
2021-04-15 19:40:46 +02:00 |
|
|
tcontreras
|
7a0d9be5a5
|
spear_update
|
2021-04-15 19:39:21 +02:00 |
|
|
mvelazco
|
c84656c87b
|
adding one extra detection, NTLM spray with invalid users
|
2021-04-15 10:45:10 -04:00 |
|
|
mvelazco
|
e0cbf01590
|
adding 2 extra detections
|
2021-04-15 09:42:36 -04:00 |
|
|
root
|
8cd49a3f7a
|
Added detection testing service results inOffice Document Executing Macro Code
|
2021-04-15 08:25:53 +00:00 |
|
|
tccontre
|
0fa575ad4a
|
Delete office_application_spawned_cmd_shell.test.yml
|
2021-04-15 09:46:20 +02:00 |
|
|
tccontre
|
e85860be6c
|
Delete office_application_spawned_cmd_shell.yml
|
2021-04-15 09:46:00 +02:00 |
|
|
github-actions[bot]
|
81fad1383b
|
Branch was auto-updated.
|
2021-04-15 07:31:13 +00:00 |
|
|
github-actions[bot]
|
897c19c0ec
|
Branch was auto-updated.
|
2021-04-15 07:31:13 +00:00 |
|
|
github-actions[bot]
|
6dff266bb3
|
Branch was auto-updated.
|
2021-04-15 07:31:11 +00:00 |
|
|
github-actions[bot]
|
cf0ea3ca61
|
Branch was auto-updated.
|
2021-04-15 07:31:09 +00:00 |
|
|
github-actions[bot]
|
632bae41ca
|
Branch was auto-updated.
|
2021-04-15 07:31:08 +00:00 |
|
|
github-actions[bot]
|
788b1b9550
|
Branch was auto-updated.
|
2021-04-15 07:31:07 +00:00 |
|
|
github-actions[bot]
|
995bae1d0e
|
Branch was auto-updated.
|
2021-04-15 07:31:06 +00:00 |
|
|
github-actions[bot]
|
63af5b09a7
|
Branch was auto-updated.
|
2021-04-15 07:31:01 +00:00 |
|
|
P4T12ICK
|
274e5f1b43
|
Merge pull request #1334 from splunk/fix_malicious_ps_as_service
Added various ways to execute powershell, ...
|
2021-04-15 09:30:41 +02:00 |
|
|
root
|
a0914ddcdd
|
Added detection testing service results inMalicious Powershell Executed As A Service
|
2021-04-15 07:23:08 +00:00 |
|
|
Stanislav Miskovic
|
62ed90ccbd
|
Added various ways to execute powershell, made match of the powershell executable mandatory, added that execution must be followed by one of the hidding or no-exit options.
|
2021-04-14 22:46:38 -07:00 |
|
|
mhaag-spl
|
94eccb2565
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:28:49 -06:00 |
|
|
mhaag-spl
|
79bff151de
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:25:26 -06:00 |
|
|
mhaag-spl
|
f18542b214
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:23:30 -06:00 |
|
|
mhaag-spl
|
537be8ede4
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:17:59 -06:00 |
|
|
mhaag-spl
|
bc572e94fa
|
Update aws_iam_delete_policy.yml
|
2021-04-14 21:14:35 -06:00 |
|
|
mhaag-spl
|
8a81aee71b
|
AWS Detections
|
2021-04-14 21:10:46 -06:00 |
|
|
mvelazco
|
271bb6d85a
|
updaing password spraying detection names
|
2021-04-14 15:40:17 -04:00 |
|
|
github-actions[bot]
|
d4f3d601f7
|
Branch was auto-updated.
|
2021-04-14 19:27:21 +00:00 |
|
|
github-actions[bot]
|
f05f1210c4
|
Branch was auto-updated.
|
2021-04-14 19:27:20 +00:00 |
|
|
github-actions[bot]
|
3b09117d62
|
Branch was auto-updated.
|
2021-04-14 19:27:18 +00:00 |
|
|
github-actions[bot]
|
8775f8b463
|
Branch was auto-updated.
|
2021-04-14 19:27:16 +00:00 |
|
|
github-actions[bot]
|
13cedb2cc9
|
Branch was auto-updated.
|
2021-04-14 19:27:13 +00:00 |
|
|
github-actions[bot]
|
d0550f2202
|
Branch was auto-updated.
|
2021-04-14 19:27:12 +00:00 |
|
|
github-actions[bot]
|
9a942f0d23
|
Branch was auto-updated.
|
2021-04-14 19:27:10 +00:00 |
|
|
github-actions[bot]
|
beb49969cf
|
Branch was auto-updated.
|
2021-04-14 19:27:09 +00:00 |
|
|
Bhavin Patel
|
65b9300449
|
Merge pull request #1325 from splunk/fixing_deployments
Fixing deployments bug
|
2021-04-14 12:26:51 -07:00 |
|
|
bpatel
|
3d2a90f694
|
merge with develop
|
2021-04-14 12:18:36 -07:00 |
|
|
bpatel
|
fa72657d67
|
conflicts
|
2021-04-14 11:13:40 -07:00 |
|
|
mvelazco
|
4fa6bd1c72
|
pushing initial password spraying content
adding password spraying analytic story and the first detections
|
2021-04-14 14:00:05 -04:00 |
|
|
root
|
55885cf24b
|
Added detection testing service results inOffice Document Creating Schedule Task
|
2021-04-14 17:05:09 +00:00 |
|
|
root
|
ac1b96681e
|
Added detection testing service results inOffice Application Spawned CMD Shell
|
2021-04-14 16:35:28 +00:00 |
|
|
root
|
b8092f7981
|
Added detection testing service results inOffice Application Spawn rundll32 process
|
2021-04-14 16:12:49 +00:00 |
|
|
tcontreras
|
71b663937e
|
spear_detections
|
2021-04-14 16:00:16 +02:00 |
|