Detection Testing Service
|
66d9b7de7b
|
Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3
|
2021-03-02 17:58:45 +00:00 |
|
root
|
eb16361776
|
Added detection testing service results inSuspicious GPUpdate no Command Line Arguments
|
2021-03-02 17:58:44 +00:00 |
|
mhaag-spl
|
6952b99ea4
|
Update windows_disableantispyware_reg.yml
|
2021-03-02 10:53:49 -07:00 |
|
mhaag-spl
|
66b650d835
|
Windows DisableAntiSpyware Registry
|
2021-03-02 10:42:08 -07:00 |
|
Ignacio Bermudez Corrales
|
16b9deabf8
|
cant read from user repos
|
2021-03-02 09:37:23 -08:00 |
|
P4T12ICK
|
c43f7c8878
|
WIP
|
2021-03-02 18:06:15 +01:00 |
|
mhaag-spl
|
0e18f64414
|
powershell
|
2021-03-02 09:43:31 -07:00 |
|
P4T12ICK
|
34f64d972c
|
required_fields for detections
|
2021-03-02 10:32:55 +01:00 |
|
P4T12ICK
|
bc31f18450
|
Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing
|
2021-03-02 09:13:46 +01:00 |
|
P4T12ICK
|
fa561db694
|
wip
|
2021-03-02 09:13:27 +01:00 |
|
Ignacio Bermudez Corrales
|
1b0a0a4338
|
missing docker credentials
|
2021-03-02 00:02:35 -08:00 |
|
Ignacio Bermudez Corrales
|
742198d5e5
|
v0 of deployer
|
2021-03-01 23:52:22 -08:00 |
|
root
|
ef7af97e8e
|
Added detection testing service results inAWS Create Policy Version to allow all resources
|
2021-03-02 03:56:03 +00:00 |
|
divious1
|
3fc7550cdc
|
working hyper links
|
2021-03-01 22:04:55 -05:00 |
|
divious1
|
239745b2d6
|
added organized by kind for detections
|
2021-03-01 21:36:26 -05:00 |
|
mhaag-spl
|
16627bf207
|
update url
|
2021-03-01 18:28:25 -07:00 |
|
bpatel
|
46b623f7a0
|
tested on docker
|
2021-03-01 16:54:17 -08:00 |
|
bpatel
|
29a101da97
|
update local generator
|
2021-03-01 15:27:25 -08:00 |
|
root
|
17c68a56f0
|
Added detection testing service results inAWS Create Policy Version to allow all resources
|
2021-03-01 23:12:11 +00:00 |
|
mhaag-spl
|
9794fd13fb
|
Any PowerShell DownloadString
|
2021-03-01 16:02:36 -07:00 |
|
mhaag-spl
|
bd2c69ec28
|
Eventvwr UAC Bypass
|
2021-03-01 15:18:27 -07:00 |
|
bpatel
|
ea7ccd21bb
|
itworksss
|
2021-03-01 13:30:02 -08:00 |
|
bpatel
|
57871e4886
|
testing
|
2021-03-01 13:12:18 -08:00 |
|
mhaag-spl
|
bcbd2ebb19
|
Fodhelper uac bypass
|
2021-03-01 13:38:06 -07:00 |
|
mhaag-spl
|
5a09edf797
|
Suspicious Scheduled Task from Public Directory
|
2021-03-01 12:45:22 -07:00 |
|
bpatel
|
47dec9d123
|
test file
|
2021-03-01 11:27:29 -08:00 |
|
divious1
|
75c24a9f34
|
added markup
|
2021-03-01 13:49:16 -05:00 |
|
mhaag-spl
|
a576744f88
|
Ryuk Wake on LAN
|
2021-03-01 10:07:12 -07:00 |
|
P4T12ICK
|
05d3fad633
|
new test
|
2021-03-01 16:51:09 +01:00 |
|
P4T12ICK
|
a888b771c4
|
new test
|
2021-03-01 16:51:05 +01:00 |
|
P4T12ICK
|
edaf53ff1c
|
test
|
2021-03-01 16:44:26 +01:00 |
|
P4T12ICK
|
84984b453b
|
wip
|
2021-03-01 16:42:22 +01:00 |
|
mhaag-spl
|
ecb82ec8ca
|
Fixes
|
2021-03-01 06:52:02 -07:00 |
|
mhaag-spl
|
d265e72e8d
|
Silver Sparrow
|
2021-03-01 06:23:51 -07:00 |
|
P4T12ICK
|
dfab3ba794
|
small change
|
2021-03-01 13:13:37 +01:00 |
|
P4T12ICK
|
5e9bbaab75
|
attack data
|
2021-03-01 13:11:38 +01:00 |
|
P4T12ICK
|
f7f9db55d3
|
test branch
|
2021-03-01 10:36:45 +01:00 |
|
P4T12ICK
|
87e36c489e
|
test branch
|
2021-03-01 10:36:14 +01:00 |
|
P4T12ICK
|
30116dd3e8
|
add GitHub Service
|
2021-03-01 10:35:06 +01:00 |
|
P4T12ICK
|
e3b2e44776
|
add GitHub Service
|
2021-03-01 10:32:21 +01:00 |
|
miskoSplunk
|
7088a5ca43
|
Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml
|
2021-02-26 14:11:11 -08:00 |
|
miskoSplunk
|
9331a7899e
|
Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml
|
2021-02-26 14:10:40 -08:00 |
|
miskoSplunk
|
023b1d6a47
|
Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml
|
2021-02-26 14:10:15 -08:00 |
|
miskoSplunk
|
54d1c00df3
|
Delete ssa___credential_extraction_mimikatz_modules.test.yml
|
2021-02-26 14:09:56 -08:00 |
|
miskoSplunk
|
496e00240e
|
Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml
|
2021-02-26 14:09:26 -08:00 |
|
miskoSplunk
|
26c314a6c7
|
Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml
|
2021-02-26 14:09:11 -08:00 |
|
miskoSplunk
|
f6fa021edc
|
Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml
|
2021-02-26 14:08:49 -08:00 |
|
miskoSplunk
|
ceddaf134d
|
Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml
|
2021-02-26 14:08:05 -08:00 |
|
miskoSplunk
|
53842f55b0
|
Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml
|
2021-02-26 14:07:43 -08:00 |
|
miskoSplunk
|
cd84b7a659
|
Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml
|
2021-02-26 14:07:14 -08:00 |
|