Commit Graph

18530 Commits

Author SHA1 Message Date
Detection Testing Service 66d9b7de7b Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3 2021-03-02 17:58:45 +00:00
root eb16361776 Added detection testing service results inSuspicious GPUpdate no Command Line Arguments 2021-03-02 17:58:44 +00:00
mhaag-spl 6952b99ea4 Update windows_disableantispyware_reg.yml 2021-03-02 10:53:49 -07:00
mhaag-spl 66b650d835 Windows DisableAntiSpyware Registry 2021-03-02 10:42:08 -07:00
Ignacio Bermudez Corrales 16b9deabf8 cant read from user repos 2021-03-02 09:37:23 -08:00
P4T12ICK c43f7c8878 WIP 2021-03-02 18:06:15 +01:00
mhaag-spl 0e18f64414 powershell 2021-03-02 09:43:31 -07:00
P4T12ICK 34f64d972c required_fields for detections 2021-03-02 10:32:55 +01:00
P4T12ICK bc31f18450 Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing 2021-03-02 09:13:46 +01:00
P4T12ICK fa561db694 wip 2021-03-02 09:13:27 +01:00
Ignacio Bermudez Corrales 1b0a0a4338 missing docker credentials 2021-03-02 00:02:35 -08:00
Ignacio Bermudez Corrales 742198d5e5 v0 of deployer 2021-03-01 23:52:22 -08:00
root ef7af97e8e Added detection testing service results inAWS Create Policy Version to allow all resources 2021-03-02 03:56:03 +00:00
divious1 3fc7550cdc working hyper links 2021-03-01 22:04:55 -05:00
divious1 239745b2d6 added organized by kind for detections 2021-03-01 21:36:26 -05:00
mhaag-spl 16627bf207 update url 2021-03-01 18:28:25 -07:00
bpatel 46b623f7a0 tested on docker 2021-03-01 16:54:17 -08:00
bpatel 29a101da97 update local generator 2021-03-01 15:27:25 -08:00
root 17c68a56f0 Added detection testing service results inAWS Create Policy Version to allow all resources 2021-03-01 23:12:11 +00:00
mhaag-spl 9794fd13fb Any PowerShell DownloadString 2021-03-01 16:02:36 -07:00
mhaag-spl bd2c69ec28 Eventvwr UAC Bypass 2021-03-01 15:18:27 -07:00
bpatel ea7ccd21bb itworksss 2021-03-01 13:30:02 -08:00
bpatel 57871e4886 testing 2021-03-01 13:12:18 -08:00
mhaag-spl bcbd2ebb19 Fodhelper uac bypass 2021-03-01 13:38:06 -07:00
mhaag-spl 5a09edf797 Suspicious Scheduled Task from Public Directory 2021-03-01 12:45:22 -07:00
bpatel 47dec9d123 test file 2021-03-01 11:27:29 -08:00
divious1 75c24a9f34 added markup 2021-03-01 13:49:16 -05:00
mhaag-spl a576744f88 Ryuk Wake on LAN 2021-03-01 10:07:12 -07:00
P4T12ICK 05d3fad633 new test 2021-03-01 16:51:09 +01:00
P4T12ICK a888b771c4 new test 2021-03-01 16:51:05 +01:00
P4T12ICK edaf53ff1c test 2021-03-01 16:44:26 +01:00
P4T12ICK 84984b453b wip 2021-03-01 16:42:22 +01:00
mhaag-spl ecb82ec8ca Fixes 2021-03-01 06:52:02 -07:00
mhaag-spl d265e72e8d Silver Sparrow 2021-03-01 06:23:51 -07:00
P4T12ICK dfab3ba794 small change 2021-03-01 13:13:37 +01:00
P4T12ICK 5e9bbaab75 attack data 2021-03-01 13:11:38 +01:00
P4T12ICK f7f9db55d3 test branch 2021-03-01 10:36:45 +01:00
P4T12ICK 87e36c489e test branch 2021-03-01 10:36:14 +01:00
P4T12ICK 30116dd3e8 add GitHub Service 2021-03-01 10:35:06 +01:00
P4T12ICK e3b2e44776 add GitHub Service 2021-03-01 10:32:21 +01:00
miskoSplunk 7088a5ca43 Delete ssa___credential_extraction_getaddbaccount_from_dump.test.yml 2021-02-26 14:11:11 -08:00
miskoSplunk 9331a7899e Delete ssa___credential_extraction_ms_debuggers_z_option.test.yml 2021-02-26 14:10:40 -08:00
miskoSplunk 023b1d6a47 Delete ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml 2021-02-26 14:10:15 -08:00
miskoSplunk 54d1c00df3 Delete ssa___credential_extraction_mimikatz_modules.test.yml 2021-02-26 14:09:56 -08:00
miskoSplunk 496e00240e Delete ssa___illegal_account_creation_via_powersploit_modules.test.yml 2021-02-26 14:09:26 -08:00
miskoSplunk 26c314a6c7 Delete ssa___illegal_access_user_content_via_powersploit_modules.test.yml 2021-02-26 14:09:11 -08:00
miskoSplunk f6fa021edc Delete ssa___illegal_log_deletion_via_mimikatz_modules.test.yml 2021-02-26 14:08:49 -08:00
miskoSplunk ceddaf134d Delete ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.test.yml 2021-02-26 14:08:05 -08:00
miskoSplunk 53842f55b0 Delete ssa___illegal_account_enable_disable_via_dsinternals_modules.test.yml 2021-02-26 14:07:43 -08:00
miskoSplunk cd84b7a659 Delete ssa___illegal_privilege_elevation_via_mimikatz_modules.test.yml 2021-02-26 14:07:14 -08:00