Commit Graph

18530 Commits

Author SHA1 Message Date
miskoSplunk 1295e2a8f9 Delete ssa___illegal_service_and_process_control_via_mimikatz_modules.test.yml 2021-02-26 14:06:57 -08:00
miskoSplunk d346de0dad Delete ssa___illegal_service_and_process_control_via_powersploit_modules.test.yml 2021-02-26 14:06:31 -08:00
miskoSplunk 6c7f50a875 Delete ssa___setting_credentials_via_dsinternals_modules.test.yml 2021-02-26 14:06:12 -08:00
miskoSplunk 8a3030b356 Delete ssa___setting_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:05:47 -08:00
miskoSplunk 0b40494235 Delete ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.test.yml 2021-02-26 14:05:25 -08:00
miskoSplunk b6343d93be Delete ssa___setting_credentials_via_powersploit_modules.test.yml 2021-02-26 14:04:47 -08:00
miskoSplunk 8319b76803 Delete ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.test.yml 2021-02-26 14:04:35 -08:00
miskoSplunk 1a75a35fdd Delete ssa___credential_extraction_powersploit_modules.test.yml 2021-02-26 14:04:23 -08:00
miskoSplunk 57a760619a Delete ssa___credential_extraction_lazagne_command_options.test.yml 2021-02-26 14:04:12 -08:00
miskoSplunk daf441733b Delete ssa___credential_extraction_fgdump_cachedump_v_option.test.yml 2021-02-26 14:04:02 -08:00
miskoSplunk 6e9483929f Delete ssa___credential_extraction_dsinternals_modules.test.yml 2021-02-26 14:03:49 -08:00
miskoSplunk 01cee15948 Delete ssa___credential_extraction_fgdump_cachedump_s_option.test.yml 2021-02-26 14:03:28 -08:00
miskoSplunk a156b9b4f1 Delete ssa___credential_extraction_dsinternals_conversion_modules.test.yml 2021-02-26 14:03:16 -08:00
miskoSplunk 0fc70f4957 Delete ssa___applying_stolen_credentials_via_powersploit_modules.test.yml 2021-02-26 14:01:56 -08:00
miskoSplunk 8f84e76b4e Delete ssa___applying_stolen_credentials_via_mimikatz_modules.test.yml 2021-02-26 14:01:41 -08:00
Jose Enrique Hernandez 574b3c6aca Merge branch 'develop' into ssa_misko_raw_event_datasets 2021-02-26 16:06:11 -05:00
P4T12ICK c01c4f32c8 Merge pull request #1214 from splunk/ssa_etet_ig
Variable source data file
2021-02-26 12:45:10 +01:00
Ignacio Bermudez Corrales efd8467269 timers that account for ssa delays 2021-02-25 20:15:22 -08:00
Ignacio Bermudez Corrales 135456391b remove unused code from ssa_utils.py 2021-02-25 16:03:06 -08:00
Ignacio Bermudez Corrales 1e6ea714e0 fixed job and service accounts to match vault 2021-02-25 15:53:56 -08:00
divious1 10c6f54604 fixed up a few items with markdown 2021-02-25 18:53:26 -05:00
mhaag-spl 2c996886e3 Update cobalt_strike.yml 2021-02-25 15:13:32 -07:00
mhaag-spl 4cae9952d5 Update cobalt_strike.yml 2021-02-25 15:06:29 -07:00
mhaag-spl 762bed4384 fix 2021-02-25 14:24:44 -07:00
mhaag-spl 65a9f81411 Update suspicious_curl_network_connection.yml 2021-02-25 14:19:00 -07:00
mhaag-spl 5ec99d2c76 Update suspicious_curl_network_connection.yml 2021-02-25 14:16:05 -07:00
Jose Enrique Hernandez 1f8d6f95b4 Merge branch 'develop' into dependabot/pip/python-daemon-2.3.0 2021-02-25 16:12:42 -05:00
mhaag-spl 0e1de2f89f Update suspicious_curl_network_connection.yml 2021-02-25 14:11:35 -07:00
mhaag-spl 7748c9dc65 update 2021-02-25 14:07:36 -07:00
mhaag-spl 54cc612093 fix 2021-02-25 14:02:38 -07:00
mhaag-spl 691139a8cc Update suspicious_sqlite3_lsquarantine_behavior.yml 2021-02-25 13:58:41 -07:00
mhaag-spl 5332f24256 silver sparrow test 2021-02-25 13:57:08 -07:00
mhaag-spl 5536f1045a Update suspicious_plistbuddy_usage.yml 2021-02-25 13:46:22 -07:00
mhaag-spl df6d9cadd3 Update suspicious_plistbuddy_usage.yml 2021-02-25 12:19:43 -07:00
mhaag-spl 1af1421263 Update silver_sparrow.yml 2021-02-25 12:17:10 -07:00
Ignacio Bermudez Corrales 356400defd Merge branch 'ssa_etet_ig' into playground-testing 2021-02-25 11:17:07 -08:00
mhaag-spl dcc4060a87 Update silver_sparrow.yml 2021-02-25 12:09:28 -07:00
mhaag-spl 7fc33f259e Update silver_sparrow.yml 2021-02-25 12:03:56 -07:00
mhaag-spl 9d96fc34e6 silver sparrow 2021-02-25 11:59:21 -07:00
Ignacio Bermudez Corrales 3371833509 data can change 2021-02-25 09:53:24 -08:00
github-actions[bot] 9cdd4d8807 Branch was auto-updated. 2021-02-25 14:13:18 +00:00
github-actions[bot] 7e0d895fdb Branch was auto-updated. 2021-02-25 14:13:17 +00:00
github-actions[bot] ec7b3b117e Branch was auto-updated. 2021-02-25 14:13:15 +00:00
P4T12ICK f771fb5dd4 Merge pull request #1213 from splunk/improvements_contentctl
improvements contentctl
2021-02-25 15:12:56 +01:00
P4T12ICK ef5e89be50 Merge pull request #1212 from splunk/ssa_etet_ig
Refactor, documentation, and fix
2021-02-25 12:58:36 +01:00
P4T12ICK 721afd048b improvements contentctl 2021-02-25 10:06:52 +01:00
divious1 d3a983d0a5 added example 2021-02-25 01:21:52 -05:00
divious1 46d9f30f85 fixing divider 2021-02-25 01:20:16 -05:00
divious1 9f3045df33 minor updates to jinja template 2021-02-25 01:17:31 -05:00
divious1 d8d90111a0 markdown_detections 2021-02-25 01:10:17 -05:00