Commit Graph

18530 Commits

Author SHA1 Message Date
mhaag-spl 1d11230510 MSHTA
Updated story
added mshta url in cmdline analytic
2021-01-20 12:00:25 -07:00
mhaag-spl 4299138f97 Update detect_rundll32_inline_hta_execution.yml 2021-01-20 11:43:42 -07:00
root 267b33b9b4 Added detection testing service results inDetect rundll32 executing hta with inline protocols 2021-01-20 18:13:10 +00:00
P4T12ICK 753d2dc00f add custom badge for detection coverage 2021-01-20 18:59:09 +01:00
mhaag-spl ed6e40433c rundll32 inline hta
Rundll32 inline hta execution
2021-01-20 10:48:25 -07:00
P4T12ICK fae32c8fd2 add custom badge for detection coverage 2021-01-20 17:47:46 +01:00
P4T12ICK cf290ce750 add custom badge for detection coverage 2021-01-20 17:45:21 +01:00
P4T12ICK 82f13f9f8d add custom badge for detection coverage 2021-01-20 17:37:19 +01:00
P4T12ICK a06538df87 add custom badge for detection coverage 2021-01-20 17:35:01 +01:00
P4T12ICK 0943ecdf0e add custom badge for detection coverage 2021-01-20 17:15:45 +01:00
P4T12ICK e2767bcae0 add custom badge for detection coverage 2021-01-20 16:09:42 +01:00
P4T12ICK 124f6bd191 add custom badge for detection coverage 2021-01-20 15:34:18 +01:00
P4T12ICK 893cb37eb8 add custom badge for detection coverage 2021-01-20 15:27:05 +01:00
github-actions[bot] fce1c9a12f Branch was auto-updated. 2021-01-20 14:17:24 +00:00
github-actions[bot] 004a532de3 Branch was auto-updated. 2021-01-20 14:17:23 +00:00
dependabot[bot] cd31cb6a23 Merge pull request #1118 from splunk/dependabot/pip/botocore-1.19.57 2021-01-20 14:17:01 +00:00
dependabot[bot] 225669b55c Bump botocore from 1.19.56 to 1.19.57
Bumps [botocore](https://github.com/boto/botocore) from 1.19.56 to 1.19.57.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.56...1.19.57)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-20 14:10:26 +00:00
dependabot[bot] fefa3038e2 Bump pyyaml from 5.3.1 to 5.4
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/5.3.1...5.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-20 14:10:16 +00:00
github-actions[bot] 9f927bbd6f Branch was auto-updated. 2021-01-20 14:09:47 +00:00
dependabot[bot] afe450b577 Merge pull request #1116 from splunk/dependabot/pip/boto3-1.16.57 2021-01-20 14:09:26 +00:00
Jose Enrique Hernandez 955b7bc1af Merge branch 'develop' into dependabot/pip/importlib-resources-5.0.0 2021-01-20 09:06:34 -05:00
dependabot[bot] fb549c1859 Bump boto3 from 1.16.56 to 1.16.57
Bumps [boto3](https://github.com/boto/boto3) from 1.16.56 to 1.16.57.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.56...1.16.57)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-20 14:03:54 +00:00
P4T12ICK af17e44f9f test custom test coverage badge 2021-01-20 14:48:48 +01:00
Michael Haag bf919b37a5 Merge branch 'develop' into msbuild 2021-01-19 15:36:03 -07:00
Detection Testing Service 55d2921458 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 22:12:28 +00:00
root edd77b709f Added detection testing service results inDetect microsoft.workflow.compiler.exe usage 2021-01-19 22:12:26 +00:00
root 5a22ce57f6 Added detection testing service results inDetect microsoft.workflow.compiler.exe rename 2021-01-19 22:11:46 +00:00
mhaag-spl 9514ec2d50 Update trusted_developer_utilities_proxy_execution.yml 2021-01-19 14:48:31 -07:00
mhaag-spl 8f5f82cb56 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 14:45:04 -07:00
mhaag-spl d6a9bf502f Microsoft Workflow Compiler
Adding analytics for microsoft.workflow.compiler.exe.
2021-01-19 14:45:02 -07:00
Detection Testing Service 778c81b2d1 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild 2021-01-19 21:42:58 +00:00
root b355147e2b Added detection testing service results inDetect renamed msbuild execution 2021-01-19 21:42:57 +00:00
root f26d176b8c Added detection testing service results inDetect moved msbuild execution 2021-01-19 21:37:47 +00:00
root ad1564ceb7 Added detection testing service results inDetect wmiprvse spawn msbuild 2021-01-19 21:01:30 +00:00
mhaag-spl 44a9d0bc8c URL Fixes
Fixing all the URLs
2021-01-19 13:43:37 -07:00
mhaag-spl 420bc3fc62 Update suspicious_msbuild_rename.yml 2021-01-19 13:22:44 -07:00
mhaag-spl 65b4f2827b Update suspicious_msbuild_rename.yml 2021-01-19 13:19:38 -07:00
mhaag-spl cdb6d034c4 Removing netconn 2021-01-19 12:23:00 -07:00
research bot 15c4883ef5 updating docs and package bits [ci skip] 2021-01-19 18:27:52 +00:00
github-actions[bot] fc7afc28b7 Branch was auto-updated. 2021-01-19 18:12:48 +00:00
Jose Enrique Hernandez 3a81e29abb Merge pull request #1115 from splunk/add_notables
added notables again
v3.12.0
2021-01-19 13:12:29 -05:00
divious1 494684ac35 added notables again 2021-01-19 13:08:54 -05:00
Bhavin Patel 4da2f7e4c4 Merge branch 'develop' into lookup_name_duplicate 2021-01-19 08:59:30 -08:00
research bot c0fbbfda16 updating docs and package bits [ci skip] 2021-01-19 16:47:19 +00:00
github-actions[bot] e63954f9e2 Branch was auto-updated. 2021-01-19 16:27:02 +00:00
github-actions[bot] 86d5723341 Branch was auto-updated. 2021-01-19 16:26:59 +00:00
github-actions[bot] b5655d40b4 Branch was auto-updated. 2021-01-19 16:26:57 +00:00
Jose Enrique Hernandez c49f46bc4a Merge branch 'develop' into dependabot/pip/importlib-metadata-3.4.0 2021-01-19 11:26:49 -05:00
Jose Enrique Hernandez c05ee8d29d Merge pull request #1091 from splunk/dependabot/pip/azure-core-1.10.0
Bump azure-core from 1.9.0 to 1.10.0
2021-01-19 11:26:31 -05:00
mhaag-spl 3fa5c378cc Timestamp
Trying to fix :)
2021-01-19 08:21:59 -07:00