Commit Graph

18530 Commits

Author SHA1 Message Date
Bhavin Patel c8710c17ad Merge pull request #893 from davisshannon/develop
Data Exfil PR (fixed up)
2020-11-18 11:30:10 -08:00
Ignacio 9b8bc3ceaf Merge branch 'develop' into misko_credential_probing 2020-11-18 11:25:16 -08:00
Ignacio fc8ab61ac0 Merge pull request #896 from splunk/misko_recon_use_cases
Reconnaissance use case: domains, network, devices, shares, users, services, processes ...
2020-11-18 11:23:53 -08:00
Ignacio 79403ad142 Merge branch 'develop' into misko_recon_use_cases 2020-11-18 11:20:13 -08:00
Bhavin Patel 7cd18f2797 Merge pull request #931 from splunk/mustang_beta_drop3
Mustang beta drop3
2020-11-18 11:07:16 -08:00
Jose Enrique Hernandez 732664fb23 Merge branch 'develop' into mustang_beta_drop3 2020-11-18 14:02:35 -05:00
Jose Enrique Hernandez 7fa971386b Merge pull request #914 from splunk/minor_mispelling
removed the converter since we do not use it anymore and updated reqs…
2020-11-18 13:32:20 -05:00
Jose Enrique Hernandez 3c1cfbf4de Merge branch 'develop' into develop 2020-11-18 13:30:38 -05:00
Jose Enrique Hernandez b514c54c74 Merge pull request #929 from splunk/dependabot/pip/protobuf-3.14.0
Bump protobuf from 3.13.0 to 3.14.0
2020-11-18 13:30:22 -05:00
miskoSplunk d57bcfbd5e Update ssa___recon_processes_and_services_via_mimikatz_modules.yml 2020-11-18 10:25:24 -08:00
miskoSplunk 44e4920121 Update ssa___recon_process_service_hijacking_via_mimikatz_modules.yml 2020-11-18 10:24:37 -08:00
miskoSplunk 67c0c759e9 Update ssa___recon_privilege_escalation_opportunities_via_powersploit_modules.yml 2020-11-18 10:24:01 -08:00
miskoSplunk 42a66b6904 Update ssa___recon_defensive_tools_via_powersploit_modules.yml 2020-11-18 10:23:05 -08:00
miskoSplunk bea77daf5f Update ssa___recon_connectivity_via_powersploit_modules.yml 2020-11-18 10:22:24 -08:00
miskoSplunk 2ddba5f54c Update ssa___recon_and_use_shares_via_powersploit_modules.yml 2020-11-18 10:21:45 -08:00
miskoSplunk 5cd3af9fd0 Update ssa___recon_and_use_shares_via_mimikatz_modules.yml 2020-11-18 10:20:56 -08:00
miskoSplunk bd3fd3ada6 Update ssa___recon_and_use_operating_system_elements_via_powersploit_modules.yml 2020-11-18 10:19:56 -08:00
miskoSplunk ef440012b8 Update ssa___recon_and_use_computers_via_mimikatz_modules.yml 2020-11-18 10:19:17 -08:00
miskoSplunk 3812bbdb6c Update ssa___recon_and_use_computers_domains_via_powersploit_modules.yml 2020-11-18 10:18:26 -08:00
miskoSplunk 6d315d1469 Update ssa___recon_and_use_active_directory_infrastructure_via_powersploit_modules.yml 2020-11-18 10:17:35 -08:00
miskoSplunk 0cf86f14f3 Update ssa___recon_and_use_accounts_groups_via_mimikatz_modules.yml 2020-11-18 10:12:17 -08:00
miskoSplunk 66eefe026c Update ssa___recon_and_use_accounts_groups_policies_via_powersploit_modules.yml 2020-11-18 10:11:40 -08:00
miskoSplunk d4688cc394 Update ssa___recon_access_and_persistence_opportunities_via_powersploit_modules.yml 2020-11-18 10:10:57 -08:00
miskoSplunk b4f3e260c5 Update ssa___recon_credential_stores_and_services_via_mimikatz_modules.yml 2020-11-18 10:09:35 -08:00
miskoSplunk 7b2b17f497 Update ssa___probing_access_with_stolen_credentials_via_powersploit_modules.yml 2020-11-18 10:08:45 -08:00
miskoSplunk 5a28f4aeae Update ssa___assess_credential_strength_via_dsinternals_modules.yml 2020-11-18 10:07:53 -08:00
miskoSplunk 90d33ffda4 Update ssa___recon_credential_stores_and_services_via_mimikatz_modules.yml 2020-11-18 10:04:43 -08:00
miskoSplunk 42661d0f8c Update ssa___probing_access_with_stolen_credentials_via_powersploit_modules.yml 2020-11-18 10:03:28 -08:00
miskoSplunk b1716386e8 Update ssa___assess_credential_strength_via_dsinternals_modules.yml
adding required_fields
2020-11-18 10:01:18 -08:00
Jose Enrique Hernandez fea5096cad Merge branch 'develop' into dependabot/pip/protobuf-3.14.0 2020-11-18 12:35:53 -05:00
Jose Enrique Hernandez 7c0795beb7 Merge pull request #935 from splunk/TR-278
start time to be window start time
2020-11-18 12:34:54 -05:00
Jose Enrique Hernandez 7d64ec2884 Merge branch 'develop' into misko_recon_use_cases 2020-11-18 12:22:12 -05:00
Jose Enrique Hernandez 023e57056f Merge branch 'develop' into misko_credential_probing 2020-11-18 12:22:08 -05:00
Jose Enrique Hernandez ba8b9c9b75 Merge branch 'develop' into mustang_beta_drop3 2020-11-18 12:20:54 -05:00
root 77bc2e7a78 Added detection testing service results inDisabling Remote User Account Control 2020-11-18 14:55:01 +00:00
P4T12ICK f10ee1c906 new detection test 2020-11-18 15:38:17 +01:00
dependabot[bot] add321abd2 Bump protobuf from 3.13.0 to 3.14.0
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.13.0 to 3.14.0.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/master/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.13.0...v3.14.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-18 14:25:23 +00:00
dependabot[bot] bc1d33add5 Merge pull request #938 from splunk/dependabot/pip/boto3-1.16.20 2020-11-18 14:24:36 +00:00
dependabot[bot] b0f36aba0b Bump boto3 from 1.16.19 to 1.16.20
Bumps [boto3](https://github.com/boto/boto3) from 1.16.19 to 1.16.20.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.19...1.16.20)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-18 14:07:45 +00:00
dependabot[bot] 8529c0e664 Merge pull request #937 from splunk/dependabot/pip/botocore-1.19.20 2020-11-18 14:06:55 +00:00
dependabot[bot] 029edcc184 Bump botocore from 1.19.19 to 1.19.20
Bumps [botocore](https://github.com/boto/botocore) from 1.19.19 to 1.19.20.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.19...1.19.20)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-18 14:02:50 +00:00
P4T12ICK 1a77b13d95 new detection test 2020-11-18 11:28:25 +01:00
P4T12ICK 6681a6f59a Merge pull request #936 from splunk/deprecate_broken_detection
removing a broken detection
2020-11-18 10:04:14 +01:00
Jose Enrique Hernandez 253faa4dfd Merge branch 'develop' into deprecate_broken_detection 2020-11-17 16:34:34 -05:00
divious1 b5dfe4450f removing a broken detection 2020-11-17 16:32:59 -05:00
bpatel 83f4490738 test file 2020-11-17 13:30:02 -08:00
bpatel 5559738077 error 2020-11-17 12:51:51 -08:00
bpatel 7e418daa84 testing 2020-11-17 12:33:20 -08:00
Bhavin Patel 1f1f117a6b Merge branch 'develop' into mustang_beta_test_files 2020-11-17 10:52:15 -08:00
Ignacio Bermudez Corrales 7e0239be1d start time to be window start time 2020-11-17 10:12:36 -08:00