Jose Enrique Hernandez
|
dc7d3bf9ea
|
Merge branch 'develop' into misko_illegal_management
|
2020-11-10 19:21:33 -05:00 |
|
Jose Enrique Hernandez
|
205cfb92af
|
Merge branch 'develop' into ssa-coverage
|
2020-11-10 18:26:42 -05:00 |
|
Jose Enrique Hernandez
|
238be2ac65
|
Merge pull request #898 from splunk/dependabot/pip/botocore-1.19.12
Bump botocore from 1.19.11 to 1.19.12
|
2020-11-10 18:26:21 -05:00 |
|
Jose Enrique Hernandez
|
aebfb6286f
|
Merge branch 'develop' into dependabot/pip/botocore-1.19.12
|
2020-11-10 18:26:12 -05:00 |
|
Jose Enrique Hernandez
|
edbc2585f7
|
Merge pull request #904 from splunk/dependabot/pip/certifi-2020.11.8
Bump certifi from 2020.6.20 to 2020.11.8
|
2020-11-10 18:25:26 -05:00 |
|
Jose Enrique Hernandez
|
fb5f8faa76
|
Merge branch 'develop' into dependabot/pip/certifi-2020.11.8
|
2020-11-10 18:24:52 -05:00 |
|
Jose Enrique Hernandez
|
d026ba24d9
|
Merge branch 'develop' into fix_broken_links_readme
|
2020-11-10 18:24:15 -05:00 |
|
divious1
|
0869243901
|
fixing broken links
|
2020-11-10 18:23:26 -05:00 |
|
Bhavin Patel
|
fb867b5697
|
Merge pull request #696 from splunk/mustang_beta
WIP: Mustang Beta Drop 2
|
2020-11-10 15:05:55 -08:00 |
|
Xiao Lin
|
1b253a8d4b
|
Merge branch 'develop' of github.com:splunk/security-content into TR162
|
2020-11-10 21:35:09 +00:00 |
|
bpatel
|
be86a838e4
|
Merge branch 'mustang_beta' of https://github.com/splunk/security-content into mustang_beta
|
2020-11-10 10:56:30 -08:00 |
|
bpatel
|
7c544b9446
|
deleteing test files
|
2020-11-10 10:56:13 -08:00 |
|
inspired
|
fe003db5d6
|
Merge branch 'develop' into mbjerkeland-develop
|
2020-11-10 19:23:19 +01:00 |
|
Bhavin Patel
|
3aa06e82b6
|
Merge branch 'develop' into mustang_beta
|
2020-11-10 09:59:18 -08:00 |
|
bpatel
|
64bd08b5ff
|
these macro files are not needed
|
2020-11-10 09:14:23 -08:00 |
|
P4T12ICK
|
832ce6a2ae
|
Update windows_security_account_manager_stopped.test.yml
|
2020-11-10 16:49:19 +01:00 |
|
P4T12ICK
|
20b9f7a784
|
Update windows_disableantispyware_reg.test.yml
|
2020-11-10 16:49:02 +01:00 |
|
P4T12ICK
|
7eabf717c0
|
Update windows_conhost_exe_force_flag.test.yml
|
2020-11-10 16:48:47 +01:00 |
|
P4T12ICK
|
ac4bab5bee
|
Update ryuk_test_files_detected.test.yml
|
2020-11-10 16:48:28 +01:00 |
|
P4T12ICK
|
b7876411e2
|
Update ryuk_test_files_detected.test.yml
|
2020-11-10 16:48:03 +01:00 |
|
P4T12ICK
|
cacd61039b
|
Update windows_security_account_manager_stopped.test.yml
|
2020-11-10 16:42:51 +01:00 |
|
P4T12ICK
|
b435c6ce9c
|
Update windows_disableantispyware_reg.test.yml
|
2020-11-10 16:42:33 +01:00 |
|
P4T12ICK
|
52993d830a
|
Update windows_conhost_exe_force_flag.test.yml
|
2020-11-10 16:42:16 +01:00 |
|
P4T12ICK
|
b1e4cccec2
|
Update ryuk_test_files_detected.test.yml
|
2020-11-10 16:41:13 +01:00 |
|
Detection Testing Service
|
9cdca4e7b6
|
Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one
|
2020-11-10 15:15:19 +00:00 |
|
root
|
9e6a855e6d
|
Added detection testing service results inDetect PsExec With accepteula Flag
|
2020-11-10 15:15:18 +00:00 |
|
Detection Testing Service
|
3a59c7734a
|
Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one
|
2020-11-10 15:02:19 +00:00 |
|
root
|
ff4207b44c
|
Added detection testing service results inDetect Use of cmd exe to Launch Script Interpreters
|
2020-11-10 15:02:17 +00:00 |
|
P4T12ICK
|
7867a6c825
|
new test file
|
2020-11-10 15:59:50 +01:00 |
|
P4T12ICK
|
3f6f8af783
|
new test file
|
2020-11-10 15:44:07 +01:00 |
|
dependabot[bot]
|
47bd9e77f3
|
Merge pull request #909 from splunk/dependabot/pip/boto3-1.16.14
|
2020-11-10 14:28:02 +00:00 |
|
Detection Testing Service
|
7f7933af05
|
Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one
|
2020-11-10 14:26:42 +00:00 |
|
root
|
285a6f9860
|
Added detection testing service results inDetect processes used for System Network Configuration Discovery
|
2020-11-10 14:26:41 +00:00 |
|
P4T12ICK
|
2da2082b6a
|
new test file
|
2020-11-10 15:13:15 +01:00 |
|
dependabot[bot]
|
f243ce0dc9
|
Bump boto3 from 1.16.13 to 1.16.14
Bumps [boto3](https://github.com/boto/boto3) from 1.16.13 to 1.16.14.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.13...1.16.14)
Signed-off-by: dependabot[bot] <support@github.com>
|
2020-11-10 14:05:09 +00:00 |
|
Stanislav Miskovic
|
4aa2af44d4
|
Fix adding a missing guid
|
2020-11-10 01:26:16 -08:00 |
|
Stanislav Miskovic
|
4dc12ac4da
|
Fix a typo in name field
|
2020-11-10 01:21:39 -08:00 |
|
Stanislav Miskovic
|
1969d4a9ab
|
Illegal control of compromised resources via Mimikatz, PowerSploit and DSInternals modules
|
2020-11-10 00:58:27 -08:00 |
|
Mikael Bjerkeland
|
3675fa80ad
|
Rename
|
2020-11-10 09:37:33 +01:00 |
|
root
|
3bf9acae8c
|
Added detection testing service results inDetect Prohibited Applications Spawning cmd exe
|
2020-11-10 08:35:10 +00:00 |
|
Mikael Bjerkeland
|
4a29a71009
|
Dashes in references
|
2020-11-10 09:30:50 +01:00 |
|
P4T12ICK
|
1f3f1ae408
|
Merge branch 'develop' into mbjerkeland-develop
|
2020-11-10 09:24:55 +01:00 |
|
P4T12ICK
|
4059b769a2
|
new detection test
|
2020-11-10 09:20:22 +01:00 |
|
P4T12ICK
|
70466c9301
|
new detection test
|
2020-11-10 09:02:24 +01:00 |
|
David Dorsey
|
941bbf9de7
|
Added enableSched = 1 to baseline searches
|
2020-11-09 22:23:43 -06:00 |
|
Ignacio Bermudez Corrales
|
6e14af85c6
|
changed image to one maintained by Splunk
|
2020-11-09 15:06:03 -08:00 |
|
research bot
|
d0aa011c20
|
updating docs and package bits [ci skip]
|
2020-11-09 23:01:54 +00:00 |
|
Jose Enrique Hernandez
|
33561b084c
|
Merge pull request #906 from splunk/jzsplunk-patch-1
Update README.md
|
2020-11-09 17:51:44 -05:00 |
|
Jose Enrique Hernandez
|
49954af581
|
Merge branch 'develop' into jzsplunk-patch-1
|
2020-11-09 17:51:36 -05:00 |
|
Jose Enrique Hernandez
|
2c9c0252c6
|
Merge branch 'develop' into dependabot/pip/botocore-1.19.12
|
2020-11-09 17:51:15 -05:00 |
|