 root
|
1310fc6d59
|
Added detection testing service results inAttempted Credential Dump From Registry via Reg exe
|
2021-05-07 08:10:42 +00:00 |
|
|
P4T12ICK
|
145542e318
|
add process_id
|
2021-05-07 09:48:49 +02:00 |
|
|
Jose Enrique Hernandez
|
add2e70127
|
Merge branch 'develop' into fix_missing_dm_entry
|
2021-05-06 12:59:31 -04:00 |
|
|
divious1
|
375a824d40
|
minor update to include DM closes issue #1357
|
2021-05-06 12:58:40 -04:00 |
|
|
root
|
af1503d1cd
|
Added detection testing service results inSchedule Task with HTTP Command Arguments
|
2021-05-05 20:00:43 +00:00 |
|
|
tcontreras
|
03c05248ac
|
fix_typos
|
2021-05-05 21:34:02 +02:00 |
|
|
tcontreras
|
d9cfd940d1
|
fix_typo
|
2021-05-05 21:28:00 +02:00 |
|
|
root
|
652c386188
|
Added detection testing service results inAccount Discovery With Net App
|
2021-05-03 18:08:30 +00:00 |
|
|
tcontreras
|
f4e25f9d5c
|
minor
|
2021-05-03 19:40:55 +02:00 |
|
|
tcontreras
|
cea3e29e62
|
Merge branch 'trickbot' of github.com:splunk/security_content into trickbot
|
2021-05-03 19:36:49 +02:00 |
|
|
tcontreras
|
9250aca10f
|
net
|
2021-05-03 19:36:17 +02:00 |
|
|
root
|
0ef9cb1122
|
Added detection testing service results inWermgr Process Connecting To IP Check Web Services
|
2021-05-03 16:48:23 +00:00 |
|
|
root
|
ecfecd44f7
|
Added detection testing service results inWermgr Process Create Executable File
|
2021-05-03 16:29:11 +00:00 |
|
|
root
|
fe36e285e5
|
Added detection testing service results inPowershell Remote Thread To Known Windows Process
|
2021-05-03 16:04:17 +00:00 |
|
|
root
|
8386cfd475
|
Added detection testing service results inWermgr Process Spawned CMD Or Powershell Process
|
2021-05-03 15:42:03 +00:00 |
|
|
tcontreras
|
a845ca2f0d
|
minor_mod
|
2021-04-30 12:15:04 +02:00 |
|
|
P4T12ICK
|
5aeadfbbaa
|
Merge branch 'develop' into trickbot
|
2021-04-30 09:33:44 +02:00 |
|
|
research bot
|
1aeb0a9f6a
|
updating docs and package bits [ci skip]
|
2021-04-29 21:32:44 +00:00 |
|
|
github-actions[bot]
|
370987dfb1
|
Branch was auto-updated.
|
2021-04-29 20:56:08 +00:00 |
|
|
bpatel
|
b8c4992f82
|
fix text
|
2021-04-29 13:51:45 -07:00 |
|
|
github-actions[bot]
|
c5a8ace7e7
|
Branch was auto-updated.
|
2021-04-28 18:09:49 +00:00 |
|
|
divious1
|
a2e62c08b9
|
removed dest id from a body field since it is already part of the anomaly
|
2021-04-28 14:01:05 -04:00 |
|
|
Jose Enrique Hernandez
|
e334484b1e
|
Update ssa___illegal_service_and_process_control_via_mimikatz_modules.yml
|
2021-04-28 13:56:54 -04:00 |
|
|
Jose Enrique Hernandez
|
87d7cb0f4d
|
Update ssa___illegal_privilege_elevation_via_mimikatz_modules.yml
|
2021-04-28 13:56:41 -04:00 |
|
|
Jose Enrique Hernandez
|
2bd7255d19
|
Update ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.yml
|
2021-04-28 13:56:30 -04:00 |
|
|
Jose Enrique Hernandez
|
5d7c94f508
|
Update ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.yml
|
2021-04-28 13:56:17 -04:00 |
|
|
Jose Enrique Hernandez
|
8f1e5f6a0e
|
Update ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.yml
|
2021-04-28 13:56:03 -04:00 |
|
|
Jose Enrique Hernandez
|
3980104962
|
Update ssa___illegal_log_deletion_via_mimikatz_modules.yml
|
2021-04-28 13:55:52 -04:00 |
|
|
Jose Enrique Hernandez
|
d0c21456ae
|
Update ssa___illegal_account_enable_disable_via_dsinternals_modules.yml
|
2021-04-28 13:55:40 -04:00 |
|
|
Jose Enrique Hernandez
|
df8c60d58f
|
Update ssa___illegal_account_creation_via_powersploit_modules.yml
|
2021-04-28 13:55:07 -04:00 |
|
|
Jose Enrique Hernandez
|
acae84ab62
|
Update ssa___illegal_access_user_content_via_powersploit_modules.yml
|
2021-04-28 13:54:52 -04:00 |
|
|
Jose Enrique Hernandez
|
5eec0c731a
|
Update ssa___detect_pass_hash.yml
|
2021-04-28 13:54:35 -04:00 |
|
|
Jose Enrique Hernandez
|
2877c3679e
|
Update ssa___credential_extraction_powersploit_modules.yml
|
2021-04-28 13:53:51 -04:00 |
|
|
Jose Enrique Hernandez
|
05f4acb4c2
|
Update ssa___credential_extraction_ms_debuggers_z_option.yml
|
2021-04-28 13:53:38 -04:00 |
|
|
Jose Enrique Hernandez
|
65dc6f1402
|
Update ssa___credential_extraction_ms_debuggers_kernel_peek.yml
|
2021-04-28 13:53:25 -04:00 |
|
|
Jose Enrique Hernandez
|
1a0c351e64
|
Update ssa___credential_extraction_mimikatz_modules.yml
|
2021-04-28 13:53:09 -04:00 |
|
|
Jose Enrique Hernandez
|
485af4308d
|
Update ssa___credential_extraction_lazagne_command_options.yml
|
2021-04-28 13:52:55 -04:00 |
|
|
Jose Enrique Hernandez
|
5309d6546d
|
Update ssa___credential_extraction_getaddbaccount_from_dump.yml
|
2021-04-28 13:52:05 -04:00 |
|
|
Jose Enrique Hernandez
|
1298161c3a
|
Update ssa___credential_extraction_fgdump_cachedump_v_option.yml
|
2021-04-28 13:51:01 -04:00 |
|
|
Jose Enrique Hernandez
|
c9953b5c8a
|
Update ssa___credential_extraction_fgdump_cachedump_s_option.yml
|
2021-04-28 13:50:45 -04:00 |
|
|
Jose Enrique Hernandez
|
ff215bb999
|
Update ssa___credential_extraction_dsinternals_modules.yml
|
2021-04-28 13:50:29 -04:00 |
|
|
Jose Enrique Hernandez
|
0ac46abe29
|
Update ssa___credential_extraction_dsinternals_conversion_modules.yml
|
2021-04-28 13:50:09 -04:00 |
|
|
Jose Enrique Hernandez
|
f2953fe5ea
|
Update ssa___attempted_credential_dump_from_registry_via_reg_exe.yml
|
2021-04-28 13:49:49 -04:00 |
|
|
Jose Enrique Hernandez
|
6e043a8e9a
|
Update ssa___assess_credential_strength_via_dsinternals_modules.yml
|
2021-04-28 13:49:27 -04:00 |
|
|
Jose Enrique Hernandez
|
38706ea53e
|
Update ssa___applying_stolen_credentials_via_powersploit_modules.yml
|
2021-04-28 13:49:01 -04:00 |
|
|
Jose Enrique Hernandez
|
76083b30b2
|
Update ssa___applying_stolen_credentials_via_mimikatz_modules.yml
|
2021-04-28 13:48:15 -04:00 |
|
|
Michael Haag
|
2b8ab04c98
|
Merge branch 'develop' into ssa_tbd
|
2021-04-28 10:28:39 -06:00 |
|
|
mhaag-spl
|
79dd8f833c
|
all SSA TBD bodies Done
|
2021-04-28 10:25:26 -06:00 |
|
|
mhaag-spl
|
458147e1e7
|
SSA TBD
|
2021-04-27 14:32:30 -06:00 |
|
|
github-actions[bot]
|
84c4943005
|
Branch was auto-updated.
|
2021-04-27 17:56:07 +00:00 |
|