502 Commits

Author	SHA1	Message	Date
tcontreras	03c05248ac	fix_typos	2021-05-05 21:34:02 +02:00
tcontreras	d9cfd940d1	fix_typo	2021-05-05 21:28:00 +02:00
tcontreras	9250aca10f	net	2021-05-03 19:36:17 +02:00
tcontreras	66556b135d	test_tr	2021-05-03 17:12:24 +02:00
tcontreras	6fff5cd155	new_tst	2021-05-03 15:20:24 +02:00
tcontreras	74c4a949c6	mod_test	2021-05-03 15:08:35 +02:00
tcontreras	7ed813a01c	pw	2021-04-30 13:05:20 +02:00
github-actions[bot]	84c4943005	Branch was auto-updated.	2021-04-27 17:56:07 +00:00
mhaag-spl	f8b712c04e	Office products spawning things	2021-04-27 06:39:12 -06:00
github-actions[bot]	05ed80eb3c	Branch was auto-updated.	2021-04-27 10:32:59 +00:00
github-actions[bot]	c89fd74360	Branch was auto-updated.	2021-04-27 10:32:58 +00:00
github-actions[bot]	292659900f	Branch was auto-updated.	2021-04-26 16:34:32 +00:00
github-actions[bot]	6b93f0b356	Branch was auto-updated.	2021-04-26 16:34:31 +00:00
github-actions[bot]	800050d2db	Branch was auto-updated.	2021-04-26 16:34:29 +00:00
github-actions[bot]	d573e43298	Branch was auto-updated.	2021-04-26 16:32:22 +00:00
github-actions[bot]	3243f202c1	Branch was auto-updated.	2021-04-26 16:32:20 +00:00
github-actions[bot]	433914ef69	Branch was auto-updated.	2021-04-26 16:32:19 +00:00
Jose Enrique Hernandez	02728eec00	Merge branch 'develop' into ssa_testing_user_doc	2021-04-26 12:32:08 -04:00
tcontreras	765e2cc311	trickbot	2021-04-26 17:01:03 +02:00
P4T12ICK	1ab6a0c855	ssa testing usage docs	2021-04-26 10:16:40 +02:00
tcontreras	1488915fca	minor_chg	2021-04-23 16:25:28 +02:00
github-actions[bot]	09a84d93b4	Branch was auto-updated.	2021-04-23 12:24:32 +00:00
github-actions[bot]	cae111f759	Branch was auto-updated.	2021-04-23 12:24:22 +00:00
github-actions[bot]	10db696fe8	Branch was auto-updated.	2021-04-23 12:24:15 +00:00
P4T12ICK	ebffd874e8	fix the 101% detection coverage	2021-04-23 14:11:58 +02:00
tcontreras	044b01c28c	Merge branch 'net_exfil' of github.com:splunk/security_content into net_exfil	2021-04-23 14:07:28 +02:00
tcontreras	e86eb625fb	stream_source	2021-04-23 14:07:00 +02:00
github-actions[bot]	ad1361674b	Branch was auto-updated.	2021-04-22 20:59:56 +00:00
github-actions[bot]	50a55e688d	Branch was auto-updated.	2021-04-22 20:59:54 +00:00
github-actions[bot]	cb8ce9b777	Branch was auto-updated.	2021-04-22 20:59:41 +00:00
mhaag-spl	c1e90a20b7	Anomalous Usage of 7z	2021-04-22 13:27:47 -06:00
mhaag-spl	aa62997e60	removed detections	2021-04-22 11:52:20 -06:00
mhaag-spl	56c645560a	Update winword_spawning_windows_script_host.test.yml	2021-04-22 11:29:59 -06:00
mhaag-spl	77d1364c16	Office Product Spawning Rundll32 with no DLL	2021-04-22 11:20:45 -06:00
mhaag-spl	2b40cfec8b	remove root aws detections and update aws detection	2021-04-22 10:21:36 -06:00
mhaag-spl	88688f9960	duplicate detection	2021-04-22 10:10:47 -06:00
mhaag-spl	029c463ce8	Update searchprotocolhost_with_no_command_line_with_network.test.yml	2021-04-22 10:00:32 -06:00
mhaag-spl	b86ece00d8	Update winword_spawning_cmd.test.yml	2021-04-22 09:52:23 -06:00
mhaag-spl	c00de66c2f	winword cmd	2021-04-22 09:50:32 -06:00
mhaag-spl	6973e30290	winword wsh	2021-04-22 09:23:46 -06:00
mhaag-spl	5f85f5e7e9	Excel WSH	2021-04-22 07:38:08 -06:00
tcontreras	162b9f0cc3	net_exfil	2021-04-22 15:37:09 +02:00
divious1	2d5ea36b0f	upgrading detection to avoid FPs and also added bodies	2021-04-21 15:54:11 -04:00
mhaag-spl	59b1f289d7	Excel posh	2021-04-21 13:11:40 -06:00
mhaag-spl	ae87327c98	dllhost test again	2021-04-21 11:55:18 -06:00
mhaag-spl	a22e361f72	Update dllhost_with_no_command_line_arguments_with_network.test.yml	2021-04-21 11:19:30 -06:00
mhaag-spl	a386c06827	Update winword_spawning_powershell.test.yml	2021-04-21 10:55:51 -06:00
mhaag-spl	86a0a2e117	Winword spawning powershell	2021-04-21 10:52:23 -06:00
github-actions[bot]	7b5c265ff4	Branch was auto-updated.	2021-04-21 08:48:41 +00:00
github-actions[bot]	365f35b1b7	Branch was auto-updated.	2021-04-20 22:28:59 +00:00