Commit Graph

9663 Commits

Author SHA1 Message Date
Bhavin Patel c0fe77e153 Branch was auto-updated. 2024-10-15 14:36:15 -07:00
Bhavin Patel f0dfaebf39 updates per Lous feedback 2024-10-15 13:44:46 -07:00
Bhavin Patel 16a2ce8142 Branch was auto-updated. 2024-10-10 14:34:55 -07:00
Bhavin Patel 9c122bd7d8 Branch was auto-updated. 2024-10-10 14:34:54 -07:00
Bhavin Patel 4b785e3006 Branch was auto-updated. 2024-10-10 14:30:20 -07:00
Bhavin Patel 5f7bd18fb1 Branch was auto-updated. 2024-10-10 14:30:19 -07:00
Bhavin Patel 85617c7b03 Branch was auto-updated. 2024-10-10 14:30:17 -07:00
Bhavin Patel 9aabaac9ea Branch was auto-updated. 2024-10-10 14:28:29 -07:00
Bhavin Patel a7847ab69c Branch was auto-updated. 2024-10-10 14:28:26 -07:00
Bhavin Patel 568c385a28 Branch was auto-updated. 2024-10-10 14:28:24 -07:00
Bhavin Patel 9b5b515ca5 Merge branch 'develop' into ad_find 2024-10-10 14:28:22 -07:00
Bhavin Patel e95c2d274f updating detection 2024-10-09 17:33:20 -07:00
Bhavin Patel 4702243b86 updating detection 2024-10-09 17:06:22 -07:00
Bhavin Patel ad27516532 updating 2024-10-09 16:05:43 -07:00
Bhavin Patel ee35624da0 updating 2024-10-09 16:05:40 -07:00
tccontre 7644997fda fix_change_file_owner_to_root 2024-10-09 10:15:20 +02:00
Bhavin Patel a3534c0eaf Update possible_lateral_movement_powershell_spawn.yml 2024-10-07 14:31:23 -07:00
Bhavin Patel 9544a896e7 data source 2024-10-07 14:30:37 -07:00
Michael Haag 55415915f0 updated today 2024-10-07 12:50:32 -06:00
Michael Haag e60c831b29 Update windows_identify_powershell_web_access_iis_pool.yml
updated dataset
2024-10-07 12:04:10 -06:00
Michael Haag 2d336d3af6 try again 2024-10-04 09:46:24 -06:00
Michael Haag 58f24d3680 try that 2024-10-04 09:35:04 -06:00
Bhavin Patel 353d25ecb8 Branch was auto-updated. 2024-10-03 11:28:47 +05:30
Bhavin Patel f7ee25c5a8 Branch was auto-updated. 2024-10-03 11:28:46 +05:30
Michael Haag d84019ce5a PSWA Updates 2024-09-30 10:35:12 -06:00
pyth0n1c 1adb62d0f4 bump version and date 2024-09-27 13:59:31 -07:00
pyth0n1c 9906bc45fe Fix erroneous datasource name in detection 2024-09-26 14:55:54 -07:00
pyth0n1c d5fb6c520c update ymls so that they refer to the correct names
of datasources. this was mostly removing spaces
to convert "Sysmon Event ID N" to
"Sysmon EventID N". Also fix some ymls
that used the field "data_sources" when
it should be "data_source"
2024-09-26 14:48:44 -07:00
Bhavin Patel 49da7eb7de Branch was auto-updated. 2024-09-25 22:53:31 +05:30
Bhavin Patel 33fe5bbcba Branch was auto-updated. 2024-09-25 22:53:31 +05:30
Bhavin Patel f373b62a86 Branch was auto-updated. 2024-09-25 22:43:29 +05:30
Bhavin Patel 1c4c409f99 Branch was auto-updated. 2024-09-25 22:43:28 +05:30
Bhavin Patel ec168c8c8b Merge branch 'develop' into valleyrat 2024-09-25 22:43:22 +05:30
pyth0n1c 4cf943ffa4 Final round of fixes to fields with
extra newlines with version and date
bumps.
2024-09-24 21:46:38 -07:00
pyth0n1c 8b675ad971 More detections have been updated. there are still a few with extra whitespace that must be taken care of 2024-09-24 17:04:43 -07:00
pyth0n1c 5b75e85ef8 second pass at fixing whitespace and related update fields 2024-09-24 16:53:25 -07:00
pyth0n1c b43bb4fb4e Fix dates, fields with spaces, and update verisons for many detections 2024-09-24 16:37:44 -07:00
Bhavin Patel 1b434a1d43 updating macro 2024-09-25 01:35:22 +05:30
Bhavin Patel cbeadd54c5 message 2024-09-25 01:32:19 +05:30
Bhavin Patel e7ec6e384c updating from eri's comments 2024-09-25 01:31:15 +05:30
Gowthamaraj rajendran 19f81c24ef Add data source object 2024-09-24 10:00:05 -07:00
Bhavin Patel 0a2890d4b9 Branch was auto-updated. 2024-09-24 20:12:02 +05:30
Bhavin Patel 413668ecf6 Branch was auto-updated. 2024-09-24 20:12:00 +05:30
Bhavin Patel 90533f8123 remove kind 2024-09-24 19:51:40 +05:30
Bhavin Patel 6e4ae3df95 remove kind 2024-09-24 19:45:07 +05:30
tccontre 3101ca1202 valleyrat 2024-09-19 11:19:16 +02:00
tccontre 27e28cdf7e valleyrat 2024-09-18 15:00:54 +02:00
tccontre d1a8e40b99 valleyrat 2024-09-18 11:45:50 +02:00
tccontre fd28966766 valleyrat 2024-09-17 09:47:33 +02:00
Gowthamaraj rajendran 602d2c9c1e edit SPL and dataset 2024-09-12 17:23:00 -07:00