Bhavin Patel
c0fe77e153
Branch was auto-updated.
2024-10-15 14:36:15 -07:00
Bhavin Patel
f0dfaebf39
updates per Lous feedback
2024-10-15 13:44:46 -07:00
Bhavin Patel
16a2ce8142
Branch was auto-updated.
2024-10-10 14:34:55 -07:00
Bhavin Patel
9c122bd7d8
Branch was auto-updated.
2024-10-10 14:34:54 -07:00
Bhavin Patel
4b785e3006
Branch was auto-updated.
2024-10-10 14:30:20 -07:00
Bhavin Patel
5f7bd18fb1
Branch was auto-updated.
2024-10-10 14:30:19 -07:00
Bhavin Patel
85617c7b03
Branch was auto-updated.
2024-10-10 14:30:17 -07:00
Bhavin Patel
9aabaac9ea
Branch was auto-updated.
2024-10-10 14:28:29 -07:00
Bhavin Patel
a7847ab69c
Branch was auto-updated.
2024-10-10 14:28:26 -07:00
Bhavin Patel
568c385a28
Branch was auto-updated.
2024-10-10 14:28:24 -07:00
Bhavin Patel
9b5b515ca5
Merge branch 'develop' into ad_find
2024-10-10 14:28:22 -07:00
Bhavin Patel
e95c2d274f
updating detection
2024-10-09 17:33:20 -07:00
Bhavin Patel
4702243b86
updating detection
2024-10-09 17:06:22 -07:00
Bhavin Patel
ad27516532
updating
2024-10-09 16:05:43 -07:00
Bhavin Patel
ee35624da0
updating
2024-10-09 16:05:40 -07:00
tccontre
7644997fda
fix_change_file_owner_to_root
2024-10-09 10:15:20 +02:00
Bhavin Patel
a3534c0eaf
Update possible_lateral_movement_powershell_spawn.yml
2024-10-07 14:31:23 -07:00
Bhavin Patel
9544a896e7
data source
2024-10-07 14:30:37 -07:00
Michael Haag
55415915f0
updated today
2024-10-07 12:50:32 -06:00
Michael Haag
e60c831b29
Update windows_identify_powershell_web_access_iis_pool.yml
...
updated dataset
2024-10-07 12:04:10 -06:00
Michael Haag
2d336d3af6
try again
2024-10-04 09:46:24 -06:00
Michael Haag
58f24d3680
try that
2024-10-04 09:35:04 -06:00
Bhavin Patel
353d25ecb8
Branch was auto-updated.
2024-10-03 11:28:47 +05:30
Bhavin Patel
f7ee25c5a8
Branch was auto-updated.
2024-10-03 11:28:46 +05:30
Michael Haag
d84019ce5a
PSWA Updates
2024-09-30 10:35:12 -06:00
pyth0n1c
1adb62d0f4
bump version and date
2024-09-27 13:59:31 -07:00
pyth0n1c
9906bc45fe
Fix erroneous datasource name in detection
2024-09-26 14:55:54 -07:00
pyth0n1c
d5fb6c520c
update ymls so that they refer to the correct names
...
of datasources. this was mostly removing spaces
to convert "Sysmon Event ID N" to
"Sysmon EventID N". Also fix some ymls
that used the field "data_sources" when
it should be "data_source"
2024-09-26 14:48:44 -07:00
Bhavin Patel
49da7eb7de
Branch was auto-updated.
2024-09-25 22:53:31 +05:30
Bhavin Patel
33fe5bbcba
Branch was auto-updated.
2024-09-25 22:53:31 +05:30
Bhavin Patel
f373b62a86
Branch was auto-updated.
2024-09-25 22:43:29 +05:30
Bhavin Patel
1c4c409f99
Branch was auto-updated.
2024-09-25 22:43:28 +05:30
Bhavin Patel
ec168c8c8b
Merge branch 'develop' into valleyrat
2024-09-25 22:43:22 +05:30
pyth0n1c
4cf943ffa4
Final round of fixes to fields with
...
extra newlines with version and date
bumps.
2024-09-24 21:46:38 -07:00
pyth0n1c
8b675ad971
More detections have been updated. there are still a few with extra whitespace that must be taken care of
2024-09-24 17:04:43 -07:00
pyth0n1c
5b75e85ef8
second pass at fixing whitespace and related update fields
2024-09-24 16:53:25 -07:00
pyth0n1c
b43bb4fb4e
Fix dates, fields with spaces, and update verisons for many detections
2024-09-24 16:37:44 -07:00
Bhavin Patel
1b434a1d43
updating macro
2024-09-25 01:35:22 +05:30
Bhavin Patel
cbeadd54c5
message
2024-09-25 01:32:19 +05:30
Bhavin Patel
e7ec6e384c
updating from eri's comments
2024-09-25 01:31:15 +05:30
Gowthamaraj rajendran
19f81c24ef
Add data source object
2024-09-24 10:00:05 -07:00
Bhavin Patel
0a2890d4b9
Branch was auto-updated.
2024-09-24 20:12:02 +05:30
Bhavin Patel
413668ecf6
Branch was auto-updated.
2024-09-24 20:12:00 +05:30
Bhavin Patel
90533f8123
remove kind
2024-09-24 19:51:40 +05:30
Bhavin Patel
6e4ae3df95
remove kind
2024-09-24 19:45:07 +05:30
tccontre
3101ca1202
valleyrat
2024-09-19 11:19:16 +02:00
tccontre
27e28cdf7e
valleyrat
2024-09-18 15:00:54 +02:00
tccontre
d1a8e40b99
valleyrat
2024-09-18 11:45:50 +02:00
tccontre
fd28966766
valleyrat
2024-09-17 09:47:33 +02:00
Gowthamaraj rajendran
602d2c9c1e
edit SPL and dataset
2024-09-12 17:23:00 -07:00