admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,618 Commits 697 Branches 195 Tags
fixing_prohibited_apps_spawning_cmdprompt
Commit Graph

210 Commits

Author SHA1 Message Date
mhaag-spl babbd47d81 Update wineventlog_task_scheduler.yml 2021-11-09 13:42:23 -07:00
Bhavin Patel fc4cc81ad6 Branch was auto-updated. 2021-11-03 10:43:52 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
Bhavin Patel cd5dac3ebf Branch was auto-updated. 2021-10-28 11:18:42 -07:00
mhaag-spl 27521060d9 Update wineventlog_task_scheduler.yml 2021-10-21 12:07:26 -06:00
mhaag-spl 0772e6352b taskscheduler hunting 2021-10-21 09:56:27 -06:00
mhaag-spl f7112aca62 fixes 2021-10-20 07:08:14 -06:00
mhaag-spl f8d6ce147d Curling 2021-10-19 10:44:17 -06:00
mhaag-spl 9b8ff687ae HaagRoast 2021-10-15 12:31:33 -06:00
tccontre fb296c8508 privilege_escalation_persistence 2021-10-06 11:15:47 +02:00
tccontre 82633e151a privilege_escalation_persistence 2021-10-05 11:56:48 +02:00
tccontre 993f0adb87 privilege_escalation_persistence 2021-09-29 10:42:05 +02:00
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Bhavin Patel c560335cab Branch was auto-updated. 2021-09-08 00:52:42 -07:00
P4T12ICK a917acaf4c updated detections 2021-09-06 14:49:19 +02:00
mhaag-spl fa2b35c293 Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-03 07:10:38 -06:00
github-actions[bot] 88ad9717f9 Branch was auto-updated. 2021-09-02 16:44:59 +00:00
mhaag-spl e8de140562 fixes 2021-09-01 16:58:23 -06:00
P4T12ICK 7f980b6a46 circle ci detecction 2021-09-01 17:54:38 +02:00
P4T12ICK dcbc0f95ad github detection 2021-09-01 13:56:23 +02:00
tccontre b90326f55c dev_git 2021-08-27 13:28:06 +02:00
github-actions[bot] 35398496bc Branch was auto-updated. 2021-08-27 08:59:54 +00:00
github-actions[bot] fff8689f1f Branch was auto-updated. 2021-08-27 08:21:40 +00:00
github-actions[bot] 0c1a1c79b7 Branch was auto-updated. 2021-08-27 08:21:37 +00:00
P4T12ICK fed6fc9502 k8s scanner 2021-08-25 10:49:51 +02:00
P4T12ICK 53bf235622 k8s scanner detection 2021-08-24 14:39:15 +02:00
github-actions[bot] 8ff6371446 Branch was auto-updated. 2021-08-23 15:21:50 +00:00
github-actions[bot] 6f0170b022 Branch was auto-updated. 2021-08-23 15:21:43 +00:00
P4T12ICK 749df59357 new detection 2021-08-23 10:17:40 +02:00
tccontre e5ae722014 dev_git 2021-08-20 13:59:06 +02:00
github-actions[bot] 3f90fc50cb Branch was auto-updated. 2021-08-19 15:42:43 +00:00
P4T12ICK dd419961e7 container upload aws ecr 2021-08-19 15:51:17 +02:00
mhaag-spl 0e19432a1d msbuild and microsoftworkflowcompiler 2021-08-19 06:57:11 -06:00
github-actions[bot] 59ae237866 Branch was auto-updated. 2021-08-19 11:15:58 +00:00
mhaag-spl 495a94bbbc Update process_esentutl.yml 2021-08-18 11:14:13 -06:00
mhaag-spl 1eb1f40ae0 esentutil 
Related to Conti leaks
 2021-08-18 10:47:58 -06:00
mhaag-spl 09f29ad081 macros 2021-08-18 09:50:08 -06:00
tccontre 1bde88fc3f dev_ops_uc 2021-08-18 15:58:35 +02:00
mhaag-spl d648d525b3 macro'd bitsadmin 2021-08-17 15:20:40 -06:00
mhaag-spl 71481634a3 macro'd netsh 2021-08-17 15:14:35 -06:00
mhaag-spl ba6c98c292 macro'd certutil 2021-08-17 15:00:51 -06:00
mhaag-spl e1752d3440 macro'd hh 2021-08-17 14:29:16 -06:00
mhaag-spl 5dc0e8f211 macro'd net 2021-08-17 13:56:57 -06:00
mhaag-spl a1a670203f macro'd mshta 2021-08-17 13:38:11 -06:00
mhaag-spl ad88e9a0ff macro'd regsvr32 2021-08-17 13:27:48 -06:00
mhaag-spl 3251fcc1f6 macrod rundll32 2021-08-17 13:21:24 -06:00
mhaag-spl 644747d578 macro'd reg cmd 2021-08-17 12:09:31 -06:00
mhaag-spl 9958c82c3c macro'd wmic 2021-08-17 11:44:30 -06:00
Michael Haag c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm 2021-08-17 11:19:42 -06:00