dluxtron
0b0b19f10d
Adding Rogue DC Detection
2022-09-08 18:39:38 +10:00
dluxtron
32dd94c6ef
Adding DCSync Attack
2022-09-08 18:17:58 +10:00
dluxtron
29da484365
Adding DCSync Attack
2022-09-08 18:14:24 +10:00
dluxtron
925b1eb2cd
DCShadow Detection
2022-09-08 16:08:36 +10:00
dluxtron
f9c3a86423
DCShadow Detection
2022-09-08 15:49:03 +10:00
dluxtron
ab1ba478ae
DCShadow Detection
2022-09-08 14:41:16 +10:00
dluxtron
56ddcbc15c
DCShadow Detection
2022-09-08 14:33:53 +10:00
dluxtron
1d6c0d6350
DCShadow Detection
2022-09-08 14:29:17 +10:00
d1vious
83e9bad107
working on feedback
2022-09-07 18:49:22 -04:00
d1vious
46dbe66fff
removing duplicate
2022-09-07 11:29:01 -04:00
dluxtron
7692e55d9d
DCShadow Detection
2022-09-07 17:06:59 +10:00
mvelazco
4810926509
enhancing descriptions
2022-09-06 18:08:16 -04:00
mvelazco
4cd8633876
Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence
2022-09-06 17:26:08 -04:00
mvelazco
d81df080b6
updating descriptions
2022-09-06 17:26:06 -04:00
pyth0n1c
981e2a64cc
Branch was auto-updated.
2022-09-06 14:07:54 -07:00
pyth0n1c
e8006472c2
Branch was auto-updated.
2022-09-06 14:07:53 -07:00
pyth0n1c
7208f63c96
Branch was auto-updated.
2022-09-06 14:07:51 -07:00
pyth0n1c
e807d51570
Branch was auto-updated.
2022-09-06 14:07:50 -07:00
pyth0n1c
0ecef3ae3d
Branch was auto-updated.
2022-09-06 14:07:49 -07:00
pyth0n1c
1be4026031
Branch was auto-updated.
2022-09-06 14:07:47 -07:00
pyth0n1c
d83cb15609
Branch was auto-updated.
2022-09-06 14:07:46 -07:00
pyth0n1c
698474a101
Branch was auto-updated.
2022-09-06 14:07:45 -07:00
pyth0n1c
958ede2a2b
Branch was auto-updated.
2022-09-06 14:07:43 -07:00
pyth0n1c
97bfacffc2
Branch was auto-updated.
2022-09-06 14:07:42 -07:00
Rod Soto
ae92b16c0a
Merge pull request #2351 from splunk/fixdescriptionpt
...
addedwords
2022-09-06 14:07:21 -07:00
Rod Soto
73e84a326d
fixedpathlog
2022-09-06 13:40:08 -07:00
mvelazco
6b333e5c9a
Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence
2022-09-06 16:08:37 -04:00
mvelazco
d8cce69644
adding new detection
2022-09-06 16:08:35 -04:00
tccontre
385bc45c5d
Update windows_phishing_recent_iso_exec_registry.yml
2022-09-05 10:56:24 +02:00
tccontre
2dc78584a0
Update windows_phishing_recent_iso_exec_registry.yml
2022-09-05 10:56:01 +02:00
tccontre
4e393e9509
Update windows_defacement_modify_transcodedwallpaper_file.yml
2022-09-05 10:29:49 +02:00
tccontre
85fc55b281
brute-rate-3
2022-09-05 10:26:55 +02:00
pyth0n1c
cca076f667
Branch was auto-updated.
2022-09-02 19:15:41 -04:00
pyth0n1c
7ec4b9e936
Branch was auto-updated.
2022-09-02 19:15:41 -04:00
pyth0n1c
3880a4f1cf
Branch was auto-updated.
2022-09-02 19:15:38 -04:00
pyth0n1c
6d6c132937
Branch was auto-updated.
2022-09-02 19:15:36 -04:00
pyth0n1c
e701306956
Branch was auto-updated.
2022-09-02 19:15:35 -04:00
pyth0n1c
9894bf1583
Branch was auto-updated.
2022-09-02 19:15:34 -04:00
pyth0n1c
7879f6b016
Branch was auto-updated.
2022-09-02 19:15:33 -04:00
pyth0n1c
57028a0345
Branch was auto-updated.
2022-09-02 19:15:32 -04:00
pyth0n1c
585f0a407e
Branch was auto-updated.
2022-09-02 19:15:31 -04:00
pyth0n1c
5946b4adfa
Branch was auto-updated.
2022-09-02 19:15:30 -04:00
pyth0n1c
ca65ddd817
Branch was auto-updated.
2022-09-02 19:15:29 -04:00
pyth0n1c
95e4eb048c
Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection
...
Update linux_kernel_module_enumeration.test.yml
Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
2022-09-02 19:15:12 -04:00
pyth0n1c
5c4d054652
Update linux_kernel_module_enumeration.test.yml
...
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
mvelazco
3d308b862f
adding new detection
2022-09-02 18:25:34 -04:00
mvelazco
441a1542bd
adding new detection. fixing types. adding line to lookup
2022-09-02 18:03:14 -04:00
Michael Haag
f0601e4f9d
Update ssa___windows_system_binary_proxy_execution_compiled_html_file_decompile.yml
2022-09-02 15:04:47 -06:00
Michael Haag
6287645f48
BA
2022-09-02 14:44:39 -06:00
dluxtron
24c2b5cf82
Adding DCShadow detection
2022-09-02 13:57:00 +10:00