Commit Graph

23231 Commits

Author SHA1 Message Date
dluxtron 0b0b19f10d Adding Rogue DC Detection 2022-09-08 18:39:38 +10:00
dluxtron 32dd94c6ef Adding DCSync Attack 2022-09-08 18:17:58 +10:00
dluxtron 29da484365 Adding DCSync Attack 2022-09-08 18:14:24 +10:00
dluxtron 925b1eb2cd DCShadow Detection 2022-09-08 16:08:36 +10:00
dluxtron f9c3a86423 DCShadow Detection 2022-09-08 15:49:03 +10:00
dluxtron ab1ba478ae DCShadow Detection 2022-09-08 14:41:16 +10:00
dluxtron 56ddcbc15c DCShadow Detection 2022-09-08 14:33:53 +10:00
dluxtron 1d6c0d6350 DCShadow Detection 2022-09-08 14:29:17 +10:00
d1vious 83e9bad107 working on feedback 2022-09-07 18:49:22 -04:00
d1vious 46dbe66fff removing duplicate 2022-09-07 11:29:01 -04:00
dluxtron 7692e55d9d DCShadow Detection 2022-09-07 17:06:59 +10:00
mvelazco 4810926509 enhancing descriptions 2022-09-06 18:08:16 -04:00
mvelazco 4cd8633876 Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-09-06 17:26:08 -04:00
mvelazco d81df080b6 updating descriptions 2022-09-06 17:26:06 -04:00
pyth0n1c 981e2a64cc Branch was auto-updated. 2022-09-06 14:07:54 -07:00
pyth0n1c e8006472c2 Branch was auto-updated. 2022-09-06 14:07:53 -07:00
pyth0n1c 7208f63c96 Branch was auto-updated. 2022-09-06 14:07:51 -07:00
pyth0n1c e807d51570 Branch was auto-updated. 2022-09-06 14:07:50 -07:00
pyth0n1c 0ecef3ae3d Branch was auto-updated. 2022-09-06 14:07:49 -07:00
pyth0n1c 1be4026031 Branch was auto-updated. 2022-09-06 14:07:47 -07:00
pyth0n1c d83cb15609 Branch was auto-updated. 2022-09-06 14:07:46 -07:00
pyth0n1c 698474a101 Branch was auto-updated. 2022-09-06 14:07:45 -07:00
pyth0n1c 958ede2a2b Branch was auto-updated. 2022-09-06 14:07:43 -07:00
pyth0n1c 97bfacffc2 Branch was auto-updated. 2022-09-06 14:07:42 -07:00
Rod Soto ae92b16c0a Merge pull request #2351 from splunk/fixdescriptionpt
addedwords
2022-09-06 14:07:21 -07:00
Rod Soto 73e84a326d fixedpathlog 2022-09-06 13:40:08 -07:00
mvelazco 6b333e5c9a Merge branch 'TR-2361_Azure_AD_Persistence' of github.com:splunk/security_content into TR-2361_Azure_AD_Persistence 2022-09-06 16:08:37 -04:00
mvelazco d8cce69644 adding new detection 2022-09-06 16:08:35 -04:00
tccontre 385bc45c5d Update windows_phishing_recent_iso_exec_registry.yml 2022-09-05 10:56:24 +02:00
tccontre 2dc78584a0 Update windows_phishing_recent_iso_exec_registry.yml 2022-09-05 10:56:01 +02:00
tccontre 4e393e9509 Update windows_defacement_modify_transcodedwallpaper_file.yml 2022-09-05 10:29:49 +02:00
tccontre 85fc55b281 brute-rate-3 2022-09-05 10:26:55 +02:00
pyth0n1c cca076f667 Branch was auto-updated. 2022-09-02 19:15:41 -04:00
pyth0n1c 7ec4b9e936 Branch was auto-updated. 2022-09-02 19:15:41 -04:00
pyth0n1c 3880a4f1cf Branch was auto-updated. 2022-09-02 19:15:38 -04:00
pyth0n1c 6d6c132937 Branch was auto-updated. 2022-09-02 19:15:36 -04:00
pyth0n1c e701306956 Branch was auto-updated. 2022-09-02 19:15:35 -04:00
pyth0n1c 9894bf1583 Branch was auto-updated. 2022-09-02 19:15:34 -04:00
pyth0n1c 7879f6b016 Branch was auto-updated. 2022-09-02 19:15:33 -04:00
pyth0n1c 57028a0345 Branch was auto-updated. 2022-09-02 19:15:32 -04:00
pyth0n1c 585f0a407e Branch was auto-updated. 2022-09-02 19:15:31 -04:00
pyth0n1c 5946b4adfa Branch was auto-updated. 2022-09-02 19:15:30 -04:00
pyth0n1c ca65ddd817 Branch was auto-updated. 2022-09-02 19:15:29 -04:00
pyth0n1c 95e4eb048c Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection
Update linux_kernel_module_enumeration.test.yml

Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
2022-09-02 19:15:12 -04:00
pyth0n1c 5c4d054652 Update linux_kernel_module_enumeration.test.yml
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
mvelazco 3d308b862f adding new detection 2022-09-02 18:25:34 -04:00
mvelazco 441a1542bd adding new detection. fixing types. adding line to lookup 2022-09-02 18:03:14 -04:00
Michael Haag f0601e4f9d Update ssa___windows_system_binary_proxy_execution_compiled_html_file_decompile.yml 2022-09-02 15:04:47 -06:00
Michael Haag 6287645f48 BA 2022-09-02 14:44:39 -06:00
dluxtron 24c2b5cf82 Adding DCShadow detection 2022-09-02 13:57:00 +10:00