Commit Graph

23231 Commits

Author SHA1 Message Date
Michael Haag 4ed5741a8a Create windows_ldifde_directory_object_behavior.yml 2023-05-25 07:44:14 -06:00
tccontre 2aa964f688 volt_typhoon_2 2023-05-25 15:42:09 +02:00
tccontre b617a454fa Merge branch 'volt_typhoon' of github.com:splunk/security_content into volt_typhoon 2023-05-25 15:07:58 +02:00
tccontre 2c935bb402 volt_typhoon 2023-05-25 15:05:13 +02:00
Michael Haag b881799d7f Update suspicious_copy_on_system32.yml 2023-05-25 06:44:12 -06:00
Michael Haag 29985a3e6c password spray 2023-05-25 06:35:11 -06:00
Michael Haag 435764203d Update windows_dns_gather_network_info.yml 2023-05-25 06:08:14 -06:00
Michael Haag b9b847b9f6 Merge branch 'volt_typhoon' of https://github.com/splunk/security_content into volt_typhoon 2023-05-25 06:07:27 -06:00
Michael Haag ec897a5cbb more 2023-05-25 06:07:25 -06:00
tccontre c887050e65 Merge branch 'volt_typhoon' of github.com:splunk/security_content into volt_typhoon 2023-05-25 14:01:57 +02:00
tccontre b76d701acf volt_typhoon 2023-05-25 14:01:24 +02:00
Michael Haag 20c60fb589 1 more 2023-05-25 06:00:45 -06:00
Michael Haag 9d15cfbf7e few more 2023-05-25 05:59:55 -06:00
Michael Haag 4110afa0bc volts 2023-05-25 05:52:07 -06:00
tccontre aad413f44c volt_typhoon 2023-05-25 12:16:00 +02:00
tccontre 488f750c2e ad_ldap_account_locking_playbook 2023-05-25 10:42:03 +02:00
tccontre 8b59b9e08e Azure_AD_Locking_Playbook 2023-05-25 10:39:23 +02:00
tccontre 2558112a1e AWS_IAM_Account_Locking_Playbook 2023-05-25 10:33:05 +02:00
Lou Stella 395923d3f8 Generated output 2023-05-24 17:54:15 -05:00
Lou Stella 0db1b8faf4 converted 2023-05-24 13:18:38 -05:00
Lou Stella 8bce0fb358 updated base rule 2023-05-24 13:02:14 -05:00
tccontre 03ad08635e iceid_dfir_coverage 2023-05-24 14:58:17 +02:00
tccontre 97307452a5 Update network_share_discovery_via_dir_command.yml 2023-05-24 10:50:56 +02:00
tccontre 742a34eefb iceid_dfir_coverage 2023-05-24 10:11:41 +02:00
mvelazco 71fcc66c96 Merge branch 'TR2850_RBA_PrivEsc' of github.com:splunk/security_content into TR2850_RBA_PrivEsc 2023-05-23 17:26:30 -04:00
mvelazco 508ca2a051 updates 2023-05-23 17:26:18 -04:00
srv-rr-gh-researchbt 75dba8df5d Branch was auto-updated. 2023-05-23 14:13:28 -07:00
srv-rr-gh-researchbt 771954a422 Branch was auto-updated. 2023-05-23 14:13:26 -07:00
srv-rr-gh-researchbt eae0d37b69 Branch was auto-updated. 2023-05-23 14:13:25 -07:00
srv-rr-gh-researchbt f3d0437374 Branch was auto-updated. 2023-05-23 14:13:24 -07:00
srv-rr-gh-researchbt b54262aecc Branch was auto-updated. 2023-05-23 14:13:23 -07:00
srv-rr-gh-researchbt ed85454d17 Branch was auto-updated. 2023-05-23 14:13:23 -07:00
srv-rr-gh-researchbt 652b971ad7 Branch was auto-updated. 2023-05-23 14:13:22 -07:00
srv-rr-gh-researchbt dd4b5539fe Branch was auto-updated. 2023-05-23 14:13:21 -07:00
srv-rr-gh-researchbt ae1a6bf438 Branch was auto-updated. 2023-05-23 14:13:20 -07:00
srv-rr-gh-researchbt 6e903797da Branch was auto-updated. 2023-05-23 14:13:19 -07:00
srv-rr-gh-researchbt a6e73fb826 Branch was auto-updated. 2023-05-23 14:13:18 -07:00
srv-rr-gh-researchbt 775207aa4b Branch was auto-updated. 2023-05-23 14:13:17 -07:00
srv-rr-gh-researchbt 849a0885df Branch was auto-updated. 2023-05-23 14:13:16 -07:00
srv-rr-gh-researchbt ad01240471 Branch was auto-updated. 2023-05-23 14:13:15 -07:00
srv-rr-gh-researchbt 78b04b3073 Branch was auto-updated. 2023-05-23 14:13:14 -07:00
srv-rr-gh-researchbt ac6b96493b Branch was auto-updated. 2023-05-23 14:13:13 -07:00
srv-rr-gh-researchbt f7074f48b6 Branch was auto-updated. 2023-05-23 14:13:12 -07:00
Bhavin Patel c65dda5c0a Merge pull request #2673 from splunk/atomic_tag_redline
atomic_tag_redline
2023-05-23 14:12:56 -07:00
patel-bhavin 2f947af695 fix up yaml for validation 2023-05-23 14:07:22 -07:00
mvelazco 62e859ba7b correlation for priv esc 2023-05-23 16:30:18 -04:00
Lou Stella 316f27c3d2 Names and testing 2023-05-23 10:34:18 -05:00
Lou Stella 7adde2c3fc Updated to remove non-results 2023-05-23 10:11:01 -05:00
tccontre 1d6a5a5a01 Update chcp_command_execution.yml 2023-05-23 17:09:54 +02:00
tccontre 8f46746362 Update chcp_command_execution.yml 2023-05-23 16:48:01 +02:00