admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,690 Commits 697 Branches 195 Tags
hpot_ttp
Commit Graph

7690 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 83bcadf468 Branch was auto-updated. 2021-06-17 13:22:14 +00:00
tccontre 882f1eafd0 Merge pull request #1436 from splunk/ransom_ttps 
ransomware common TTPs
 2021-06-17 15:21:56 +02:00
tccontre a1b27f125f Delete allow_operation_with_consent_admin.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:22:00 +02:00
tccontre 9a25b289c3 Delete clear_unallocated_sector_using_cipher_app.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:41 +02:00
tccontre de20af3ac5 Delete permission_modification_using_takeown_app.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:28 +02:00
tccontre 150d8c9f34 Delete prevent_automatic_repair_mode_using_bcdedit.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:05 +02:00
tccontre 32defb377a Delete start_up_during_safe_mode_boot.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:20:51 +02:00
tccontre b198eb9a22 Delete start_up_during_safe_mode_boot.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:20:32 +02:00
tccontre 6a92e68a08 Delete prevent_automatic_repair_mode_using_bcdedit.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:20:17 +02:00
tccontre 75189e2b1d Delete permission_modification_using_takeown_app.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:19:57 +02:00
tccontre e9e5c446f4 Delete clear_unallocated_sector_using_cipher_app.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:19:39 +02:00
tccontre c7c2b94d37 Delete allow_operation_with_consent_admin.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:19:27 +02:00
tccontre 878bf692fa Delete disable_logs_using_wevtutil.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:13:51 +02:00
tccontre ff8878ce3d Delete disable_logs_using_wevtutil.yml 
un-intended files to be included in this PR. this file is in rttp PR
 2021-06-16 10:12:14 +02:00
Detection Testing Service 3381ce7205 Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp 2021-06-15 15:50:48 +00:00
root 76023baae1 Added detection testing service results inWMI Recon Running Process Or Services 2021-06-15 15:50:47 +00:00
Detection Testing Service b073d80bcf Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp 2021-06-15 15:43:44 +00:00
root aa4fc9ddfa Added detection testing service results inRecon Using WMI Class 2021-06-15 15:43:44 +00:00
Detection Testing Service 1f65e24932 Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp 2021-06-15 15:40:49 +00:00
root 0ca1e7f708 Added detection testing service results inRecon AVProduct Through Pwh or WMI 2021-06-15 15:40:48 +00:00
Detection Testing Service 58fd2b6756 Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp 2021-06-15 15:25:51 +00:00
root 9c821aa984 Added detection testing service results inPowershell Using memory As Backing Store 2021-06-15 15:25:51 +00:00
root c8ad2a7428 Added detection testing service results inPowershell Processing Stream Of Data 2021-06-15 15:20:44 +00:00
root f581f7a93e Added detection testing service results inPowershell Creating Thread Mutex 2021-06-15 15:04:14 +00:00
tccontre 261182ca93 Merge branch 'hpot_ttp' of github.com:splunk/security_content into hpot_ttp 2021-06-15 16:43:50 +02:00
tccontre bed3227224 wild_check 2021-06-15 16:43:23 +02:00
github-actions[bot] 4292b82e6c Branch was auto-updated. 2021-06-15 14:23:36 +00:00
github-actions[bot] 6b3b3c5a26 Branch was auto-updated. 2021-06-15 14:23:35 +00:00
P4T12ICK ec1a205bb5 Merge pull request #1442 from splunk/data_exfil 
data_exfil
 2021-06-15 16:23:17 +02:00
P4T12ICK 62ce70ce18 Merge branch 'develop' into data_exfil 2021-06-15 16:18:22 +02:00
root 61a105ade8 Added detection testing service results inDisable Logs Using WevtUtil 2021-06-15 14:14:45 +00:00
tccontre c4c35025de Merge branch 'ransom_ttps' of github.com:splunk/security_content into ransom_ttps 2021-06-15 15:54:26 +02:00
tccontre 5fe7b16036 sl 2021-06-15 15:54:02 +02:00
tccontre 197e73cd61 de 2021-06-15 15:51:08 +02:00
github-actions[bot] b9adec82fb Branch was auto-updated. 2021-06-15 13:44:08 +00:00
github-actions[bot] 90f9bfabcc Branch was auto-updated. 2021-06-15 13:44:07 +00:00
mhart-splunk 6270837a4c Excessive win temp detection (#1438) 
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
 2021-06-15 09:43:48 -04:00
tccontre 9e009e50b7 data_exfil 2021-06-15 15:36:41 +02:00
github-actions[bot] a856e9127a Branch was auto-updated. 2021-06-14 15:38:16 +00:00
github-actions[bot] 5fe9489af5 Branch was auto-updated. 2021-06-14 15:38:14 +00:00
Jose Enrique Hernandez c0b6f6bffe Merge pull request #1407 from splunk/dependabot/pip/mysql-connector-python-8.0.25 
Bump mysql-connector-python from 8.0.24 to 8.0.25
 2021-06-14 11:37:50 -04:00
github-actions[bot] 84d22fa4f4 Branch was auto-updated. 2021-06-14 15:33:33 +00:00
github-actions[bot] b14a8ec28e Branch was auto-updated. 2021-06-14 15:33:32 +00:00
github-actions[bot] d94668d844 Branch was auto-updated. 2021-06-14 15:33:28 +00:00
Jose Enrique Hernandez bfc4d1cd98 Merge pull request #1406 from splunk/dependabot/pip/ansible-3.4.0 
Bump ansible from 3.1.0 to 3.4.0
 2021-06-14 11:33:12 -04:00
github-actions[bot] fff5b34889 Branch was auto-updated. 2021-06-14 15:29:05 +00:00
github-actions[bot] c7dead776f Branch was auto-updated. 2021-06-14 15:29:02 +00:00
github-actions[bot] 9395db67bc Branch was auto-updated. 2021-06-14 15:28:55 +00:00
github-actions[bot] d26320f350 Branch was auto-updated. 2021-06-14 15:28:54 +00:00
Jose Enrique Hernandez 48ac32535e Merge pull request #1403 from splunk/dependabot/pip/botocore-1.20.74 
Bump botocore from 1.20.30 to 1.20.74
 2021-06-14 11:28:35 -04:00