admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,690 Commits 697 Branches 195 Tags
hpot_ttp
Commit Graph

579 Commits

Author SHA1 Message Date
github-actions[bot] 83bcadf468 Branch was auto-updated. 2021-06-17 13:22:14 +00:00
tccontre a1b27f125f Delete allow_operation_with_consent_admin.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:22:00 +02:00
tccontre 9a25b289c3 Delete clear_unallocated_sector_using_cipher_app.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:41 +02:00
tccontre de20af3ac5 Delete permission_modification_using_takeown_app.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:28 +02:00
tccontre 150d8c9f34 Delete prevent_automatic_repair_mode_using_bcdedit.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:21:05 +02:00
tccontre 32defb377a Delete start_up_during_safe_mode_boot.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:20:51 +02:00
tccontre 878bf692fa Delete disable_logs_using_wevtutil.test.yml 
un-intended files. this is already in rttp PR
 2021-06-16 10:13:51 +02:00
github-actions[bot] b9adec82fb Branch was auto-updated. 2021-06-15 13:44:08 +00:00
github-actions[bot] 90f9bfabcc Branch was auto-updated. 2021-06-15 13:44:07 +00:00
mhart-splunk 6270837a4c Excessive win temp detection (#1438) 
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
 2021-06-15 09:43:48 -04:00
github-actions[bot] 1a1963ea02 Branch was auto-updated. 2021-06-14 15:24:10 +00:00
tccontre 3b479c8af1 hpot 2021-06-14 11:55:13 +02:00
github-actions[bot] 7ba4c41c89 Branch was auto-updated. 2021-06-10 17:31:58 +00:00
tccontre ccf3080958 rttp 2021-06-10 15:18:16 +02:00
Michael Hart af4eff8cb5 Fixing file reference name 2021-06-09 14:57:17 -04:00
Michael Hart 7236281a42 Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection 2021-06-09 14:24:41 -04:00
Michael Hart 144bcaff80 Adding in test file 2021-06-09 14:20:03 -04:00
github-actions[bot] e547ad7395 Branch was auto-updated. 2021-06-08 19:00:26 +00:00
tccontre 2af2c59337 revil2 2021-06-04 16:41:23 +02:00
tccontre 1f8cf6ad4c Update revil_common_exec_parameter.test.yml 2021-06-04 16:14:09 +02:00
tccontre 1dc92ffce5 revil1 2021-06-04 16:10:57 +02:00
tccontre 09796e3f67 revil 2021-06-04 16:07:02 +02:00
github-actions[bot] 2525072da8 Branch was auto-updated. 2021-06-03 19:19:26 +00:00
mhaag-spl 2af2dbdd0e AzureHound 2021-06-03 10:40:41 -06:00
mhaag-spl f269268b5a 7zip and rar 2021-06-03 09:41:39 -06:00
mhaag-spl 487c1c861e psexec renamed 2021-06-03 09:17:31 -06:00
mhaag-spl cc40bf658c SharpHound 2021-06-03 08:48:19 -06:00
mhaag-spl 95c1b4408c Cobalt Jump 2021-05-27 08:22:53 -06:00
tccontre 91978e5c10 Update enable_rdp_in_other_port_number.test.yml 2021-05-26 13:37:03 +02:00
tccontre 80210ef7d8 casper1 2021-05-26 13:33:47 +02:00
github-actions[bot] 04227fd8ee Branch was auto-updated. 2021-05-21 17:57:32 +00:00
Bhavin Patel 45d45a345e Merge branch 'develop' into den-haag 2021-05-21 10:53:33 -07:00
github-actions[bot] 1a3df7445e Branch was auto-updated. 2021-05-20 23:01:11 +00:00
tccontre 99681d7f46 lndn1 2021-05-19 16:06:45 +02:00
mhaag-spl 1037aed35d svc-exe 2021-05-18 09:45:46 -06:00
github-actions[bot] 4cb715aa8d Branch was auto-updated. 2021-05-18 11:30:13 +00:00
P4T12ICK f91afa2675 add data exfil story to detections 2021-05-18 13:01:29 +02:00
P4T12ICK da0d634f64 Merge branch 'develop' into xmrig 2021-05-18 10:06:05 +02:00
tcontreras 3d3ff91c2b removed 2021-05-17 10:00:36 +02:00
bpatel a55a6bff0a delete test file 2021-05-13 14:26:55 -07:00
tcontreras d631a7e2f2 fail 2021-05-13 20:32:25 +02:00
github-actions[bot] 659766fc1e Branch was auto-updated. 2021-05-13 17:54:33 +00:00
tcontreras c24f154dce com_obj 2021-05-13 18:58:14 +02:00
mhaag-spl 5ff8c6372c SLUI 2021-05-13 06:52:59 -06:00
bpatel 4f9b8a2b1b test time 2021-05-12 14:53:27 -07:00
bpatel 743bbaf051 Merge branch 'darkside' of github.com:splunk/security_content into darkside 2021-05-12 13:50:15 -07:00
bpatel 03444a29e9 test file 2021-05-12 13:50:03 -07:00
mhaag-spl f4f519f6aa Extract SAM from registry 2021-05-12 14:45:55 -06:00
tcontreras d984670146 shadow1 2021-05-12 18:49:24 +02:00
tcontreras 7bb8eb506c shadow 2021-05-12 18:35:13 +02:00