root
|
c7d5193225
|
Added detection testing service results inOffice Product Writing cab or inf
|
2021-09-15 18:03:01 +00:00 |
|
mhaag-spl
|
e44c3c4be7
|
testing
|
2021-09-15 10:36:10 -06:00 |
|
mvelazco
|
1fde288203
|
Merge pull request #1662 from splunk/AD_Discovery_TR-789_5
May The Haag Be With You
|
2021-09-14 15:34:29 -04:00 |
|
root
|
575377d312
|
Added detection testing service results inPowerShell Get LocalGroup Discovery
|
2021-09-14 18:46:53 +00:00 |
|
Detection Testing Service
|
6bed1bdc71
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:20:58 +00:00 |
|
root
|
70dfb3b5d1
|
Added detection testing service results inWmic Group Discovery
|
2021-09-14 18:20:57 +00:00 |
|
Detection Testing Service
|
1a5e50fbec
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:14:29 +00:00 |
|
root
|
eaacec47db
|
Added detection testing service results inPowershell Get LocalGroup Discovery with Script Block Logging
|
2021-09-14 18:14:29 +00:00 |
|
Detection Testing Service
|
84f5346fdf
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 18:02:07 +00:00 |
|
root
|
c514bf1361
|
Added detection testing service results inNet Localgroup Discovery
|
2021-09-14 18:02:07 +00:00 |
|
Detection Testing Service
|
5cf90f60b2
|
Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5
|
2021-09-14 17:55:42 +00:00 |
|
root
|
7ccd84ccfd
|
Added detection testing service results inGet WMIObject Group Discovery with Script Block Logging
|
2021-09-14 17:55:41 +00:00 |
|
root
|
9836d8c263
|
Added detection testing service results inGet WMIObject Group Discovery
|
2021-09-14 17:52:46 +00:00 |
|
mhaag-spl
|
358917d733
|
May The Haag Be With You
|
2021-09-14 11:05:59 -06:00 |
|
mvelazco
|
47e3c2bf9e
|
fixing message field
|
2021-09-14 11:54:58 -04:00 |
|
mvelazco
|
2e6bb4886b
|
Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-14 10:01:54 -04:00 |
|
mvelazco
|
379f8e82c1
|
adding required_fields
|
2021-09-14 10:01:52 -04:00 |
|
Detection Testing Service
|
042f7e0c74
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-14 13:35:29 +00:00 |
|
root
|
31a0177b31
|
Added detection testing service results inGetCurrent User with PowerShell Script Block
|
2021-09-14 13:35:28 +00:00 |
|
root
|
4abb769c46
|
Added detection testing service results inGetCurrent User with PowerShell
|
2021-09-14 13:33:53 +00:00 |
|
Detection Testing Service
|
893822a9c9
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 22:58:59 +00:00 |
|
root
|
a51106c70d
|
Added detection testing service results inUser Discovery With Env Vars PowerShell
|
2021-09-13 22:58:58 +00:00 |
|
Detection Testing Service
|
d953fb05b1
|
Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 22:58:57 +00:00 |
|
root
|
137aa7a5e5
|
Added detection testing service results inUser Discovery With Env Vars PowerShell Script Block
|
2021-09-13 22:58:57 +00:00 |
|
root
|
e4719b9437
|
Added detection testing service results inSystem User Discovery With Whoami
|
2021-09-13 22:56:08 +00:00 |
|
root
|
07e27ba6ae
|
Added detection testing service results inSystem User Discovery With Query
|
2021-09-13 22:03:33 +00:00 |
|
mvelazco
|
2959c2edb7
|
Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9
|
2021-09-13 17:22:33 -04:00 |
|
mvelazco
|
687fb1745c
|
adding 4 detections
|
2021-09-13 17:22:30 -04:00 |
|
Bhavin Patel
|
9522b364c5
|
Branch was auto-updated.
|
2021-09-13 11:10:27 -07:00 |
|
Bhavin Patel
|
70dc4c3414
|
Merge pull request #1658 from splunk/AD_Discovery_TR-789_8
AD_Discovery_TR-789_8
|
2021-09-13 11:10:10 -07:00 |
|
Bhavin Patel
|
eca9191516
|
Branch was auto-updated.
|
2021-09-13 11:09:36 -07:00 |
|
Bhavin Patel
|
b94510f831
|
Merge pull request #1624 from splunk/AD_Discovery_TR-789_3
AD_Discovery_TR-789_3
|
2021-09-13 11:09:16 -07:00 |
|
Bhavin Patel
|
5cd91c53c2
|
Branch was auto-updated.
|
2021-09-13 11:07:52 -07:00 |
|
Bhavin Patel
|
2a06605804
|
Merge pull request #1596 from splunk/AD_Discovery_TR-789_6
AD_Discovery_TR-789_6
|
2021-09-13 11:07:33 -07:00 |
|
Bhavin Patel
|
20913cd362
|
Branch was auto-updated.
|
2021-09-13 11:06:38 -07:00 |
|
Bhavin Patel
|
361c57dfc7
|
Merge pull request #1620 from splunk/AD_Discovery_TR-789_7
AD_Discovery_TR-789_7
|
2021-09-13 11:06:16 -07:00 |
|
mvelazco
|
ce3b5cadfd
|
initial 2 detections
|
2021-09-13 12:08:42 -04:00 |
|
mhaag-spl
|
fd34f91dcd
|
Update create_or_delete_windows_shares_using_net_exe.yml
|
2021-09-13 07:34:37 -06:00 |
|
root
|
b138ecff4e
|
Added detection testing service results inOffice Product Writing cab or inf
|
2021-09-10 18:18:08 +00:00 |
|
root
|
7ea257e5e5
|
Added detection testing service results inNetwork Connection Discovery With Arp
|
2021-09-10 18:09:54 +00:00 |
|
mvelazco
|
d6e3761f86
|
Merge branch 'AD_Discovery_TR-789_8' of github.com:splunk/security_content into AD_Discovery_TR-789_8
|
2021-09-10 13:50:54 -04:00 |
|
mvelazco
|
81055f2176
|
updating required fields
|
2021-09-10 13:50:29 -04:00 |
|
Detection Testing Service
|
b02426a8c0
|
Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8
|
2021-09-10 17:46:52 +00:00 |
|
root
|
08072c8fe8
|
Added detection testing service results inNetwork Connection Discovery With Netstat
|
2021-09-10 17:46:51 +00:00 |
|
Detection Testing Service
|
46a099be87
|
Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8
|
2021-09-10 17:41:36 +00:00 |
|
root
|
a9352e14ee
|
Added detection testing service results inNetwork Connection Discovery With Arp
|
2021-09-10 17:41:35 +00:00 |
|
mhaag-spl
|
40e76edced
|
Haag With the Wind: CVE-2021-40444 Edition
- Office Product Writing cab or inf
|
2021-09-10 11:39:56 -06:00 |
|
Detection Testing Service
|
09b79bf310
|
Merge branch 'AD_Discovery_TR-789_8' of https://github.com/splunk/security_content into AD_Discovery_TR-789_8
|
2021-09-10 17:39:06 +00:00 |
|
root
|
b32a091a30
|
Added detection testing service results inGetNetTcpconnection with PowerShell Script Block
|
2021-09-10 17:39:05 +00:00 |
|
mvelazco
|
4de7fe052d
|
Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 13:31:21 -04:00 |
|