862 Commits

Author	SHA1	Message	Date
mhaag-spl	5e36ce1cf3	curleddd	2021-12-10 11:49:41 -07:00
mhaag-spl	53dc410071	rcloned 4688 logs	2021-12-10 11:39:45 -07:00
Bhavin Patel	5e42f3b78c	Branch was auto-updated.	2021-12-09 09:06:08 -08:00
Bhavin Patel	8cc5adc54c	Branch was auto-updated.	2021-12-08 09:36:32 -08:00
Bhavin Patel	456d7483d6	Branch was auto-updated.	2021-12-08 09:36:24 -08:00
P4T12ICK	2e4bebab22	BA detections	2021-12-08 15:27:44 +01:00
P4T12ICK	7e1fbbc8ad	BA detections	2021-12-08 12:50:13 +01:00
P4T12ICK	88bbb3dd64	BA detections	2021-12-08 10:43:36 +01:00
P4T12ICK	a7637dae83	BA detections	2021-12-08 09:46:20 +01:00
mhaag-spl	692a565bef	Update ssa___wbadmin_delete_system_backups.test.yml	2021-12-07 14:01:52 -07:00
mhaag-spl	3c2c99fb9c	Update ssa___wbadmin_delete_system_backups.test.yml	2021-12-07 13:55:05 -07:00
mhaag-spl	44bf73018a	wbadmin	2021-12-07 13:31:19 -07:00
mhaag-spl	890e31a9c1	Update ssa___bcdedit_failure_recovery_modification.test.yml	2021-12-07 12:38:37 -07:00
mhaag-spl	e2abbaffe1	fsutil and bcdedit	2021-12-07 12:19:41 -07:00
mhaag-spl	6b36d8c6ec	DNS Exfil	2021-12-07 11:43:34 -07:00
Bhavin Patel	5aade90ec2	Branch was auto-updated.	2021-12-06 11:04:14 -08:00
Bhavin Patel	e5fd9f9fe7	Branch was auto-updated.	2021-12-06 11:04:13 -08:00
mhaag-spl	25dc457c3c	The Unbroken Haag	2021-12-06 11:57:20 -07:00
mvelazco	71410ddb7a	3 new detections	2021-12-03 15:58:00 -05:00
mhaag-spl	0e53970750	First SSA	2021-12-03 11:26:27 -07:00
Bhavin Patel	1747744648	Branch was auto-updated.	2021-12-01 15:41:24 -08:00
Bhavin Patel	57c1ef30dd	Merge pull request #1857 from splunk/RegistryDetectionFixes ... Registry detection fixes	2021-12-01 15:41:01 -08:00
Bhavin Patel	4c9fc158cd	Branch was auto-updated.	2021-12-01 11:42:55 -08:00
Bhavin Patel	78c5f10942	Branch was auto-updated.	2021-11-30 12:02:04 -08:00
mvelazco	0254c60a28	adding detection	2021-11-29 16:50:39 -05:00
Bhavin Patel	024a0be7ff	Branch was auto-updated.	2021-11-25 05:31:55 -08:00
Bhavin Patel	c778a2e35c	Branch was auto-updated.	2021-11-25 05:07:24 -08:00
Bhavin Patel	b25f7b80c3	Branch was auto-updated.	2021-11-25 05:07:23 -08:00
tccontre	dfd210cf29	remcos_evasion	2021-11-25 12:27:39 +01:00
Bhavin Patel	49e82e39ff	Branch was auto-updated.	2021-11-25 01:25:30 -08:00
Bhavin Patel	6d291d2600	Branch was auto-updated.	2021-11-25 01:25:29 -08:00
tccontre	295acf12f0	Update ssa___delete_a_net_user.test.yml	2021-11-25 09:30:44 +01:00
P4T12ICK	40a80473a2	Merge branch 'develop' into ssa_anomalous_usage_of_7zip	2021-11-25 08:36:33 +01:00
Bhavin Patel	ef126c979d	Branch was auto-updated.	2021-11-24 09:13:43 -08:00
Bhavin Patel	c57f06c3a9	Branch was auto-updated.	2021-11-24 09:13:35 -08:00
mvelazco	42913444c4	update dataset location	2021-11-24 09:37:47 -05:00
mvelazco	33e9597304	updating logic and adding datasets	2021-11-23 21:04:04 -05:00
mvelazco	ad273d4ca1	update datasets	2021-11-23 20:33:27 -05:00
mvelazco	c13de25f73	update dataset metadata	2021-11-23 18:42:48 -05:00
mvelazco	c2fd0a4b29	adding dataset fields	2021-11-23 17:15:06 -05:00
mvelazco	4c696f9ad8	updating detections	2021-11-23 14:01:28 -05:00
mvelazco	9b944b67a2	adding 4 new detections	2021-11-23 10:13:07 -05:00
P4T12ICK	e48bf8c257	SSA anommalous usage of archive tools	2021-11-23 10:14:50 +01:00
mvelazco	f2a7006482	Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3	2021-11-22 16:21:46 -05:00
mvelazco	8c2baf103e	creating an extra detection	2021-11-22 16:21:43 -05:00
tccontre	04c433eedf	more_ioc_detections	2021-11-22 15:09:53 +01:00
Bhavin Patel	a1bee25acb	Branch was auto-updated.	2021-11-22 02:53:47 -08:00
Bhavin Patel	fe491600d5	Branch was auto-updated.	2021-11-22 02:53:45 -08:00
Bhavin Patel	ae506e8798	Branch was auto-updated.	2021-11-22 02:53:39 -08:00
mvelazco	6df7df2622	adding first detection	2021-11-19 16:40:04 -05:00