mhaag-spl
|
cea91f725e
|
Create hunting_for_log4shell.test.yml
|
2021-12-14 19:00:04 -07:00 |
|
mvelazco
|
cb4d003f4e
|
updating dataset tag
|
2021-12-13 16:24:39 -05:00 |
|
mvelazco
|
1671728147
|
Merge branch 'The_Day_After_Log4shell' of github.com:splunk/security_content into The_Day_After_Log4shell
|
2021-12-13 15:51:45 -05:00 |
|
mvelazco
|
2c62039a03
|
adding detection
|
2021-12-13 15:51:43 -05:00 |
|
mhaag-spl
|
050bc8d886
|
☕
|
2021-12-13 13:32:27 -07:00 |
|
mhaag-spl
|
f4de314e4e
|
wget curl
|
2021-12-13 07:11:07 -07:00 |
|
mhaag-spl
|
5e36ce1cf3
|
curleddd
|
2021-12-10 11:49:41 -07:00 |
|
mhaag-spl
|
53dc410071
|
rcloned 4688 logs
|
2021-12-10 11:39:45 -07:00 |
|
Bhavin Patel
|
5e42f3b78c
|
Branch was auto-updated.
|
2021-12-09 09:06:08 -08:00 |
|
Bhavin Patel
|
8cc5adc54c
|
Branch was auto-updated.
|
2021-12-08 09:36:32 -08:00 |
|
Bhavin Patel
|
456d7483d6
|
Branch was auto-updated.
|
2021-12-08 09:36:24 -08:00 |
|
P4T12ICK
|
2e4bebab22
|
BA detections
|
2021-12-08 15:27:44 +01:00 |
|
P4T12ICK
|
7e1fbbc8ad
|
BA detections
|
2021-12-08 12:50:13 +01:00 |
|
P4T12ICK
|
88bbb3dd64
|
BA detections
|
2021-12-08 10:43:36 +01:00 |
|
P4T12ICK
|
a7637dae83
|
BA detections
|
2021-12-08 09:46:20 +01:00 |
|
mhaag-spl
|
692a565bef
|
Update ssa___wbadmin_delete_system_backups.test.yml
|
2021-12-07 14:01:52 -07:00 |
|
mhaag-spl
|
3c2c99fb9c
|
Update ssa___wbadmin_delete_system_backups.test.yml
|
2021-12-07 13:55:05 -07:00 |
|
mhaag-spl
|
44bf73018a
|
wbadmin
|
2021-12-07 13:31:19 -07:00 |
|
mhaag-spl
|
890e31a9c1
|
Update ssa___bcdedit_failure_recovery_modification.test.yml
|
2021-12-07 12:38:37 -07:00 |
|
mhaag-spl
|
e2abbaffe1
|
fsutil and bcdedit
|
2021-12-07 12:19:41 -07:00 |
|
mhaag-spl
|
6b36d8c6ec
|
DNS Exfil
|
2021-12-07 11:43:34 -07:00 |
|
Bhavin Patel
|
5aade90ec2
|
Branch was auto-updated.
|
2021-12-06 11:04:14 -08:00 |
|
Bhavin Patel
|
e5fd9f9fe7
|
Branch was auto-updated.
|
2021-12-06 11:04:13 -08:00 |
|
mhaag-spl
|
25dc457c3c
|
The Unbroken Haag
|
2021-12-06 11:57:20 -07:00 |
|
mvelazco
|
71410ddb7a
|
3 new detections
|
2021-12-03 15:58:00 -05:00 |
|
mhaag-spl
|
0e53970750
|
First SSA
|
2021-12-03 11:26:27 -07:00 |
|
Bhavin Patel
|
1747744648
|
Branch was auto-updated.
|
2021-12-01 15:41:24 -08:00 |
|
Bhavin Patel
|
57c1ef30dd
|
Merge pull request #1857 from splunk/RegistryDetectionFixes
Registry detection fixes
|
2021-12-01 15:41:01 -08:00 |
|
Bhavin Patel
|
4c9fc158cd
|
Branch was auto-updated.
|
2021-12-01 11:42:55 -08:00 |
|
Bhavin Patel
|
78c5f10942
|
Branch was auto-updated.
|
2021-11-30 12:02:04 -08:00 |
|
mvelazco
|
0254c60a28
|
adding detection
|
2021-11-29 16:50:39 -05:00 |
|
Bhavin Patel
|
024a0be7ff
|
Branch was auto-updated.
|
2021-11-25 05:31:55 -08:00 |
|
Bhavin Patel
|
c778a2e35c
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
Bhavin Patel
|
b25f7b80c3
|
Branch was auto-updated.
|
2021-11-25 05:07:23 -08:00 |
|
tccontre
|
dfd210cf29
|
remcos_evasion
|
2021-11-25 12:27:39 +01:00 |
|
Bhavin Patel
|
49e82e39ff
|
Branch was auto-updated.
|
2021-11-25 01:25:30 -08:00 |
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
tccontre
|
295acf12f0
|
Update ssa___delete_a_net_user.test.yml
|
2021-11-25 09:30:44 +01:00 |
|
P4T12ICK
|
40a80473a2
|
Merge branch 'develop' into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:36:33 +01:00 |
|
Bhavin Patel
|
ef126c979d
|
Branch was auto-updated.
|
2021-11-24 09:13:43 -08:00 |
|
Bhavin Patel
|
c57f06c3a9
|
Branch was auto-updated.
|
2021-11-24 09:13:35 -08:00 |
|
mvelazco
|
42913444c4
|
update dataset location
|
2021-11-24 09:37:47 -05:00 |
|
mvelazco
|
33e9597304
|
updating logic and adding datasets
|
2021-11-23 21:04:04 -05:00 |
|
mvelazco
|
ad273d4ca1
|
update datasets
|
2021-11-23 20:33:27 -05:00 |
|
mvelazco
|
c13de25f73
|
update dataset metadata
|
2021-11-23 18:42:48 -05:00 |
|
mvelazco
|
c2fd0a4b29
|
adding dataset fields
|
2021-11-23 17:15:06 -05:00 |
|
mvelazco
|
4c696f9ad8
|
updating detections
|
2021-11-23 14:01:28 -05:00 |
|
mvelazco
|
9b944b67a2
|
adding 4 new detections
|
2021-11-23 10:13:07 -05:00 |
|
P4T12ICK
|
e48bf8c257
|
SSA anommalous usage of archive tools
|
2021-11-23 10:14:50 +01:00 |
|
mvelazco
|
f2a7006482
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-22 16:21:46 -05:00 |
|