 patel-bhavin
|
7ccac83552
|
removed unused macro
|
2022-08-03 11:18:58 -07:00 |
|
|
pyth0n1c
|
0ded2877dd
|
Merge pull request #2261 from splunk/security_content_automation
Enrich detections with supported TAs
|
2022-08-03 08:28:02 -07:00 |
|
|
root
|
c71b04a866
|
Updated detection files with recommended TA list.
|
2022-08-01 18:43:39 +00:00 |
|
|
Jose Enrique Hernandez
|
014ea9855d
|
Merge pull request #2311 from splunk/0729_playbooks
Adding hunting playbook
|
2022-07-29 18:43:40 -04:00 |
|
|
Lou Stella
|
d1f890a4e9
|
Adding hunting playbook
|
2022-07-29 17:12:35 -05:00 |
|
|
research bot
|
b622c65def
|
updating docs and package bits [ci skip]
|
2022-07-28 22:52:59 +00:00 |
|
|
Bhavin Patel
|
7bf7bfe134
|
Merge pull request #2278 from splunk/TR-2219_AzureAD_Password_Srapying
Azure Active Directory Account Takeover Analytic Story
v3.46.0
|
2022-07-28 14:32:50 -07:00 |
|
|
patel-bhavin
|
114df09d78
|
meta updates
|
2022-07-28 14:18:45 -07:00 |
|
|
Bhavin Patel
|
1b645a499c
|
Update azure_ad_successful_single_factor_authentication.yml
|
2022-07-28 14:12:18 -07:00 |
|
|
Bhavin Patel
|
95e47b7fd4
|
Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml
|
2022-07-28 14:11:40 -07:00 |
|
|
Bhavin Patel
|
22f3d9bfee
|
Update azure_ad_successful_powershell_authentication.yml
|
2022-07-28 14:09:17 -07:00 |
|
|
Bhavin Patel
|
07290ffeb7
|
Update azure_ad_successful_powershell_authentication.yml
|
2022-07-28 14:08:32 -07:00 |
|
|
Bhavin Patel
|
42241b1b2e
|
Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml
|
2022-07-28 14:07:47 -07:00 |
|
|
Bhavin Patel
|
72d0a37a12
|
Update azure_ad_authentication_failed_during_mfa_challenge.yml
|
2022-07-28 14:05:57 -07:00 |
|
|
Bhavin Patel
|
f22813da22
|
Update azure_active_directory_high_risk_sign_in.yml
|
2022-07-28 14:05:14 -07:00 |
|
|
pyth0n1c
|
faf01969d7
|
Branch was auto-updated.
|
2022-07-28 13:50:30 -07:00 |
|
|
Bhavin Patel
|
21278f8d68
|
Merge pull request #2305 from splunk/dcrat-analytics2
dcrat-analytics2
|
2022-07-28 13:50:05 -07:00 |
|
|
pyth0n1c
|
d963ff033c
|
Branch was auto-updated.
|
2022-07-28 13:47:24 -07:00 |
|
|
pyth0n1c
|
b3c8645b06
|
Branch was auto-updated.
|
2022-07-28 13:47:21 -07:00 |
|
|
Bhavin Patel
|
19dfced28f
|
Merge pull request #2301 from splunk/haagonymous
Haagnux
|
2022-07-28 13:47:00 -07:00 |
|
|
Bhavin Patel
|
f2731454b1
|
Update windows_system_time_discovery_w32tm_delay.yml
|
2022-07-28 13:30:37 -07:00 |
|
|
Bhavin Patel
|
979dd80466
|
Update windows_system_shutdown_commandline.yml
|
2022-07-28 13:28:00 -07:00 |
|
|
Bhavin Patel
|
d71ddb7e26
|
Update windows_system_reboot_commandline.yml
|
2022-07-28 13:26:54 -07:00 |
|
|
Bhavin Patel
|
c0427508a9
|
Update windows_command_shell_dcrat_forkbomb_payload.yml
|
2022-07-28 13:25:36 -07:00 |
|
|
Bhavin Patel
|
8f78e18334
|
Update windows_system_logoff_commandline.yml
|
2022-07-28 13:24:39 -07:00 |
|
|
Bhavin Patel
|
1498d090fe
|
Update windows_system_reboot_commandline.yml
|
2022-07-28 13:23:33 -07:00 |
|
|
Bhavin Patel
|
b2d1bdb62e
|
Update windows_system_shutdown_commandline.yml
|
2022-07-28 13:23:07 -07:00 |
|
|
pyth0n1c
|
319530efa2
|
Branch was auto-updated.
|
2022-07-28 13:11:04 -07:00 |
|
|
pyth0n1c
|
53fb29f36e
|
Branch was auto-updated.
|
2022-07-28 13:11:00 -07:00 |
|
|
pyth0n1c
|
e35f6dc30a
|
Branch was auto-updated.
|
2022-07-28 13:10:57 -07:00 |
|
|
Bhavin Patel
|
099a7d029a
|
Merge pull request #2293 from splunk/TR-2222_AWS_defense_evasion_story
Tr 2222 aws defense evasion story
|
2022-07-28 13:10:40 -07:00 |
|
|
Michael Haag
|
508424da99
|
Updates
|
2022-07-28 12:07:05 -06:00 |
|
|
pyth0n1c
|
6c0c4f75ca
|
Branch was auto-updated.
|
2022-07-28 10:37:48 -07:00 |
|
|
pyth0n1c
|
1e03d0fddf
|
Branch was auto-updated.
|
2022-07-28 10:37:47 -07:00 |
|
|
pyth0n1c
|
d14bb84a81
|
Branch was auto-updated.
|
2022-07-28 10:37:44 -07:00 |
|
|
pyth0n1c
|
1bad5cc933
|
Branch was auto-updated.
|
2022-07-28 10:37:43 -07:00 |
|
|
Bhavin Patel
|
32b7d880eb
|
Merge pull request #2298 from splunk/fix-git-issue-req
fix-git-issue-req
|
2022-07-28 10:37:26 -07:00 |
|
|
Michael Haag
|
15147d6aa7
|
clipboard
|
2022-07-28 11:27:19 -06:00 |
|
|
tccontre
|
972bd7b176
|
Update windows_system_logoff_commandline.yml
|
2022-07-28 16:12:20 +02:00 |
|
|
tccontre
|
c9611980c2
|
Update windows_system_time_discovery_w32tm_delay.yml
|
2022-07-28 15:31:45 +02:00 |
|
|
tccontre
|
12ab56093b
|
Merge branch 'dcrat-analytics2' of github.com:splunk/security_content into dcrat-analytics2
|
2022-07-28 15:29:44 +02:00 |
|
|
tccontre
|
e99ab33a15
|
dcrat-analytics2
|
2022-07-28 15:29:25 +02:00 |
|
|
pyth0n1c
|
2f684c5680
|
Branch was auto-updated.
|
2022-07-28 06:13:23 -07:00 |
|
|
pyth0n1c
|
cc74cea07f
|
Branch was auto-updated.
|
2022-07-28 06:13:22 -07:00 |
|
|
pyth0n1c
|
17f4c812d5
|
Branch was auto-updated.
|
2022-07-28 06:13:20 -07:00 |
|
|
pyth0n1c
|
ebc9de0c2f
|
Branch was auto-updated.
|
2022-07-28 06:13:19 -07:00 |
|
|
pyth0n1c
|
c12e0b636d
|
Branch was auto-updated.
|
2022-07-28 06:13:18 -07:00 |
|
|
Jose Enrique Hernandez
|
84352e2511
|
Delete CNAME
|
2022-07-28 09:12:54 -04:00 |
|
|
tccontre
|
521fedf58a
|
dcrat-analytics2
|
2022-07-28 10:11:52 +02:00 |
|
|
Michael Haag
|
330f8e74e0
|
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
|
2022-07-27 17:39:34 -06:00 |
|