Commit Graph

2086 Commits

Author SHA1 Message Date
P4T12ICK 5aa72008ef Update cloud_provisioning_from_previously_unseen_city.yml 2021-06-10 08:53:39 +02:00
P4T12ICK 9ad5bea909 Update access_lsass_memory_for_dump_creation_two.yml 2021-06-09 16:47:59 +02:00
P4T12ICK 83a7679ca9 test 2021-06-09 12:54:02 +02:00
mhaag-spl 4bfa6d0831 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 14:22:12 -06:00
mhaag-spl facc823255 Updated Analytic Stories 2021-06-03 14:20:59 -06:00
github-actions[bot] 2525072da8 Branch was auto-updated. 2021-06-03 19:19:26 +00:00
Bhavin Patel 3cc121b736 Merge branch 'develop' into hpot-lon 2021-06-03 11:36:41 -07:00
root 31738b1855 Added detection testing service results inDetect AzureHound Command-Line Arguments 2021-06-03 17:01:51 +00:00
mhaag-spl 2af2dbdd0e AzureHound 2021-06-03 10:40:41 -06:00
Detection Testing Service e2c44fd793 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 16:07:17 +00:00
root 17a7c53100 Added detection testing service results inDetect Renamed WinRAR 2021-06-03 16:07:16 +00:00
Detection Testing Service 93075047d0 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 16:06:25 +00:00
root 12caaec7ed Added detection testing service results inDetect Renamed 7-Zip 2021-06-03 16:06:24 +00:00
root 70bb5ebcde Added detection testing service results inDetect Renamed PSExec 2021-06-03 16:03:05 +00:00
mhaag-spl e12182ea9d Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 09:41:46 -06:00
mhaag-spl f269268b5a 7zip and rar 2021-06-03 09:41:39 -06:00
Detection Testing Service ce4a444198 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 15:25:33 +00:00
root 88a3daef8b Added detection testing service results inDetect SharpHound Command-Line Arguments 2021-06-03 15:25:32 +00:00
Detection Testing Service 98e2bbeb46 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 15:25:21 +00:00
root 07a5c51b3b Added detection testing service results inDetect SharpHound Usage 2021-06-03 15:25:21 +00:00
Detection Testing Service 94a884ca90 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 15:24:00 +00:00
root 5b00a4c89d Added detection testing service results inDetect SharpHound File Modifications 2021-06-03 15:24:00 +00:00
Detection Testing Service e91a955727 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 15:22:51 +00:00
root 316d57e156 Added detection testing service results inDetect AzureHound File Modifications 2021-06-03 15:22:51 +00:00
mhaag-spl 487c1c861e psexec renamed 2021-06-03 09:17:31 -06:00
mhaag-spl cc40bf658c SharpHound 2021-06-03 08:48:19 -06:00
github-actions[bot] 273ca11251 Branch was auto-updated. 2021-06-02 07:13:16 +00:00
github-actions[bot] 37afdb6e11 Branch was auto-updated. 2021-06-01 17:26:54 +00:00
github-actions[bot] 827d4a17c1 Branch was auto-updated. 2021-06-01 17:26:53 +00:00
Jose Enrique Hernandez 1ee26a7172 bumping version of detection since it should have been done in previous change. 2021-06-01 13:22:43 -04:00
root cac94b27e7 Added detection testing service results inExcessive Usage of NSLOOKUP App 2021-05-28 07:50:13 +00:00
tccontre 9df9309087 nslookup 2021-05-28 09:17:34 +02:00
root b7e82d565d Added detection testing service results inCMD Echo Pipe - Escalation 2021-05-27 14:55:40 +00:00
mhaag-spl 95c1b4408c Cobalt Jump 2021-05-27 08:22:53 -06:00
root 259842d958 Added detection testing service results inMailsniper Invoke functions 2021-05-26 16:41:52 +00:00
root 27007cc19d Added detection testing service results inAllow Inbound Traffic In Firewall Rule 2021-05-26 16:17:03 +00:00
root 819c8f4db8 Added detection testing service results inSecretDumps Offline NTDS Dumping Tool 2021-05-26 15:51:03 +00:00
root affae55ecf Added detection testing service results inEnable RDP In Other Port Number 2021-05-26 15:07:28 +00:00
root e824025040 Added detection testing service results inAllow Inbound Traffic By Firewall Rule Registry 2021-05-26 14:15:44 +00:00
tccontre 80210ef7d8 casper1 2021-05-26 13:33:47 +02:00
tccontre f925bdc572 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-05-25 15:12:14 +02:00
research bot 2d61b8e675 updating docs and package bits [ci skip] 2021-05-24 17:47:29 +00:00
github-actions[bot] 04227fd8ee Branch was auto-updated. 2021-05-21 17:57:32 +00:00
Bhavin Patel 45d45a345e Merge branch 'develop' into den-haag 2021-05-21 10:53:33 -07:00
root 40a7a4494d Added detection testing service results inServices Escalate Exe 2021-05-21 17:50:02 +00:00
mhaag-spl b411f2b1fc CVE-2021-31166 2021-05-21 11:25:37 -06:00
tccontre ce81bcc4c8 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-05-21 12:55:59 +02:00
github-actions[bot] 5ad14e5dbd Branch was auto-updated. 2021-05-21 00:33:35 +00:00
github-actions[bot] 1a3df7445e Branch was auto-updated. 2021-05-20 23:01:11 +00:00
github-actions[bot] 9155a244a3 Branch was auto-updated. 2021-05-20 23:01:08 +00:00