Commit Graph

4833 Commits

Author SHA1 Message Date
pyth0n1c 9f09df0803 another small change 2022-02-17 15:54:43 -08:00
pyth0n1c a997d690af A trivial change in endpoint 2022-02-17 15:13:20 -08:00
pyth0n1c 5d4f144ab5 First commit, touch file 1 2022-02-17 15:10:25 -08:00
pyth0n1c 920f44130e Branch was auto-updated. 2022-02-17 11:00:43 -08:00
Jose Enrique Hernandez 05474921db Update system_information_discovery_detection.yml 2022-02-17 11:59:25 -05:00
Michael Haag dae31d6d6a Quick fix 2022-02-17 09:31:53 -07:00
Lou Stella 95b7a634ac DiskShadow + Story Scaffolding 2022-02-17 10:12:50 -06:00
research bot 5c8268f137 updating docs and package bits [ci skip] 2022-02-15 23:10:10 +00:00
d1vious 96609e50f1 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE 2022-02-15 17:40:57 -05:00
d1vious b767a93e5b fixing base on feedback 2022-02-15 17:40:51 -05:00
pyth0n1c 0ca10d6c14 Branch was auto-updated. 2022-02-15 12:57:30 -08:00
Bhavin Patel 990694e9e6 Update ssa___windows_powershell_downloadfile.yml 2022-02-15 12:38:12 -08:00
Bhavin Patel 6ef8187b2f Update ssa___windows_powershell_connect_to_internet_with_hidden_window.yml 2022-02-15 12:37:57 -08:00
pyth0n1c 59292cf55e Branch was auto-updated. 2022-02-15 12:36:33 -08:00
pyth0n1c bd1c27edb1 Branch was auto-updated. 2022-02-15 12:36:27 -08:00
Lou Stella 7f8e5221c7 Updated second detection with unicode codepoints 2022-02-15 14:17:55 -06:00
mhaag-spl c9b8eb2985 rasautou 2022-02-15 13:08:59 -07:00
Lou Stella 95d060e135 Character sets are difficult 2022-02-15 13:52:01 -06:00
pyth0n1c 818e125692 Branch was auto-updated. 2022-02-15 10:50:12 -08:00
pyth0n1c 1e7216b08c Branch was auto-updated. 2022-02-15 10:40:08 -08:00
pyth0n1c 63a5ac071a Branch was auto-updated. 2022-02-15 10:40:01 -08:00
pyth0n1c b42ec08d85 Fixed spacing on detection_of_dns_tunnels.yml
Added line was too long.
2022-02-15 10:39:23 -08:00
pyth0n1c 81a5583536 Branch was auto-updated. 2022-02-15 10:30:14 -08:00
pyth0n1c 33ab1741f6 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
pyth0n1c 1035b056b7 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
patel-bhavin e99b973973 note updadte 2022-02-15 10:27:42 -08:00
patel-bhavin 085cec0b0d adding note 2022-02-15 10:26:12 -08:00
mhaag-spl e241241bf2 ordinal Data 2022-02-15 11:09:57 -07:00
d1vious e941098259 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE 2022-02-14 21:29:21 -05:00
d1vious 3a3d0a9922 adding powershell downloadfile but not passing 2022-02-14 21:28:57 -05:00
patel-bhavin 1062a0bf93 duplicates 2022-02-14 14:06:37 -08:00
pyth0n1c cc58cc7e8f Branch was auto-updated. 2022-02-14 13:12:45 -08:00
pyth0n1c 7fa988a18a Branch was auto-updated. 2022-02-14 13:12:38 -08:00
pyth0n1c 58d3d914a8 Branch was auto-updated. 2022-02-14 12:59:17 -08:00
d1vious 1cdd6386f3 updating the detection 2022-02-14 13:47:06 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
mhaag-spl ace7ccbb6d Update windows_schtasks_create_run_as_system.yml 2022-02-10 11:36:02 -07:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
pyth0n1c 17e2f3c94b Branch was auto-updated. 2022-02-09 16:53:36 -08:00
Bhavin Patel baab603657 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:45:28 -08:00
Xiao Lin a1e6d3e225 update search string 2022-02-09 16:36:10 -08:00
Xiao Lin 9a04a4e833 fix a typo 2022-02-09 16:36:10 -08:00
Xiao Lin ddd492fe23 update data link to attack_range, move detection to experimental 2022-02-09 16:36:10 -08:00
Bhavin Patel 62ab576733 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:36:10 -08:00
Xiao Lin b31ee54c20 Unusual Volume of Data Download from Internal Server Per Entity 2022-02-09 16:36:10 -08:00
mhaag-spl 455d70e3ed Update windows_remote_assistance_spawning_process.yml 2022-02-09 12:14:25 -07:00
mhaag-spl 2fdc53b85b MSRA shipment 📮 2022-02-09 12:10:58 -07:00
pyth0n1c e01f9b37a4 Branch was auto-updated. 2022-02-09 10:11:43 -08:00
mhaag-spl 0fa295eee0 Ordinal 2022-02-09 08:01:49 -07:00