Commit Graph

35 Commits

Author SHA1 Message Date
Namratha Sreekanta 820f3c935e fixing error with model dir and result column 2023-01-24 14:42:32 -08:00
Namratha Sreekanta 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl 2023-01-17 15:26:01 -08:00
Namratha Sreekanta 2932ebb1fa Adding more feedback 2022-09-23 16:28:58 -07:00
Namratha Sreekanta 34b6e08638 Changing README.md instructions 2022-09-22 16:32:17 -07:00
Namratha Sreekanta 83eb61820e Changing README.md instructions 2022-09-22 16:30:31 -07:00
Namratha Sreekanta 055f0a175a adding review comments 2022-09-21 13:20:47 -07:00
Namratha Sreekanta f5fb35ec4c changing README and few fields regarding the search 2022-09-20 16:00:12 -07:00
Namratha Sreekanta 43c213a74c modifying the search and adding a README file 2022-09-20 11:20:13 -07:00
Namratha Sreekanta 24cbcc1af2 changing notebook code and adding json file for the model, moved all contents under dga_dltk folder 2022-09-16 17:32:18 -07:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
d1vious 41db7931fd removing notebooks 2022-06-13 16:05:21 -04:00
Michael Hart 8773f14523 More edits 2021-06-29 14:48:27 -04:00
Michael Hart 04c4263b56 Adding edits 2021-06-29 09:47:37 -04:00
Michael Hart 4dbc42c86c Initial commit 2021-06-28 22:10:15 -04:00
Xiao Lin 04f8db150a Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 22:40:23 +00:00
Xiao Lin da26faa9d9 change input field names 2020-10-28 22:57:25 +00:00
miskoSplunk 4ca69a1e0f Rename CredentialExtraction_SSA.ipynb to ssa___CredentialExtraction.ipynb 2020-10-27 11:31:43 -07:00
Xiao Lin 4b933ff9ef add test notebooks 2020-10-22 20:54:31 +00:00
Jose Enrique Hernandez f84dd4ad4a Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-10-22 14:13:07 -04:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
Stanislav Miskovic 8aa5392c50 Adding SSA detections for credential extraction from dumped secure stores or live Windows systems. 2020-10-19 01:42:14 -07:00
Ignacio 14b88aa2af Merge branch 'develop' into lolbas-fixes 2020-10-16 15:46:58 -07:00
Xiao Lin 7a9be3fa01 add 2020-10-16 15:34:26 -07:00
Ignacio d857af2a0a Merge branch 'develop' into lolbas-fixes 2020-10-16 10:01:17 -07:00
Ignacio Bermudez Corrales 7981684b5f Merge branch 'lolbas-fixes' of github.com:splunk/security-content into lolbas-fixes 2020-10-15 14:54:18 -07:00
Ignacio Bermudez Corrales e04592401b unusual lolbas short time period 2020-10-15 14:53:59 -07:00
Jose Enrique Hernandez 8520f3a281 Merge branch 'develop' into lolbas-fixes 2020-10-15 17:14:34 -04:00
Ignacio Bermudez Corrales 5da1fde8cf Added notebook 2020-10-15 13:15:17 -07:00
Jose Enrique Hernandez 78784320fd Merge branch 'develop' into unit_test_prohibited_apps_spawning_cmdprompt 2020-10-15 16:04:26 -04:00
Xiao Lin 9db448a52e update unit test 2020-10-15 19:47:12 +00:00
divious1 015514ee1e notebook for prohibited apps spawning 2020-10-15 15:43:22 -04:00
divious1 dac98c19b9 skeleton 2020-09-24 18:05:10 -04:00