Commit Graph

7540 Commits

Author SHA1 Message Date
divious1 3091a35db3 adding annotations from John P 2021-06-10 14:41:25 -04:00
Bhavin Patel 5216a108ef Merge pull request #1434 from splunk/excessive_taskhost_process_detection
Excessive taskhost process detection
v3.23.0
2021-06-10 10:31:41 -07:00
root 56a065240b Added detection testing service results inExcessive number of taskhost processes 2021-06-09 20:58:34 +00:00
Michael Hart 990b3cd13a Fixing analytic story yaml 2021-06-09 16:10:03 -04:00
Michael Hart af4eff8cb5 Fixing file reference name 2021-06-09 14:57:17 -04:00
Michael Hart 7236281a42 Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection 2021-06-09 14:24:41 -04:00
Michael Hart 144bcaff80 Adding in test file 2021-06-09 14:20:03 -04:00
Bhavin Patel e0f0fdf5b2 Merge pull request #1432 from splunk/revil
revil
2021-06-09 10:37:12 -07:00
github-actions[bot] c0d54f2694 Branch was auto-updated. 2021-06-09 17:32:44 +00:00
Jose Enrique Hernandez a24bb77386 Set theme jekyll-theme-slate 2021-06-09 13:32:25 -04:00
Bhavin Patel 44b134251f Update known_services_killed_by_ransomware.yml 2021-06-09 10:32:15 -07:00
Bhavin Patel 8eb50cb27c Update conti_common_exec_parameter.yml 2021-06-09 10:28:51 -07:00
github-actions[bot] e547ad7395 Branch was auto-updated. 2021-06-08 19:00:26 +00:00
Bhavin Patel 71410e0434 Merge pull request #1420 from splunk/den-haag
Double The Bacon and Haags
2021-06-08 12:00:00 -07:00
github-actions[bot] 935a605a59 Branch was auto-updated. 2021-06-08 18:37:05 +00:00
github-actions[bot] 18374156e4 Branch was auto-updated. 2021-06-08 18:37:04 +00:00
Michael Haag 6f02d19e97 Merge pull request #1433 from splunk/TR-700
make deployments consistent
2021-06-08 12:36:44 -06:00
Michael Hart 69c1de8e5e Initial import of the detection and story for support 2021-06-08 10:01:32 -04:00
patel-bhavin 824bddc979 make deployments consistent 2021-06-07 10:35:08 -07:00
root 54657e9d13 Added detection testing service results inConti Common Exec parameter 2021-06-07 10:18:21 +00:00
root d92b713497 Added detection testing service results inKnown Services Killed by Ransomware 2021-06-07 09:56:10 +00:00
root 3023439042 Added detection testing service results inWbemprox COM Object Execution 2021-06-07 09:34:11 +00:00
root ddc74bece1 Added detection testing service results inModification Of Wallpaper 2021-06-07 09:14:09 +00:00
root 254f233475 Added detection testing service results inRevil Common Exec Parameter 2021-06-07 08:41:48 +00:00
root eef40d3a65 Added detection testing service results inRevil Registry Entry 2021-06-07 08:24:20 +00:00
root 89a202914c Added detection testing service results inDelete ShadowCopy With PowerShell 2021-06-07 08:01:37 +00:00
tccontre 20cf0f4110 Update conti_common_exec_parameter.yml
conti param
2021-06-04 16:46:18 +02:00
tccontre 2af2c59337 revil2 2021-06-04 16:41:23 +02:00
tccontre 1f8cf6ad4c Update revil_common_exec_parameter.test.yml 2021-06-04 16:14:09 +02:00
tccontre 1dc92ffce5 revil1 2021-06-04 16:10:57 +02:00
tccontre 09796e3f67 revil 2021-06-04 16:07:02 +02:00
mhaag-spl 4bfa6d0831 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-03 14:22:12 -06:00
mhaag-spl facc823255 Updated Analytic Stories 2021-06-03 14:20:59 -06:00
github-actions[bot] cad634863d Branch was auto-updated. 2021-06-03 19:44:27 +00:00
Jose Enrique Hernandez f90734548e Merge pull request #1431 from splunk/appinspect_cloud
adding cloud tags
2021-06-03 15:44:04 -04:00
github-actions[bot] 42a2665a7e Branch was auto-updated. 2021-06-03 19:40:07 +00:00
github-actions[bot] ec811aa02b Branch was auto-updated. 2021-06-03 19:40:01 +00:00
Bhavin Patel f730f8a779 Merge pull request #1418 from splunk/bug_fix_detection_testing
bug fix in detection testing
2021-06-03 12:39:46 -07:00
github-actions[bot] 2525072da8 Branch was auto-updated. 2021-06-03 19:19:26 +00:00
github-actions[bot] 7f95443b7d Branch was auto-updated. 2021-06-03 19:19:16 +00:00
github-actions[bot] bb51b4e655 Branch was auto-updated. 2021-06-03 19:19:14 +00:00
Bhavin Patel 63c53cbe78 Merge pull request #1410 from splunk/hpot-lon
Hpot lon
2021-06-03 12:18:55 -07:00
github-actions[bot] 0989814cc9 Branch was auto-updated. 2021-06-03 19:04:25 +00:00
github-actions[bot] 0971f151c3 Branch was auto-updated. 2021-06-03 19:04:24 +00:00
github-actions[bot] a9871221b6 Branch was auto-updated. 2021-06-03 19:04:18 +00:00
github-actions[bot] d1cf765159 Branch was auto-updated. 2021-06-03 19:04:17 +00:00
Bhavin Patel 63aca65145 Merge pull request #1430 from VatsalJagani/jsworm-ransomware
JSWorm ransomware notes and extensions added.
2021-06-03 12:04:00 -07:00
Bhavin Patel 44459e608f Merge branch 'develop' into jsworm-ransomware 2021-06-03 11:38:24 -07:00
Bhavin Patel 3cc121b736 Merge branch 'develop' into hpot-lon 2021-06-03 11:36:41 -07:00
root 31738b1855 Added detection testing service results inDetect AzureHound Command-Line Arguments 2021-06-03 17:01:51 +00:00