admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,614 Commits 697 Branches 195 Tags
rba_task
Commit Graph

2511 Commits

Author SHA1 Message Date
github-actions[bot] 2b97233f2a Branch was auto-updated. 2021-07-14 16:46:03 +00:00
github-actions[bot] 065a1d22ab Branch was auto-updated. 2021-07-14 13:42:23 +00:00
github-actions[bot] 6efb09dd12 Branch was auto-updated. 2021-07-14 13:42:13 +00:00
root fac27a643d Added detection testing service results inAttacker Tools On Endpoint 2021-07-14 13:33:44 +00:00
P4T12ICK c5942639cd new ci workflow 2021-07-14 14:58:25 +02:00
P4T12ICK ea26c7c491 new ci workflow 2021-07-14 14:34:34 +02:00
github-actions[bot] be14ace425 Branch was auto-updated. 2021-07-14 11:04:34 +00:00
github-actions[bot] 8c615c1978 Branch was auto-updated. 2021-07-14 11:04:20 +00:00
P4T12ICK a91762555e bug fix detection testing 2021-07-14 11:45:33 +02:00
tccontre 9fc60355a1 Update permission_modification_using_takeown_app.yml 2021-07-14 10:33:50 +02:00
tccontre 463c27d20f Update sc_exe_manipulating_windows_services.yml 2021-07-14 10:25:49 +02:00
tccontre 4be7e99ddb Update shim_database_file_creation.yml 2021-07-14 10:23:53 +02:00
tccontre d7c8dc6fa7 Update schedule_task_with_rundll32_command_trigger.yml 2021-07-14 10:23:21 +02:00
tccontre 9fb0e1bded Update ryuk_wake_on_lan_command.yml 2021-07-14 10:23:00 +02:00
tccontre 1ac3332622 Update remote_process_instantiation_via_wmi.yml 2021-07-14 10:22:31 +02:00
tccontre 9ab3a3b402 Update recon_avproduct_through_pwh_or_wmi.yml 2021-07-14 10:21:56 +02:00
tccontre be0d7ef352 Update single_letter_process_on_endpoint.yml 2021-07-14 10:20:56 +02:00
tccontre 4f7c6ff84d Update process_kill_base_on_file_path.yml 2021-07-14 10:20:11 +02:00
tccontre be71919e60 Update prevent_automatic_repair_mode_using_bcdedit.yml 2021-07-14 10:19:24 +02:00
tccontre fe570f7f2f Update permission_modification_using_takeown_app.yml 2021-07-14 10:18:55 +02:00
tccontre 02c9da2e07 rba task 2021-07-14 10:13:42 +02:00
research bot 9944856c3f updating docs and package bits [ci skip] 2021-07-13 23:26:40 +00:00
github-actions[bot] 8cd12d09e6 Branch was auto-updated. 2021-07-13 20:41:53 +00:00
patel-bhavin a9c23039ca fix 2 2021-07-13 14:58:24 -05:00
patel-bhavin 3939b8b8e1 fix 1 2021-07-13 14:45:07 -05:00
github-actions[bot] 3cc782f495 Branch was auto-updated. 2021-07-13 11:25:29 +00:00
P4T12ICK badc155c4c fix escu stanas 2021-07-13 12:39:18 +02:00
P4T12ICK 4edde0da7a fix escu stanzas errors 2021-07-13 11:58:58 +02:00
P4T12ICK 638ef4c5e1 fix escu stanzas errors 2021-07-13 10:31:53 +02:00
P4T12ICK 621b0cc027 fix escu stanzas errors 2021-07-13 09:59:06 +02:00
patel-bhavin bcbe0bd5a2 spl 2021-07-12 18:55:39 -05:00
patel-bhavin a0a57ab600 atttacker_tools_files 2021-07-12 18:54:24 -05:00
P4T12ICK 6fdad9ba38 improvements 2021-07-12 11:38:09 +02:00
github-actions[bot] 1f2f78f36d Branch was auto-updated. 2021-07-06 11:40:13 +00:00
P4T12ICK cdcf271eae bug fix detection testing 2021-07-06 13:27:11 +02:00
github-actions[bot] 6fbf1aafa5 Branch was auto-updated. 2021-07-06 10:47:54 +00:00
github-actions[bot] aa6519c490 Branch was auto-updated. 2021-07-05 15:05:21 +00:00
github-actions[bot] f20a264af1 Branch was auto-updated. 2021-07-05 15:05:20 +00:00
Detection Testing Service c8eae0d7ca Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 2021-07-05 14:52:28 +00:00
root 2fbeb9c005 Added detection testing service results inMsmpeng Application DLL Side Loading 2021-07-05 14:52:27 +00:00
tccontre 808eba05e4 Update powershell_disable_security_monitoring.yml 2021-07-05 16:46:58 +02:00
tccontre 3e63f7325a Update msmpeng_application_dll_side_loading.yml 2021-07-05 16:46:45 +02:00
tccontre bcda9adb56 Update disable_windows_behavior_monitoring.yml 2021-07-05 16:46:12 +02:00
tccontre e88845c1c5 Update allow_network_discovery_in_firewall.yml 2021-07-05 16:45:45 +02:00
tccontre f3097ae838 Update allow_file_and_printing_sharing_in_firewall.yml 2021-07-05 16:45:31 +02:00
tccontre 8757c002fc Update allow_file_and_printing_sharing_in_firewall.yml 2021-07-05 16:45:13 +02:00
Detection Testing Service 2bbfca5fc9 Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2 2021-07-05 14:34:26 +00:00
root f8e36f1f13 Added detection testing service results inPowershell Disable Security Monitoring 2021-07-05 14:34:26 +00:00
tccontre 86f18d1e33 side loading 2021-07-05 16:27:36 +02:00
tccontre 46e6caac0a update revil reg 2021-07-05 15:56:48 +02:00