 bpatel
|
5be5ec5b53
|
app inspect failures fixes
|
2020-12-08 16:28:49 -08:00 |
|
|
root
|
5dad0fa5cf
|
Added detection testing service results inSchtasks scheduling job on remote system
|
2020-12-07 14:54:00 +00:00 |
|
|
P4T12ICK
|
9a0bd3beef
|
test file
|
2020-12-07 15:37:28 +01:00 |
|
|
P4T12ICK
|
7219bd3b2f
|
Merge branch 'update_new_attack_data_project' of github.com:splunk/security-content into update_new_attack_data_project
|
2020-12-07 14:01:14 +01:00 |
|
|
P4T12ICK
|
b7e5d46cc7
|
new test file
|
2020-12-07 14:00:57 +01:00 |
|
|
root
|
f85cb702f1
|
Added detection testing service results inScheduled Task Name Used by Dragonfly Threat Actors
|
2020-12-07 12:59:27 +00:00 |
|
|
Detection Testing Service
|
63cf7f66a5
|
Merge branch 'update_new_attack_data_project' of https://github.com/splunk/security-content into update_new_attack_data_project
|
2020-12-07 12:38:38 +00:00 |
|
|
root
|
44bec27181
|
Added detection testing service results inSc exe Manipulating Windows Services
|
2020-12-07 12:38:36 +00:00 |
|
|
Detection Testing Service
|
bab819a39b
|
Merge branch 'update_new_attack_data_project' of https://github.com/splunk/security-content into update_new_attack_data_project
|
2020-12-07 12:34:33 +00:00 |
|
|
root
|
28bd33c4f9
|
Added detection testing service results inSamsam Test File Write
|
2020-12-07 12:34:31 +00:00 |
|
|
P4T12ICK
|
fc054158da
|
new test file
|
2020-12-07 13:22:34 +01:00 |
|
|
P4T12ICK
|
4477014930
|
new test file
|
2020-12-07 13:09:29 +01:00 |
|
|
P4T12ICK
|
b36ca748cd
|
updated url links for dataset
|
2020-12-03 15:03:50 +01:00 |
|
|
root
|
0805b7e9d3
|
Added detection testing service results inDetect AWS Console Login by User from New City
|
2020-12-01 20:54:35 +00:00 |
|
|
Detection Testing Service
|
6324f3898d
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:38:46 +00:00 |
|
|
root
|
69a1c028bf
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Country
|
2020-12-01 20:38:45 +00:00 |
|
|
root
|
8c1ae77ab3
|
Added detection testing service results inDetect AWS Console Login by New User
|
2020-12-01 20:35:03 +00:00 |
|
|
Detection Testing Service
|
cc1b0aa291
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 20:17:57 +00:00 |
|
|
root
|
b56cce1dc0
|
Added detection testing service results inCloud Instance Modified By Previously Unseen User
|
2020-12-01 20:17:56 +00:00 |
|
|
root
|
2a1946a5a3
|
Added detection testing service results inAbnormally High Number Of Cloud Security Group API Calls
|
2020-12-01 20:07:25 +00:00 |
|
|
root
|
241a01119c
|
Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls
|
2020-12-01 19:45:03 +00:00 |
|
|
root
|
b47fddab62
|
Added detection testing service results inDetect AWS Console Login by User from New Region
|
2020-12-01 00:51:03 +00:00 |
|
|
Detection Testing Service
|
800df744a3
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:50 +00:00 |
|
|
root
|
d5df1b0c1e
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address
|
2020-12-01 00:11:49 +00:00 |
|
|
Detection Testing Service
|
624ef5b790
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:37 +00:00 |
|
|
root
|
56a1852463
|
Added detection testing service results inDetect AWS Console Login by User from New Country
|
2020-12-01 00:11:36 +00:00 |
|
|
Detection Testing Service
|
22ae8ac9c0
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:11:28 +00:00 |
|
|
root
|
96ddfdc0f6
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region
|
2020-12-01 00:11:26 +00:00 |
|
|
Detection Testing Service
|
6421ec1b47
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-12-01 00:02:23 +00:00 |
|
|
root
|
740a7e2f89
|
Added detection testing service results inCloud Provisioning Activity From Previously Unseen City
|
2020-12-01 00:02:22 +00:00 |
|
|
root
|
36fd1141e4
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type
|
2020-12-01 00:02:09 +00:00 |
|
|
Detection Testing Service
|
216281f568
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:39:11 +00:00 |
|
|
root
|
e174abe001
|
Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image
|
2020-11-30 23:39:10 +00:00 |
|
|
Detection Testing Service
|
17ab3cf97b
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:29:25 +00:00 |
|
|
root
|
8c50ef2beb
|
Added detection testing service results inCloud Compute Instance Created By Previously Unseen User
|
2020-11-30 23:29:24 +00:00 |
|
|
Detection Testing Service
|
f57e539ad0
|
Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files
|
2020-11-30 23:29:05 +00:00 |
|
|
root
|
a0dc08a2f7
|
Added detection testing service results inCloud API Calls From Previously Unseen User Roles
|
2020-11-30 23:29:04 +00:00 |
|
|
Bhavin Patel
|
f39ea4b631
|
Merge branch 'develop' into mustang_beta_test_files
|
2020-11-30 15:16:18 -08:00 |
|
|
root
|
0d2d8c573d
|
Added detection testing service results inAWS Cross Account Activity From Previously Unseen Account
|
2020-11-30 23:05:14 +00:00 |
|
|
root
|
9655f9245a
|
Added detection testing service results inCloud Compute Instance Created In Previously Unused Region
|
2020-11-30 22:19:34 +00:00 |
|
|
bpatel
|
0e410b3dc2
|
updated sourcetype
|
2020-11-30 12:30:47 -08:00 |
|
|
P4T12ICK
|
22118b2ce0
|
new test file
|
2020-11-30 17:20:43 +01:00 |
|
|
P4T12ICK
|
b449989ac9
|
small changes
|
2020-11-30 17:09:24 +01:00 |
|
|
P4T12ICK
|
0a22d9b2c7
|
ryuk test files
|
2020-11-30 17:07:17 +01:00 |
|
|
root
|
7c5a45e2a5
|
Added detection testing service results inRunDLL Loading DLL By Ordinal
|
2020-11-30 16:02:55 +00:00 |
|
|
P4T12ICK
|
40478f6377
|
Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one
|
2020-11-30 16:39:43 +01:00 |
|
|
P4T12ICK
|
c84455b8ce
|
detection test
|
2020-11-30 16:39:27 +01:00 |
|
|
root
|
f0ae106811
|
Added detection testing service results inRemote Process Instantiation via WMI
|
2020-11-30 14:20:03 +00:00 |
|
|
P4T12ICK
|
e6fe82dbe3
|
new test file
|
2020-11-30 14:53:59 +01:00 |
|
|
root
|
ef9956b601
|
Added detection testing service results inRegistry Keys Used For Privilege Escalation
|
2020-11-27 09:42:21 +00:00 |
|