1456 Commits

Author SHA1 Message Date
d1vious b75b56b81d removing test files 2022-06-29 14:18:47 -04:00
mvelazco 757e6b92b8 updating field name to use ScriptBlockText 2022-06-24 11:18:28 -04:00
mvelazco 2637c12014 updating sourcetype to xmlwineventlog 2022-06-24 11:05:02 -04:00
gowthamarajr fd78ddcb6f Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections 2022-06-24 10:17:56 -04:00
gowthamarajr 0f23640526 Updating test file for PowerView SPN detection 2022-06-24 10:17:52 -04:00
pyth0n1c 6f30962fd6 Branch was auto-updated. 2022-06-23 13:55:27 -07:00
mhaag-spl 056b07a686 remove detection 2022-06-23 11:09:07 -06:00
gowthamarajr 28eefb325d adding 2 new detections for kerberoasting 2022-06-22 17:35:37 -04:00
pyth0n1c ff0a57e526 Branch was auto-updated. 2022-06-21 16:45:18 -07:00
pyth0n1c cc03d129c3 Branch was auto-updated. 2022-06-21 16:07:17 -07:00
pyth0n1c 62ed8fe817 Branch was auto-updated. 2022-06-21 16:07:16 -07:00
pyth0n1c b44da42de6 Branch was auto-updated. 2022-06-21 15:28:40 -07:00
pyth0n1c 6616463196 Branch was auto-updated. 2022-06-21 15:28:39 -07:00
pyth0n1c 6cbace8412 Branch was auto-updated. 2022-06-21 15:28:38 -07:00
patel-bhavin d5d0868005 merge from develop 2022-06-21 14:53:25 -07:00
pyth0n1c de30c530eb Branch was auto-updated. 2022-06-21 14:46:29 -07:00
pyth0n1c 25e4a180b1 Branch was auto-updated. 2022-06-21 14:46:28 -07:00
pyth0n1c c42c8acce2 Branch was auto-updated. 2022-06-21 14:46:22 -07:00
pyth0n1c 6b06ab718b Fixing a link to a dataset that has been moved. 2022-06-21 13:13:50 -07:00
Lou Stella e681b766c2 Fixing field name 2022-06-21 14:59:48 -05:00
Lou Stella 85f4f107a3 Changed to anomaly 2022-06-21 14:45:43 -05:00
patel-bhavin 2ea683be87 Merge branch 'develop' into inspired_2194 2022-06-21 11:04:27 -07:00
mhaag-spl 56394444ce fix 2022-06-17 13:09:37 -06:00
mhaag-spl 2788e8e63c path fix 2022-06-17 10:22:24 -06:00
mhaag-spl 9a25da4387 T1218.007 - MSIExec 2022-06-17 09:36:34 -06:00
tccontre bc57962c0c more-defense-evasion 2022-06-07 13:13:02 +02:00
tccontre 7c2dd368cd more-defense-evasion 2022-06-07 12:53:31 +02:00
tccontre 066ac9ffb3 more-defense-evasion 2022-06-07 11:50:27 +02:00
tccontre 136a3a1b92 detection-fix-due-to-splunk-time 2022-06-03 16:30:32 +02:00
pyth0n1c b19550f6c0 Branch was auto-updated. 2022-06-01 13:10:06 -07:00
patel-bhavin f4237cac86 updating datasets after sim 2022-06-01 12:34:48 -07:00
tccontre 223f4b73ba follina_path_traversal_update 2022-06-01 16:14:46 +02:00
pyth0n1c 588c301d84 Branch was auto-updated. 2022-05-31 10:32:07 -07:00
mhaag-spl 87a9aea4dd Complete Follina 2022-05-31 07:16:05 -06:00
tccontre 7153bf7b80 path_traversal 2022-05-30 15:44:52 +02:00
patel-bhavin 529faf008b adding files from PR 2194 2022-05-27 14:35:43 -07:00
patel-bhavin 236edce7e1 updating mitre ids and other metadata 2022-05-26 13:39:49 -07:00
pyth0n1c 048e8e469e Branch was auto-updated. 2022-05-23 13:38:43 -04:00
pyth0n1c cc042a52f8 Branch was auto-updated. 2022-05-23 13:37:58 -04:00
pyth0n1c 4d58c86123 Branch was auto-updated. 2022-05-23 13:37:57 -04:00
pyth0n1c bfecb18d6d Branch was auto-updated. 2022-05-23 12:18:29 -04:00
pyth0n1c a295abb842 Branch was auto-updated. 2022-05-23 12:18:28 -04:00
pyth0n1c 1f9db64cc8 Branch was auto-updated. 2022-05-23 12:18:26 -04:00
tccontre d06a2c70bf rename-ssh-detections 2022-05-17 15:52:19 +02:00
pyth0n1c bfe605ee69 Branch was auto-updated. 2022-05-16 15:08:48 -04:00
pyth0n1c bb18ca7bc5 Branch was auto-updated. 2022-05-16 15:08:48 -04:00
pyth0n1c 2f27d80a13 Branch was auto-updated. 2022-05-16 15:08:44 -04:00
mhaag-spl 86391a5843 HaagCat 2022-05-16 12:59:46 -06:00
tccontre 572b3b42f4 rename-ssh-deletion 2022-05-16 09:25:26 +02:00
tccontre bff355f4f8 rename-ssh-deletion 2022-05-16 09:17:26 +02:00