P4T12ICK
|
03cb2bcf30
|
Merge branch 'security_content_4' of github.com:splunk/security_content into security_content_4
|
2022-10-20 16:28:18 +02:00 |
|
Rod Soto
|
537c13d063
|
addedwords
|
2022-08-30 11:56:41 -07:00 |
|
pyth0n1c
|
bd2d1515cb
|
Branch was auto-updated.
|
2022-08-26 10:01:42 -07:00 |
|
Michael Haag
|
f9e770eaa5
|
Update log4shell_cve_2021_44228_exploitation.yml
|
2022-08-26 11:01:25 -06:00 |
|
Michael Haag
|
b2941ca736
|
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
|
2022-08-26 10:58:35 -06:00 |
|
Michael Haag
|
c912c7c939
|
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
|
2022-08-26 10:58:17 -06:00 |
|
pyth0n1c
|
2bfc066411
|
Branch was auto-updated.
|
2022-08-26 09:35:15 -07:00 |
|
pyth0n1c
|
5d8cbb81ca
|
Branch was auto-updated.
|
2022-08-26 09:35:15 -07:00 |
|
patel-bhavin
|
e0f0d48784
|
minonr text updates
|
2022-08-26 10:46:51 -05:00 |
|
Michael Haag
|
c560685650
|
Update windows_possible_credential_dumping.yml
|
2022-08-26 09:18:56 -06:00 |
|
tccontre
|
346e7000e2
|
fix-desc
|
2022-08-26 15:39:48 +02:00 |
|
Michael Haag
|
5ddf3c9cf7
|
Merge branch 'hijack' of https://github.com/splunk/security_content into hijack
|
2022-08-26 06:01:16 -06:00 |
|
Michael Haag
|
c7aba6738e
|
Update windows_remote_access_software_hunt.yml
|
2022-08-26 06:01:15 -06:00 |
|
pyth0n1c
|
63c3744821
|
Branch was auto-updated.
|
2022-08-25 16:25:59 -07:00 |
|
pyth0n1c
|
a1d1297de9
|
Branch was auto-updated.
|
2022-08-25 16:25:56 -07:00 |
|
pyth0n1c
|
474ea41291
|
Finishing updates authors, versions,
and dates on searches.
|
2022-08-25 15:09:13 -07:00 |
|
pyth0n1c
|
8b47ea7b36
|
Updating the author(s), versions, and
dates for searches in PR.
|
2022-08-25 15:08:46 -07:00 |
|
Michael Haag
|
11eb0feac6
|
T1003.001 Update
|
2022-08-25 08:04:20 -06:00 |
|
pyth0n1c
|
0ae64ea317
|
Branch was auto-updated.
|
2022-08-23 13:05:57 -07:00 |
|
pyth0n1c
|
a2f1972d54
|
Branch was auto-updated.
|
2022-08-23 13:05:56 -07:00 |
|
pyth0n1c
|
4788d6c4e3
|
Branch was auto-updated.
|
2022-08-23 13:05:54 -07:00 |
|
Michael Haag
|
8248278109
|
Remote Access Software
|
2022-08-22 21:57:53 -06:00 |
|
Michael Haag
|
13d400611a
|
LSA 🐍 SS
|
2022-08-22 21:16:12 -06:00 |
|
pyth0n1c
|
cfa60f73c5
|
Branch was auto-updated.
|
2022-08-22 14:51:16 -07:00 |
|
Michael Haag
|
af639ac066
|
Update windows_dll_search_order_hijacking_hunt_with_sysmon.yml
|
2022-08-22 14:46:29 -06:00 |
|
Michael Haag
|
ed2bc99c46
|
sysmon fix
|
2022-08-22 10:14:10 -06:00 |
|
Michael Haag
|
fd88c88762
|
Hijack Libraries
|
2022-08-19 14:37:29 -06:00 |
|
gowthamarajr
|
75b2daa449
|
Update msg and ref
|
2022-08-18 14:09:25 -04:00 |
|
gowthamarajr
|
d8f41b1c5d
|
update risk sccore
|
2022-08-18 11:41:29 -04:00 |
|
pyth0n1c
|
544a496b62
|
Branch was auto-updated.
|
2022-08-16 12:39:45 -07:00 |
|
pyth0n1c
|
131da29741
|
Branch was auto-updated.
|
2022-08-16 12:39:44 -07:00 |
|
d1vious
|
b6e2ff6278
|
adding updated url
|
2022-08-16 15:01:17 -04:00 |
|
mvelazco
|
393e7775f1
|
fixing typo
|
2022-08-16 12:19:07 -04:00 |
|
mvelazco
|
b2332df9a0
|
Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover
|
2022-08-16 12:13:02 -04:00 |
|
mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|
pyth0n1c
|
8a72b522ac
|
Branch was auto-updated.
|
2022-08-16 08:40:57 -07:00 |
|
pyth0n1c
|
7d441871cb
|
Branch was auto-updated.
|
2022-08-16 08:40:56 -07:00 |
|
d1vious
|
b7e1a5fe94
|
adding new detections
|
2022-08-16 11:30:24 -04:00 |
|
gowthamarajr
|
6759feccd4
|
Add Azure AD Multi-Factor Authentication Disabled
|
2022-08-15 17:22:54 -04:00 |
|
pyth0n1c
|
31be7c1b3e
|
Branch was auto-updated.
|
2022-08-12 13:01:04 -07:00 |
|
patel-bhavin
|
1e4b0353f8
|
search update
|
2022-08-12 12:46:25 -07:00 |
|
patel-bhavin
|
6969671bf9
|
Merge branch 'TR_2329_AWS_Credential_Access' of github.com:splunk/security_content into TR_2329_AWS_Credential_Access
|
2022-08-12 12:41:19 -07:00 |
|
patel-bhavin
|
24cd1afcb8
|
updatesusing datamodel
|
2022-08-12 12:34:02 -07:00 |
|
gowthamarajr
|
9b4b2a2d23
|
Update SPL octave
|
2022-08-12 08:31:07 -04:00 |
|
gowthamarajr
|
ddf0db898d
|
Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301
|
2022-08-12 07:27:19 -04:00 |
|
gowthamarajr
|
bed8043fe8
|
Add 12 More detections (T1548)
|
2022-08-12 07:27:16 -04:00 |
|
pyth0n1c
|
084d711188
|
Branch was auto-updated.
|
2022-08-11 12:16:22 -07:00 |
|
pyth0n1c
|
9379ece487
|
Branch was auto-updated.
|
2022-08-11 12:16:14 -07:00 |
|
Bhavin Patel
|
1952b9773b
|
Update aws_credential_access_getpassworddata.yml
|
2022-08-11 12:10:47 -07:00 |
|
pyth0n1c
|
742d674a89
|
Branch was auto-updated.
|
2022-08-11 11:30:14 -07:00 |
|