Commit Graph

1615 Commits

Author SHA1 Message Date
pyth0n1c 5c4d054652 Update linux_kernel_module_enumeration.test.yml
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
pyth0n1c bd2d1515cb Branch was auto-updated. 2022-08-26 10:01:42 -07:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
gowthamarajr ddf0db898d Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301 2022-08-12 07:27:19 -04:00
gowthamarajr bed8043fe8 Add 12 More detections (T1548) 2022-08-12 07:27:16 -04:00
pyth0n1c 084d711188 Branch was auto-updated. 2022-08-11 12:16:22 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 2eb9bf40de Branch was auto-updated. 2022-08-11 11:30:10 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
gowthamarajr 51693e4ba5 Add T1548.003 2022-08-10 06:58:54 -04:00
gowthamarajr 29a61f8cb6 Add detections for Awk, Node, Docker Lotl 2022-08-02 16:23:31 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 44517188c1 Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml 2022-08-01 14:22:35 +02:00
tccontre 7ef8d1dadf Update windows_ingress_tool_transfer_using_explorer_exe.test.yml 2022-08-01 14:18:38 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
Michael Haag 8bc3086675 iscsicpl 2022-07-29 17:39:55 -06:00
pyth0n1c 9b9ee9b2bf Branch was auto-updated. 2022-07-29 15:44:01 -07:00
Michael Haag 8ad83a0b5f Haag It
Linux Curl Upload File
Linux Ingress Tool Transfer Hunting
Linux Ingress Tool Transfer with Curl
Linux Proxy Socks Curl
2022-07-29 11:17:19 -06:00
tccontre bcb5aab4ee dcrat-analytics3 2022-07-29 10:06:40 +02:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
Michael Haag 79f7fdd204 ssh and updated correlation 2022-07-27 16:25:56 -06:00
Michael Haag 55bc63720d auth key 2022-07-27 15:30:48 -06:00
Michael Haag 4c04be8f8a linux base64 decode 2022-07-27 15:08:05 -06:00
Michael Haag e2408b8c1a kmod list 2022-07-27 13:54:30 -06:00
tccontre cf1f54c758 dcrat-analytics2 2022-07-27 15:19:30 +02:00
Michael Haag d6a707bc09 Linux Correlation 2022-07-21 10:31:52 -06:00
pyth0n1c 3ed49f35b9 Branch was auto-updated. 2022-07-19 13:27:46 -07:00
pyth0n1c 2792aaf2cb Branch was auto-updated. 2022-07-19 13:04:40 -07:00
pyth0n1c 6696302866 Branch was auto-updated. 2022-07-19 13:04:39 -07:00
pyth0n1c 09953c56c0 Branch was auto-updated. 2022-07-19 11:56:32 -07:00
pyth0n1c 25eb1b982f Branch was auto-updated. 2022-07-19 11:56:30 -07:00
pyth0n1c 4ba023d496 Branch was auto-updated. 2022-07-19 11:56:25 -07:00
pyth0n1c 192ebb4fb9 Branch was auto-updated. 2022-07-19 11:49:31 -07:00
pyth0n1c 7991a04219 Branch was auto-updated. 2022-07-19 11:49:28 -07:00
pyth0n1c 59a5bfe535 Branch was auto-updated. 2022-07-19 11:49:25 -07:00
pyth0n1c e23dcdda56 Branch was auto-updated. 2022-07-19 11:49:22 -07:00
pyth0n1c 672113901c Branch was auto-updated. 2022-07-19 11:40:02 -07:00
pyth0n1c e797b32382 Branch was auto-updated. 2022-07-19 11:40:00 -07:00
pyth0n1c bba4479eb6 Branch was auto-updated. 2022-07-19 11:39:57 -07:00
pyth0n1c 8554f76dcf Branch was auto-updated. 2022-07-19 11:39:56 -07:00
pyth0n1c 94e0594441 Branch was auto-updated. 2022-07-19 11:39:54 -07:00
Lou Stella ca8a1a78e2 Updated test filename 2022-07-19 13:36:18 -05:00
pyth0n1c 352f4f68f1 Branch was auto-updated. 2022-07-19 11:11:48 -07:00
pyth0n1c 3f1b69f10a Branch was auto-updated. 2022-07-19 11:11:47 -07:00
pyth0n1c acd8fc951b Branch was auto-updated. 2022-07-19 11:11:44 -07:00
pyth0n1c 80f76e0518 Branch was auto-updated. 2022-07-19 11:11:42 -07:00