 tccontre
|
856e170c6c
|
Delete ssa___wevtutil_usage_to_clear_logs.yml
|
2021-06-16 12:55:39 +02:00 |
|
|
tccontre
|
ed2527d488
|
Delete recon_using__wmi_class.yml
|
2021-06-16 12:55:31 +02:00 |
|
|
tccontre
|
fb287ba8a4
|
Delete recon_avproduct_through_pwh_or_wmi.yml
|
2021-06-16 12:55:23 +02:00 |
|
|
tccontre
|
95f24e5923
|
Delete prevent_automatic_repair_mode_using_bcdedit.yml
|
2021-06-16 12:55:14 +02:00 |
|
|
tccontre
|
0f5b2263f8
|
Delete powershell_using_memory_as_backing_store.yml
|
2021-06-16 12:55:02 +02:00 |
|
|
tccontre
|
9cc797894a
|
Delete powershell_processing_stream_of_data.yml
|
2021-06-16 12:54:40 +02:00 |
|
|
tccontre
|
c02c2583c0
|
Delete powershell_creating_thread_mutex.yml
|
2021-06-16 12:54:32 +02:00 |
|
|
tccontre
|
17745a60c6
|
Delete permission_modification_using_takeown_app.yml
|
2021-06-16 12:54:24 +02:00 |
|
|
tccontre
|
41f0d69190
|
Delete disable_logs_using_wevtutil.yml
|
2021-06-16 12:54:15 +02:00 |
|
|
tccontre
|
262786373b
|
Delete clear_unallocated_sector_using_cipher_app.yml
|
2021-06-16 12:54:00 +02:00 |
|
|
tccontre
|
c430efed7e
|
Delete allow_operation_with_consent_admin.yml
|
2021-06-16 12:53:51 +02:00 |
|
|
tccontre
|
8effd5a258
|
endpoint_to_ssa
|
2021-06-16 12:52:15 +02:00 |
|
|
Detection Testing Service
|
3381ce7205
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:50:48 +00:00 |
|
|
root
|
76023baae1
|
Added detection testing service results inWMI Recon Running Process Or Services
|
2021-06-15 15:50:47 +00:00 |
|
|
Detection Testing Service
|
b073d80bcf
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:43:44 +00:00 |
|
|
root
|
aa4fc9ddfa
|
Added detection testing service results inRecon Using WMI Class
|
2021-06-15 15:43:44 +00:00 |
|
|
Detection Testing Service
|
1f65e24932
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:40:49 +00:00 |
|
|
root
|
0ca1e7f708
|
Added detection testing service results inRecon AVProduct Through Pwh or WMI
|
2021-06-15 15:40:48 +00:00 |
|
|
Detection Testing Service
|
58fd2b6756
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:25:51 +00:00 |
|
|
root
|
9c821aa984
|
Added detection testing service results inPowershell Using memory As Backing Store
|
2021-06-15 15:25:51 +00:00 |
|
|
root
|
c8ad2a7428
|
Added detection testing service results inPowershell Processing Stream Of Data
|
2021-06-15 15:20:44 +00:00 |
|
|
root
|
f581f7a93e
|
Added detection testing service results inPowershell Creating Thread Mutex
|
2021-06-15 15:04:14 +00:00 |
|
|
tccontre
|
261182ca93
|
Merge branch 'hpot_ttp' of github.com:splunk/security_content into hpot_ttp
|
2021-06-15 16:43:50 +02:00 |
|
|
tccontre
|
bed3227224
|
wild_check
|
2021-06-15 16:43:23 +02:00 |
|
|
github-actions[bot]
|
4292b82e6c
|
Branch was auto-updated.
|
2021-06-15 14:23:36 +00:00 |
|
|
P4T12ICK
|
ec1a205bb5
|
Merge pull request #1442 from splunk/data_exfil
data_exfil
|
2021-06-15 16:23:17 +02:00 |
|
|
P4T12ICK
|
62ce70ce18
|
Merge branch 'develop' into data_exfil
|
2021-06-15 16:18:22 +02:00 |
|
|
tccontre
|
197e73cd61
|
de
|
2021-06-15 15:51:08 +02:00 |
|
|
github-actions[bot]
|
90f9bfabcc
|
Branch was auto-updated.
|
2021-06-15 13:44:07 +00:00 |
|
|
mhart-splunk
|
6270837a4c
|
Excessive win temp detection (#1438)
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
|
2021-06-15 09:43:48 -04:00 |
|
|
tccontre
|
9e009e50b7
|
data_exfil
|
2021-06-15 15:36:41 +02:00 |
|
|
github-actions[bot]
|
a856e9127a
|
Branch was auto-updated.
|
2021-06-14 15:38:16 +00:00 |
|
|
Jose Enrique Hernandez
|
c0b6f6bffe
|
Merge pull request #1407 from splunk/dependabot/pip/mysql-connector-python-8.0.25
Bump mysql-connector-python from 8.0.24 to 8.0.25
|
2021-06-14 11:37:50 -04:00 |
|
|
github-actions[bot]
|
b14a8ec28e
|
Branch was auto-updated.
|
2021-06-14 15:33:32 +00:00 |
|
|
github-actions[bot]
|
d94668d844
|
Branch was auto-updated.
|
2021-06-14 15:33:28 +00:00 |
|
|
Jose Enrique Hernandez
|
bfc4d1cd98
|
Merge pull request #1406 from splunk/dependabot/pip/ansible-3.4.0
Bump ansible from 3.1.0 to 3.4.0
|
2021-06-14 11:33:12 -04:00 |
|
|
github-actions[bot]
|
fff5b34889
|
Branch was auto-updated.
|
2021-06-14 15:29:05 +00:00 |
|
|
github-actions[bot]
|
9395db67bc
|
Branch was auto-updated.
|
2021-06-14 15:28:55 +00:00 |
|
|
github-actions[bot]
|
d26320f350
|
Branch was auto-updated.
|
2021-06-14 15:28:54 +00:00 |
|
|
Jose Enrique Hernandez
|
48ac32535e
|
Merge pull request #1403 from splunk/dependabot/pip/botocore-1.20.74
Bump botocore from 1.20.30 to 1.20.74
|
2021-06-14 11:28:35 -04:00 |
|
|
github-actions[bot]
|
33f326de2b
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
|
github-actions[bot]
|
bc0a1f1f9a
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
|
github-actions[bot]
|
8d9c89ff00
|
Branch was auto-updated.
|
2021-06-14 15:24:17 +00:00 |
|
|
github-actions[bot]
|
1a1963ea02
|
Branch was auto-updated.
|
2021-06-14 15:24:10 +00:00 |
|
|
Jose Enrique Hernandez
|
585f87dbd8
|
Merge pull request #1402 from splunk/dependabot/pip/azure-mgmt-resource-17.0.0
Bump azure-mgmt-resource from 16.1.0 to 17.0.0
|
2021-06-14 11:23:51 -04:00 |
|
|
root
|
a292fe9789
|
Added detection testing service results inWMI Recon Running Process Or Services
|
2021-06-14 13:04:18 +00:00 |
|
|
root
|
4d748347be
|
Added detection testing service results inRecon Using WMI Class
|
2021-06-14 12:28:21 +00:00 |
|
|
root
|
ab69531f6f
|
Added detection testing service results inRecon AVProduct Through Pwh or WMI
|
2021-06-14 12:04:32 +00:00 |
|
|
root
|
219a73ae7c
|
Added detection testing service results inPowershell Using memory As Backing Store
|
2021-06-14 11:40:08 +00:00 |
|
|
root
|
aee919474e
|
Added detection testing service results inPowershell Processing Stream Of Data
|
2021-06-14 10:48:43 +00:00 |
|