tccontre
|
8effd5a258
|
endpoint_to_ssa
|
2021-06-16 12:52:15 +02:00 |
|
github-actions[bot]
|
90f9bfabcc
|
Branch was auto-updated.
|
2021-06-15 13:44:07 +00:00 |
|
mhart-splunk
|
6270837a4c
|
Excessive win temp detection (#1438)
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
|
2021-06-15 09:43:48 -04:00 |
|
github-actions[bot]
|
1a1963ea02
|
Branch was auto-updated.
|
2021-06-14 15:24:10 +00:00 |
|
tccontre
|
3b479c8af1
|
hpot
|
2021-06-14 11:55:13 +02:00 |
|
tccontre
|
ccf3080958
|
rttp
|
2021-06-10 15:18:16 +02:00 |
|
Michael Hart
|
af4eff8cb5
|
Fixing file reference name
|
2021-06-09 14:57:17 -04:00 |
|
Michael Hart
|
7236281a42
|
Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection
|
2021-06-09 14:24:41 -04:00 |
|
Michael Hart
|
144bcaff80
|
Adding in test file
|
2021-06-09 14:20:03 -04:00 |
|
github-actions[bot]
|
e547ad7395
|
Branch was auto-updated.
|
2021-06-08 19:00:26 +00:00 |
|
tccontre
|
2af2c59337
|
revil2
|
2021-06-04 16:41:23 +02:00 |
|
tccontre
|
1f8cf6ad4c
|
Update revil_common_exec_parameter.test.yml
|
2021-06-04 16:14:09 +02:00 |
|
tccontre
|
1dc92ffce5
|
revil1
|
2021-06-04 16:10:57 +02:00 |
|
tccontre
|
09796e3f67
|
revil
|
2021-06-04 16:07:02 +02:00 |
|
github-actions[bot]
|
2525072da8
|
Branch was auto-updated.
|
2021-06-03 19:19:26 +00:00 |
|
mhaag-spl
|
2af2dbdd0e
|
AzureHound
|
2021-06-03 10:40:41 -06:00 |
|
mhaag-spl
|
f269268b5a
|
7zip and rar
|
2021-06-03 09:41:39 -06:00 |
|
mhaag-spl
|
487c1c861e
|
psexec renamed
|
2021-06-03 09:17:31 -06:00 |
|
mhaag-spl
|
cc40bf658c
|
SharpHound
|
2021-06-03 08:48:19 -06:00 |
|
mhaag-spl
|
95c1b4408c
|
Cobalt Jump
|
2021-05-27 08:22:53 -06:00 |
|
tccontre
|
91978e5c10
|
Update enable_rdp_in_other_port_number.test.yml
|
2021-05-26 13:37:03 +02:00 |
|
tccontre
|
80210ef7d8
|
casper1
|
2021-05-26 13:33:47 +02:00 |
|
github-actions[bot]
|
04227fd8ee
|
Branch was auto-updated.
|
2021-05-21 17:57:32 +00:00 |
|
Bhavin Patel
|
45d45a345e
|
Merge branch 'develop' into den-haag
|
2021-05-21 10:53:33 -07:00 |
|
github-actions[bot]
|
1a3df7445e
|
Branch was auto-updated.
|
2021-05-20 23:01:11 +00:00 |
|
tccontre
|
99681d7f46
|
lndn1
|
2021-05-19 16:06:45 +02:00 |
|
mhaag-spl
|
1037aed35d
|
svc-exe
|
2021-05-18 09:45:46 -06:00 |
|
github-actions[bot]
|
4cb715aa8d
|
Branch was auto-updated.
|
2021-05-18 11:30:13 +00:00 |
|
P4T12ICK
|
f91afa2675
|
add data exfil story to detections
|
2021-05-18 13:01:29 +02:00 |
|
P4T12ICK
|
da0d634f64
|
Merge branch 'develop' into xmrig
|
2021-05-18 10:06:05 +02:00 |
|
tcontreras
|
3d3ff91c2b
|
removed
|
2021-05-17 10:00:36 +02:00 |
|
bpatel
|
a55a6bff0a
|
delete test file
|
2021-05-13 14:26:55 -07:00 |
|
tcontreras
|
d631a7e2f2
|
fail
|
2021-05-13 20:32:25 +02:00 |
|
github-actions[bot]
|
659766fc1e
|
Branch was auto-updated.
|
2021-05-13 17:54:33 +00:00 |
|
tcontreras
|
c24f154dce
|
com_obj
|
2021-05-13 18:58:14 +02:00 |
|
mhaag-spl
|
5ff8c6372c
|
SLUI
|
2021-05-13 06:52:59 -06:00 |
|
bpatel
|
4f9b8a2b1b
|
test time
|
2021-05-12 14:53:27 -07:00 |
|
bpatel
|
743bbaf051
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-12 13:50:15 -07:00 |
|
bpatel
|
03444a29e9
|
test file
|
2021-05-12 13:50:03 -07:00 |
|
mhaag-spl
|
f4f519f6aa
|
Extract SAM from registry
|
2021-05-12 14:45:55 -06:00 |
|
tcontreras
|
d984670146
|
shadow1
|
2021-05-12 18:49:24 +02:00 |
|
tcontreras
|
7bb8eb506c
|
shadow
|
2021-05-12 18:35:13 +02:00 |
|
tcontreras
|
4aa746593f
|
xmrig5
|
2021-05-07 16:34:15 +02:00 |
|
tcontreras
|
e7a626bd16
|
xmrig2
|
2021-05-07 13:56:08 +02:00 |
|
tcontreras
|
aff2b0adb5
|
xmrig1
|
2021-05-07 13:51:26 +02:00 |
|
tcontreras
|
5879a87e21
|
xmrig_ir
|
2021-05-07 13:38:12 +02:00 |
|
mvelazco
|
076d9dbc11
|
minor fixes to queries
|
2021-05-06 15:00:16 -04:00 |
|
github-actions[bot]
|
b0882367b1
|
Branch was auto-updated.
|
2021-05-05 20:05:24 +00:00 |
|
mvelazco
|
d77e1b6a2e
|
Merge branch 'password_spraying_TR-515' of github.com:splunk/security_content into password_spraying_TR-515
|
2021-05-05 15:34:08 -04:00 |
|
tcontreras
|
03c05248ac
|
fix_typos
|
2021-05-05 21:34:02 +02:00 |
|