21 Commits

Author	SHA1	Message	Date
research-bot	d1c7e1b6e5	udpating sysmon source	2024-10-30 18:42:30 -07:00
Bhavin Patel	0bb378b19b	updating drilldowns	2024-10-24 14:13:05 -07:00
Bhavin Patel	8b03f3d58f	updating all detections with quotes	2024-10-24 14:08:37 -07:00
Bhavin Patel	7bc11be7dc	updating drilldown_formatting	2024-10-23 18:25:39 -07:00
Bhavin Patel	385ac7adc1	remove end hours	2024-10-23 17:52:24 -07:00
Bhavin Patel	cf169b3de0	adding drilldowns to all	2024-09-30 22:04:57 +05:30
Patrick	87108a5aac	Improved data sources	2024-07-17 14:41:50 +02:00
Patrick	9e0d8426c1	improved data source field	2024-07-16 14:06:31 +02:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Bhavin Patel	f3372e03c2	Release branch v4.16.0	2023-11-16 20:33:10 +00:00
Michael Haag	a3d1907490	fixes	2023-10-01 09:42:31 -06:00
Michael Haag	17ca5971d3	WS_FTP	2023-10-01 09:39:59 -06:00
Gowthamaraj rajendran	e06cfa133d	Edit how_to_implement for Endpoint.Processes	2023-09-15 10:58:38 -07:00
Michael Haag	391cded0c7	Flax Typhoon	2023-08-25 09:30:30 -06:00
Michael Haag	01d9c4a9b2	Citrx	2023-07-26 12:09:00 -06:00
tccontre	f78e4404d2	blackbyte_campaign	2023-07-10 12:55:29 +02:00
Bhavin Patel	71178f3c3a	Update detect_webshell_exploit_behavior.yml ... Updated `security_content_summariesonly` and adding filter macro	2023-06-12 17:17:39 -07:00
Bhavin Patel	9faf0af7ab	Update detect_webshell_exploit_behavior.yml ... added status key, fixing a typo and running validation scripts	2023-06-12 16:31:11 -07:00
Steven Dick	5667c3790c	Update detect_webshell_exploit_behavior.yml ... Updated for 4.x shema	2023-04-26 14:10:54 -04:00
Steven Dick	20b1db48de	Add files via upload ... Upload for generic webshell detection.	2023-04-12 07:18:22 -04:00