Commit Graph

23075 Commits

Author SHA1 Message Date
Bhavin Patel 1813ce39ac Merge branch 'release_v4.13.0' into sysmon_fix 2023-09-28 12:38:50 -07:00
Bhavin Patel 83a2a59b34 Merge pull request #2858 from splunk/obs_fix_64
Observable fixes
2023-09-28 12:26:59 -07:00
Bhavin Patel e5a814e78e remove script block from message 2023-09-28 11:12:02 -07:00
Bhavin Patel 2270cac53c Update get_aduser_with_powershell_script_block.yml 2023-09-28 11:09:47 -07:00
Bhavin Patel 5bdfd1f170 Update get_addefaultdomainpasswordpolicy_with_powershell_script_block.yml 2023-09-28 11:08:30 -07:00
Bhavin Patel 0d16ea4d80 Update adsisearcher_account_discovery.yml 2023-09-28 11:07:57 -07:00
Bhavin Patel 4ba5bcb670 Update windows_vulnerable_3cx_software.yml 2023-09-28 10:58:04 -07:00
Bhavin Patel f8988b7d80 Update cobalt_strike_named_pipes.yml 2023-09-28 10:53:01 -07:00
Bhavin Patel 92a6c6f694 Update dump_lsass_via_procdump_rename.yml 2023-09-28 10:52:21 -07:00
srv-rr-gh-researchbt 0a5302a7bb Branch was auto-updated. 2023-09-28 09:47:38 -07:00
srv-rr-gh-researchbt d57ee81d1d Branch was auto-updated. 2023-09-28 09:47:36 -07:00
Bhavin Patel 31dda2ee54 Merge pull request #2853 from splunk/njrat2
njrat2
2023-09-28 09:47:16 -07:00
Bhavin Patel 631ecd4122 updating sutffff 2023-09-27 15:51:03 -07:00
Bhavin Patel 0bde5c7afe Update windows_modify_registry_with_md5_reg_key_name.yml 2023-09-27 15:40:05 -07:00
Bhavin Patel c5e942e24a Update windows_disable_or_modify_tools_via_taskkill.yml
how to implement
2023-09-27 15:38:24 -07:00
Bhavin Patel d0e387f41a Update windows_delete_or_modify_system_firewall.yml
updates to text and spl
2023-09-27 15:37:28 -07:00
srv-rr-gh-researchbt 527a954099 Branch was auto-updated. 2023-09-27 15:21:04 -07:00
srv-rr-gh-researchbt b6b1fb16ee Branch was auto-updated. 2023-09-27 15:21:03 -07:00
srv-rr-gh-researchbt 8341c2dcc1 Branch was auto-updated. 2023-09-27 15:21:01 -07:00
Bhavin Patel fefee99f51 Merge pull request #2849 from splunk/njrat
njrat
2023-09-27 15:20:41 -07:00
Bhavin Patel d3e104c3f3 Update windows_disable_or_modify_tools_via_taskkill.yml 2023-09-27 14:58:14 -07:00
Bhavin Patel 67b6e4749f Update windows_delete_or_modify_system_firewall.yml 2023-09-27 14:57:04 -07:00
Bhavin Patel 2076a91d12 adding dest 2023-09-27 14:56:11 -07:00
Bhavin Patel aa67babf28 Merge branch 'develop' into njrat 2023-09-27 14:35:11 -07:00
srv-rr-gh-researchbt aa1e29b13f Branch was auto-updated. 2023-09-26 15:47:47 -07:00
srv-rr-gh-researchbt d200495988 Branch was auto-updated. 2023-09-26 15:47:46 -07:00
Bhavin Patel c2d6569ad3 Merge pull request #2852 from splunk/ba_detections_spl2
Ba detections spl2
2023-09-26 15:47:29 -07:00
srv-rr-gh-researchbt aeabc63198 Branch was auto-updated. 2023-09-26 14:15:20 -07:00
Bhavin Patel ad6c78ff41 Merge pull request #2854 from splunk/fix_obs_type
fix incorrect observable type
2023-09-26 14:15:01 -07:00
srv-rr-gh-researchbt dbc16464b4 Branch was auto-updated. 2023-09-26 14:13:58 -07:00
srv-rr-gh-researchbt 77c5c29d8e Branch was auto-updated. 2023-09-26 14:13:57 -07:00
Bhavin Patel a40e33bd40 Merge pull request #2857 from splunk/tor_to_prod
TOR to PROD
2023-09-26 14:13:40 -07:00
srv-rr-gh-researchbt c5718166cf Branch was auto-updated. 2023-09-26 14:11:30 -07:00
Bhavin Patel 25b67313fc Merge pull request #2856 from splunk/addlink
Update juniper_networks_remote_code_execution_exploit_detection.yml
2023-09-26 14:11:12 -07:00
srv-rr-gh-researchbt 9bfad7fead Branch was auto-updated. 2023-09-26 14:10:25 -07:00
Bhavin Patel d0627846c7 Merge pull request #2861 from splunk/dga_pr_fix
DGA Performance fix
2023-09-26 14:10:07 -07:00
Bhavin Patel b2d1f4f1ad minor change for creating PR 2023-09-26 14:03:04 -07:00
Namratha Sreekanta 3743f161a8 DGA Performance fix 2023-09-25 12:55:51 -07:00
tccontre 648df38a1a njrat2 2023-09-25 18:11:06 +02:00
tccontre 9c341bc954 njrat2 2023-09-25 18:09:25 +02:00
tccontre 4e213c100d njrat2 2023-09-25 18:05:49 +02:00
Bhavin Patel e9b0b6fcdb update status to deprecated 2023-09-22 16:05:31 -07:00
Bhavin Patel dee08b262a minor fix 2023-09-22 15:59:07 -07:00
Bhavin Patel db49b5500d last one 2023-09-22 15:57:31 -07:00
Bhavin Patel 7cead8e956 second set of fixes 2023-09-22 15:47:54 -07:00
Bhavin Patel 9332e6a24c o365_obs_fix 2023-09-22 15:01:21 -07:00
Bhavin Patel b84752b863 conflicts 2023-09-21 14:00:46 -07:00
tccontre 71e6ae8406 njrat2 2023-09-21 10:56:06 +02:00
Bhavin Patel b00506bd95 Merge branch 'develop' into sysmon_fix 2023-09-20 16:22:08 -07:00
Bhavin Patel c09b037509 fixes 2023-09-20 15:45:48 -07:00