1492 Commits

Author	SHA1	Message	Date
github-actions[bot]	85ecf75bb9	Branch was auto-updated.	2021-06-15 13:44:09 +00:00
github-actions[bot]	b9adec82fb	Branch was auto-updated.	2021-06-15 13:44:08 +00:00
github-actions[bot]	90f9bfabcc	Branch was auto-updated.	2021-06-15 13:44:07 +00:00
github-actions[bot]	399c342009	Branch was auto-updated.	2021-06-15 13:44:02 +00:00
mhart-splunk	6270837a4c	Excessive win temp detection (#1438) ... Detects artifacts in windows event logs while meterpreter is operating on a remote host.	2021-06-15 09:43:48 -04:00
P4T12ICK	fed9efe117	new detection testing	2021-06-15 10:24:53 +02:00
P4T12ICK	24d9b15c73	new detection testing	2021-06-15 10:10:42 +02:00
P4T12ICK	8f26cbf75a	new detection testing	2021-06-15 10:01:48 +02:00
github-actions[bot]	b49e723d79	Branch was auto-updated.	2021-06-14 15:33:38 +00:00
github-actions[bot]	1a1963ea02	Branch was auto-updated.	2021-06-14 15:24:10 +00:00
tccontre	3b479c8af1	hpot	2021-06-14 11:55:13 +02:00
github-actions[bot]	a0a9761ecc	Branch was auto-updated.	2021-06-10 17:32:01 +00:00
github-actions[bot]	33ddcc1a5b	Branch was auto-updated.	2021-06-10 17:32:00 +00:00
github-actions[bot]	7ba4c41c89	Branch was auto-updated.	2021-06-10 17:31:58 +00:00
tccontre	ccf3080958	rttp	2021-06-10 15:18:16 +02:00
mhaag-spl	f78ddd6777	formatting	2021-06-09 14:41:09 -06:00
mhaag-spl	d8e3e4c2f7	special char remove	2021-06-09 14:36:18 -06:00
mhaag-spl	606876a98f	PowerShell Script Block Initial Analytics	2021-06-09 14:26:05 -06:00
Michael Hart	af4eff8cb5	Fixing file reference name	2021-06-09 14:57:17 -04:00
Michael Hart	7236281a42	Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection	2021-06-09 14:24:41 -04:00
Michael Hart	144bcaff80	Adding in test file	2021-06-09 14:20:03 -04:00
github-actions[bot]	09068e6125	Branch was auto-updated.	2021-06-09 17:37:38 +00:00
P4T12ICK	4a7004aac1	Merge branch 'develop' into automated_detections_testing_2	2021-06-09 10:39:58 +02:00
github-actions[bot]	31c95ab515	Branch was auto-updated.	2021-06-08 19:00:29 +00:00
github-actions[bot]	e547ad7395	Branch was auto-updated.	2021-06-08 19:00:26 +00:00
peter-cg	0599a3027f	Fixing test data pointer	2021-06-07 22:37:23 -05:00
tccontre	2af2c59337	revil2	2021-06-04 16:41:23 +02:00
tccontre	1f8cf6ad4c	Update revil_common_exec_parameter.test.yml	2021-06-04 16:14:09 +02:00
tccontre	1dc92ffce5	revil1	2021-06-04 16:10:57 +02:00
tccontre	09796e3f67	revil	2021-06-04 16:07:02 +02:00
github-actions[bot]	2525072da8	Branch was auto-updated.	2021-06-03 19:19:26 +00:00
github-actions[bot]	16b05ba440	Branch was auto-updated.	2021-06-03 19:19:23 +00:00
mhaag-spl	2af2dbdd0e	AzureHound	2021-06-03 10:40:41 -06:00
mhaag-spl	f269268b5a	7zip and rar	2021-06-03 09:41:39 -06:00
mhaag-spl	487c1c861e	psexec renamed	2021-06-03 09:17:31 -06:00
mhaag-spl	cc40bf658c	SharpHound	2021-06-03 08:48:19 -06:00
P4T12ICK	488318f19d	Merge branch 'develop' into automated_detections_testing_2	2021-06-01 13:42:37 +02:00
P4T12ICK	f77eb50c2b	new detection testing	2021-06-01 13:37:06 +02:00
P4T12ICK	7b985cc728	rename .yaml to .yml	2021-05-31 11:21:38 +02:00
mhaag-spl	95c1b4408c	Cobalt Jump	2021-05-27 08:22:53 -06:00
peter-cg	2110e8ddd3	Adding v2 of ssa___rare_..._lolbas	2021-05-26 16:39:15 -05:00
tccontre	91978e5c10	Update enable_rdp_in_other_port_number.test.yml	2021-05-26 13:37:03 +02:00
tccontre	80210ef7d8	casper1	2021-05-26 13:33:47 +02:00
github-actions[bot]	04227fd8ee	Branch was auto-updated.	2021-05-21 17:57:32 +00:00
Bhavin Patel	45d45a345e	Merge branch 'develop' into den-haag	2021-05-21 10:53:33 -07:00
github-actions[bot]	1a3df7445e	Branch was auto-updated.	2021-05-20 23:01:11 +00:00
tccontre	99681d7f46	lndn1	2021-05-19 16:06:45 +02:00
mhaag-spl	1037aed35d	svc-exe	2021-05-18 09:45:46 -06:00
github-actions[bot]	4cb715aa8d	Branch was auto-updated.	2021-05-18 11:30:13 +00:00
P4T12ICK	f91afa2675	add data exfil story to detections	2021-05-18 13:01:29 +02:00