1492 Commits

Author	SHA1	Message	Date
mhaag-spl	fd5e4adfb1	Revert "Revert "Revert "T1127.001 MSbuild""" ... This reverts commit 9617d4d9b3.	2021-01-17 19:37:58 -07:00
mhaag-spl	9617d4d9b3	Revert "Revert "T1127.001 MSbuild"" ... This reverts commit e27ad1399a.	2021-01-15 15:06:53 -07:00
mhaag-spl	e27ad1399a	Revert "T1127.001 MSbuild" ... This reverts commit 0eba4877ff.	2021-01-15 15:06:15 -07:00
mhaag-spl	0eba4877ff	T1127.001 MSbuild ... MSbuild detections and test.	2021-01-15 14:25:25 -07:00
github-actions[bot]	18ba87492f	Branch was auto-updated.	2021-01-14 20:29:17 +00:00
P4T12ICK	2e1234c594	improved detections and tests	2021-01-14 15:57:42 +01:00
P4T12ICK	c871d6804a	improved detections and tests	2021-01-14 15:01:16 +01:00
bpatel	20242b93e6	data path update	2021-01-13 18:27:06 -08:00
bpatel	b7c0137282	test timing	2021-01-13 17:57:49 -08:00
Bhavin Patel	f74ebbea1c	Merge branch 'develop' into TR-318_mfa	2021-01-13 17:19:00 -08:00
bpatel	ab6d8cdfe1	new detection file and test data	2021-01-13 16:30:19 -08:00
P4T12ICK	4a626c5246	merged with develop	2021-01-13 14:21:09 +01:00
P4T12ICK	994989b086	improved detections and tests	2021-01-12 15:38:32 +01:00
P4T12ICK	1073cff2f7	improved detections and tests	2021-01-12 11:13:17 +01:00
mhaag-spl	def94c4623	Update bcdedit_failure_recovery_modification.test.yml	2021-01-11 13:57:05 -07:00
mhaag-spl	d99e66f367	T1490 BCDedit ... T1490 BCDedit	2021-01-11 12:25:19 -07:00
P4T12ICK	b7175cbc08	updated detection and test file	2021-01-11 14:28:14 +01:00
P4T12ICK	4383db4e83	update detection	2021-01-11 13:31:02 +01:00
P4T12ICK	8df36c2e0c	Merge branch 'develop' into TR-320-suspicious-rights-delegation	2021-01-07 15:28:30 +01:00
Bhavin Patel	14d6e6d01a	Merge branch 'develop' into sunburst_detections	2020-12-17 16:14:28 -08:00
divious1	fc4c30587b	renamed test file	2020-12-17 18:05:54 -05:00
divious1	b8326d8b38	Merge branch 'sunburst_detections' of github.com:splunk/security-content into sunburst_detections	2020-12-17 13:53:29 -05:00
divious1	ca1ae13328	renaming dragonfly	2020-12-17 13:53:20 -05:00
Jose Enrique Hernandez	56d4471b78	Merge branch 'develop' into sunburst_detections	2020-12-17 13:01:38 -05:00
divious1	58eade42b6	adding new detection and test for sunburst	2020-12-17 12:20:26 -05:00
P4T12ICK	eee9e6bb2f	bug fix	2020-12-17 12:00:53 +01:00
P4T12ICK	2c62bc7ede	bug fix	2020-12-17 11:40:00 +01:00
P4T12ICK	504a11d8be	bug fix	2020-12-17 11:22:22 +01:00
P4T12ICK	48ada30a34	o365 disable mfa	2020-12-17 11:02:20 +01:00
bpatel	fdb698cdb3	new detection for login failure	2020-12-16 16:26:25 -08:00
P4T12ICK	07aa33af22	Merge branch 'develop' into detection_testing_part_two	2020-12-16 15:59:31 +01:00
P4T12ICK	9a775408c8	new detections	2020-12-16 14:31:05 +01:00
P4T12ICK	b2173f3875	new detections	2020-12-16 14:10:32 +01:00
P4T12ICK	8b563122bb	changes	2020-12-15 13:59:33 +01:00
P4T12ICK	6de3aaafe4	detection O365 suspicious-rights-delegation	2020-12-15 12:24:30 +01:00
Ignacio	495619a78c	Merge branch 'develop' into TR-253	2020-12-14 09:32:55 -08:00
P4T12ICK	04a456fa5b	test file debugging	2020-12-09 13:55:13 +01:00
P4T12ICK	4d3bbb5e41	test file debugging	2020-12-09 13:27:13 +01:00
P4T12ICK	bbc520c3bd	new test file	2020-12-09 12:39:17 +01:00
P4T12ICK	132f536d44	new test file	2020-12-09 12:00:49 +01:00
P4T12ICK	442edba8d8	new attack data	2020-12-09 10:00:12 +01:00
P4T12ICK	8de0985548	new test file	2020-12-08 15:55:35 +01:00
P4T12ICK	9a77cf6057	new test file	2020-12-08 15:43:25 +01:00
P4T12ICK	23ac763f02	new test file	2020-12-08 15:17:01 +01:00
P4T12ICK	dd3e31cd44	new test file	2020-12-08 14:18:08 +01:00
P4T12ICK	b00298de86	new test file	2020-12-08 13:38:41 +01:00
P4T12ICK	b789637035	new test file	2020-12-08 13:27:58 +01:00
P4T12ICK	fb36b0d93a	new test file	2020-12-08 11:47:59 +01:00
P4T12ICK	466735ac5a	new test file	2020-12-08 11:19:49 +01:00
P4T12ICK	927e09bf1f	new test file	2020-12-08 10:12:15 +01:00