admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

1492 Commits

Author SHA1 Message Date
Ignacio 4e5b26e322 Merge branch 'develop' into misko_credential_probing 2020-11-18 11:30:43 -08:00
Bhavin Patel c8710c17ad Merge pull request #893 from davisshannon/develop 
Data Exfil PR (fixed up)
 2020-11-18 11:30:10 -08:00
Ignacio 9b8bc3ceaf Merge branch 'develop' into misko_credential_probing 2020-11-18 11:25:16 -08:00
Jose Enrique Hernandez 3c1cfbf4de Merge branch 'develop' into develop 2020-11-18 13:30:38 -05:00
Jose Enrique Hernandez 7d64ec2884 Merge branch 'develop' into misko_recon_use_cases 2020-11-18 12:22:12 -05:00
P4T12ICK f10ee1c906 new detection test 2020-11-18 15:38:17 +01:00
P4T12ICK 1a77b13d95 new detection test 2020-11-18 11:28:25 +01:00
bpatel 83f4490738 test file 2020-11-17 13:30:02 -08:00
bpatel 7e418daa84 testing 2020-11-17 12:33:20 -08:00
Ignacio 1db0cb220e Merge branch 'develop' into misko_credential_probing 2020-11-17 08:58:17 -08:00
Bhavin Patel f110c1febe Merge branch 'develop' into mustang_beta_test_files 2020-11-16 20:44:01 -08:00
P4T12ICK 9b2c2bcf28 Merge branch 'develop' into detection_testing_part_one 2020-11-16 15:38:40 +01:00
P4T12ICK c049e81eec Merge branch 'develop' into ryuktestsfiles 2020-11-16 15:33:11 +01:00
P4T12ICK e52c5627be test files changed 2020-11-16 14:41:38 +01:00
Jose Enrique Hernandez a874999185 Merge branch 'develop' into detection_testing_part_one 2020-11-12 10:16:47 -05:00
Jose Enrique Hernandez 3e9513f4b8 Merge branch 'develop' into develop 2020-11-11 22:04:16 -05:00
Jose Enrique Hernandez 4acc8c3efb Merge branch 'develop' into mbjerkeland-develop 2020-11-11 22:03:44 -05:00
Xiao Lin e7e659e882 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-11 23:25:18 +00:00
Stanislav Miskovic 2b64634e2f Fix - renaming and providing adequate test set for log deletion detection (this was Mimikatz detection, not PowerSploit one) 2020-11-10 19:01:01 -08:00
bpatel 3f83c1ef29 adding test files 2020-11-10 17:30:26 -08:00
Jose Enrique Hernandez dc7d3bf9ea Merge branch 'develop' into misko_illegal_management 2020-11-10 19:21:33 -05:00
P4T12ICK 832ce6a2ae Update windows_security_account_manager_stopped.test.yml 2020-11-10 16:49:19 +01:00
P4T12ICK 20b9f7a784 Update windows_disableantispyware_reg.test.yml 2020-11-10 16:49:02 +01:00
P4T12ICK 7eabf717c0 Update windows_conhost_exe_force_flag.test.yml 2020-11-10 16:48:47 +01:00
P4T12ICK ac4bab5bee Update ryuk_test_files_detected.test.yml 2020-11-10 16:48:28 +01:00
P4T12ICK b7876411e2 Update ryuk_test_files_detected.test.yml 2020-11-10 16:48:03 +01:00
P4T12ICK cacd61039b Update windows_security_account_manager_stopped.test.yml 2020-11-10 16:42:51 +01:00
P4T12ICK b435c6ce9c Update windows_disableantispyware_reg.test.yml 2020-11-10 16:42:33 +01:00
P4T12ICK 52993d830a Update windows_conhost_exe_force_flag.test.yml 2020-11-10 16:42:16 +01:00
P4T12ICK b1e4cccec2 Update ryuk_test_files_detected.test.yml 2020-11-10 16:41:13 +01:00
P4T12ICK 3f6f8af783 new test file 2020-11-10 15:44:07 +01:00
P4T12ICK 2da2082b6a new test file 2020-11-10 15:13:15 +01:00
Stanislav Miskovic 1969d4a9ab Illegal control of compromised resources via Mimikatz, PowerSploit and DSInternals modules 2020-11-10 00:58:27 -08:00
Mikael Bjerkeland 3675fa80ad Rename 2020-11-10 09:37:33 +01:00
P4T12ICK 1f3f1ae408 Merge branch 'develop' into mbjerkeland-develop 2020-11-10 09:24:55 +01:00
P4T12ICK 4059b769a2 new detection test 2020-11-10 09:20:22 +01:00
P4T12ICK 70466c9301 new detection test 2020-11-10 09:02:24 +01:00
Jose Enrique Hernandez 54eddbd393 Merge branch 'develop' into ryuktestsfiles 2020-11-09 14:12:10 -05:00
Xiao Lin 09c43eff66 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-09 18:10:02 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
Mikael Bjerkeland fb0398fafb Added test 2020-11-09 10:12:52 +01:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
Rod Soto f8a131528d widowswsecuritysamsearch 2020-11-08 11:30:34 -05:00
Rod Soto e21455a145 fixnamedaddedantispyware 2020-11-08 11:10:49 -05:00
Rod Soto 2fd9f07c75 winconhostryuksearch 2020-11-08 10:57:02 -05:00
Rod Soto 7af33cfd4f ryuktestfilestestfile 2020-11-08 10:27:03 -05:00
Stanislav Miskovic fbb5ee4c7f Reconnaissance - adding detections for AD infrastructure, network connectivity, computers, domains, processes, services, registry, shares, etc. 2020-11-06 18:15:45 -08:00