 mhaag-spl
|
f538e37f09
|
Update detect_mshta_renamed.yml
|
2021-08-12 06:40:52 -06:00 |
|
|
mhaag-spl
|
a2f9ac969c
|
Added detection testing service results inDetect microsoft.workflow.compiler.exe rename
|
2021-08-12 06:32:45 -06:00 |
|
|
mhaag-spl
|
915f5ac350
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-12 05:46:51 -06:00 |
|
|
mhaag-spl
|
8397af1673
|
Update suspicious_microsoft_workflow_compiler_usage.yml
|
2021-08-12 05:46:36 -06:00 |
|
|
Detection Testing Service
|
4f8b5ad361
|
Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak
|
2021-08-12 10:11:40 +00:00 |
|
|
root
|
a89eeababf
|
Added detection testing service results inRundll32 LockWorkStation
|
2021-08-12 10:11:39 +00:00 |
|
|
root
|
6e7280e936
|
Added detection testing service results inUninstall App Using MsiExec
|
2021-08-12 10:06:47 +00:00 |
|
|
tccontre
|
568fa87c40
|
conti_leak
|
2021-08-12 11:48:18 +02:00 |
|
|
root
|
899e9d01c0
|
Added detection testing service results inPowershell Execute COM Object
|
2021-08-12 09:19:27 +00:00 |
|
|
github-actions[bot]
|
74e20eb919
|
Branch was auto-updated.
|
2021-08-12 08:59:58 +00:00 |
|
|
github-actions[bot]
|
70d87bc2ce
|
Branch was auto-updated.
|
2021-08-12 08:59:52 +00:00 |
|
|
github-actions[bot]
|
c3a973657a
|
Branch was auto-updated.
|
2021-08-12 08:59:51 +00:00 |
|
|
github-actions[bot]
|
6b4ae84e01
|
Branch was auto-updated.
|
2021-08-12 08:59:50 +00:00 |
|
|
tccontre
|
c8d21347b1
|
Merge pull request #1549 from splunk/icedid
icedid
|
2021-08-12 10:59:31 +02:00 |
|
|
root
|
0f7d5aa104
|
Added detection testing service results inFsutil Zeroing File
|
2021-08-12 08:07:27 +00:00 |
|
|
tccontre
|
dcfab01e14
|
icedid
|
2021-08-12 09:25:43 +02:00 |
|
|
Detection Testing Service
|
204dd45bc8
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 20:32:46 -06:00 |
|
|
mhaag-spl
|
f7bb6e308d
|
Added detection testing service results inDetect HTML Help Renamed
|
2021-08-11 20:32:46 -06:00 |
|
|
mhaag-spl
|
c6f4791a1b
|
Update suspicious_microsoft_workflow_compiler_rename.test.yml
broken test
|
2021-08-11 19:51:53 -06:00 |
|
|
mhaag-spl
|
bf673e9d1a
|
Update detect_html_help_renamed.yml
|
2021-08-11 15:57:22 -06:00 |
|
|
mhaag-spl
|
56714c68cd
|
Update detect_html_help_renamed.yml
|
2021-08-11 15:01:09 -06:00 |
|
|
mhaag-spl
|
b450921fa1
|
Update suspicious_microsoft_workflow_compiler_rename.yml
|
2021-08-11 13:47:34 -06:00 |
|
|
github-actions[bot]
|
f078e35f81
|
Branch was auto-updated.
|
2021-08-11 19:35:37 +00:00 |
|
|
github-actions[bot]
|
e35372d8bc
|
Branch was auto-updated.
|
2021-08-11 19:35:36 +00:00 |
|
|
github-actions[bot]
|
e0507705c3
|
Branch was auto-updated.
|
2021-08-11 19:35:31 +00:00 |
|
|
github-actions[bot]
|
7fef077ac9
|
Branch was auto-updated.
|
2021-08-11 19:35:30 +00:00 |
|
|
github-actions[bot]
|
4e09f8834e
|
Branch was auto-updated.
|
2021-08-11 19:35:29 +00:00 |
|
|
github-actions[bot]
|
11266b564d
|
Branch was auto-updated.
|
2021-08-11 19:35:28 +00:00 |
|
|
Michael Haag
|
c84a3b3b25
|
Merge pull request #1555 from splunk/blackbolt_1
duplicate
|
2021-08-11 13:35:12 -06:00 |
|
|
patel-bhavin
|
9f71b88e6c
|
duplicate
|
2021-08-11 11:24:14 -07:00 |
|
|
mhaag-spl
|
2317ee7a4b
|
Added detection testing service results inDetect Renamed 7-Zip
|
2021-08-11 12:08:08 -06:00 |
|
|
mhaag-spl
|
a864bdc842
|
Update detect_renamed_7_zip.yml
|
2021-08-11 11:23:42 -06:00 |
|
|
tccontre
|
fa681a604f
|
lockbit_ttp
|
2021-08-11 18:37:03 +02:00 |
|
|
mhaag-spl
|
d13b923f91
|
Update detect_renamed_winrar.yml
|
2021-08-11 10:26:48 -06:00 |
|
|
mhaag-spl
|
0e71fa736a
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 09:34:47 -06:00 |
|
|
mhaag-spl
|
8458ce2eb4
|
Update detect_renamed_winrar.yml
|
2021-08-11 09:34:41 -06:00 |
|
|
mhaag-spl
|
eed6b40e5f
|
Added detection testing service results inDetect Renamed PSExec
|
2021-08-11 09:24:31 -06:00 |
|
|
mhaag-spl
|
ca96ea558f
|
Update detect_renamed_psexec.yml
|
2021-08-11 08:34:05 -06:00 |
|
|
mhaag-spl
|
aeace8d801
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 08:33:23 -06:00 |
|
|
mhaag-spl
|
005cfcc40e
|
Added detection testing service results inDetect Renamed RClone
|
2021-08-11 08:25:46 -06:00 |
|
|
mhaag-spl
|
749fbff290
|
Update detect_renamed_rclone.yml
|
2021-08-11 07:39:30 -06:00 |
|
|
mhaag-spl
|
cf669e8deb
|
Added detection testing service results inSuspicious Rundll32 startw
|
2021-08-11 07:25:28 -06:00 |
|
|
mhaag-spl
|
87e23caa40
|
Update suspicious_rundll32_startw.yml
|
2021-08-11 06:38:49 -06:00 |
|
|
miskoSplunk
|
055ed9ca2d
|
Merge branch 'develop' into misko_scores
|
2021-08-10 15:14:52 -07:00 |
|
|
Stanislav Miskovic
|
971315f40e
|
Fixing score rounding for two detections
|
2021-08-10 14:57:40 -07:00 |
|
|
Stanislav Miskovic
|
64b1a1f926
|
Correcting non-integer scores for two detections
|
2021-08-10 14:53:31 -07:00 |
|
|
mhaag-spl
|
dcd72f2f67
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 14:31:04 -06:00 |
|
|
pyth0n1c
|
779c45abc5
|
Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop
|
2021-08-10 12:59:05 -07:00 |
|
|
mhaag-spl
|
668fba767b
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 13:28:55 -06:00 |
|
|
research bot
|
932f368332
|
updating docs and package bits [ci skip]
|
2021-08-10 19:06:43 +00:00 |
|