Commit Graph

14636 Commits

Author SHA1 Message Date
root 7f30daf301 Added detection testing service results inAWS IAM Delete Policy 2021-04-15 19:21:10 +00:00
Detection Testing Service 7b0e2bbf68 Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags 2021-04-15 19:17:21 +00:00
root f07a6cd445 Added detection testing service results inAWS IAM Assume Role Policy Brute Force 2021-04-15 19:17:21 +00:00
github-actions[bot] 2e6fab0dc0 Branch was auto-updated. 2021-04-15 19:10:19 +00:00
github-actions[bot] 436906b79f Branch was auto-updated. 2021-04-15 19:10:18 +00:00
github-actions[bot] 26ada2e1f7 Branch was auto-updated. 2021-04-15 19:10:17 +00:00
github-actions[bot] 456e4e3722 Branch was auto-updated. 2021-04-15 19:10:15 +00:00
github-actions[bot] 4e9f4a8175 Branch was auto-updated. 2021-04-15 19:10:14 +00:00
github-actions[bot] 7ada42b190 Branch was auto-updated. 2021-04-15 19:10:13 +00:00
github-actions[bot] 31f285a4b0 Branch was auto-updated. 2021-04-15 19:10:11 +00:00
github-actions[bot] 5373b817bc Branch was auto-updated. 2021-04-15 19:10:10 +00:00
Jose Enrique Hernandez 85220f56bf Merge pull request #1335 from splunk/saaws_appinspect
remove configs that are not needed by saaws
2021-04-15 15:09:53 -04:00
bpatel cc3d3cd7e2 remove configs that are not needed by saaws 2021-04-15 12:00:29 -07:00
root d6a32d4bd5 Added detection testing service results inAWS IAM AccessDenied Discovery Events 2021-04-15 18:47:13 +00:00
root 453b0accec Added detection testing service results inAWS Excessive List Command Usage 2021-04-15 18:13:33 +00:00
tcontreras 07e5528918 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach 2021-04-15 19:40:46 +02:00
tcontreras 7a0d9be5a5 spear_update 2021-04-15 19:39:21 +02:00
mvelazco c84656c87b adding one extra detection, NTLM spray with invalid users 2021-04-15 10:45:10 -04:00
mvelazco e0cbf01590 adding 2 extra detections 2021-04-15 09:42:36 -04:00
root 8cd49a3f7a Added detection testing service results inOffice Document Executing Macro Code 2021-04-15 08:25:53 +00:00
tccontre 0fa575ad4a Delete office_application_spawned_cmd_shell.test.yml 2021-04-15 09:46:20 +02:00
tccontre e85860be6c Delete office_application_spawned_cmd_shell.yml 2021-04-15 09:46:00 +02:00
github-actions[bot] 81fad1383b Branch was auto-updated. 2021-04-15 07:31:13 +00:00
github-actions[bot] 897c19c0ec Branch was auto-updated. 2021-04-15 07:31:13 +00:00
github-actions[bot] 6dff266bb3 Branch was auto-updated. 2021-04-15 07:31:11 +00:00
github-actions[bot] cf0ea3ca61 Branch was auto-updated. 2021-04-15 07:31:09 +00:00
github-actions[bot] 632bae41ca Branch was auto-updated. 2021-04-15 07:31:08 +00:00
github-actions[bot] 788b1b9550 Branch was auto-updated. 2021-04-15 07:31:07 +00:00
github-actions[bot] 995bae1d0e Branch was auto-updated. 2021-04-15 07:31:06 +00:00
github-actions[bot] 63af5b09a7 Branch was auto-updated. 2021-04-15 07:31:01 +00:00
P4T12ICK 274e5f1b43 Merge pull request #1334 from splunk/fix_malicious_ps_as_service
Added various ways to execute powershell, ...
2021-04-15 09:30:41 +02:00
root a0914ddcdd Added detection testing service results inMalicious Powershell Executed As A Service 2021-04-15 07:23:08 +00:00
Stanislav Miskovic 62ed90ccbd Added various ways to execute powershell, made match of the powershell executable mandatory, added that execution must be followed by one of the hidding or no-exit options. 2021-04-14 22:46:38 -07:00
mhaag-spl 94eccb2565 Update winevent_scheduled_task_created_within_public_path.yml 2021-04-14 21:28:49 -06:00
mhaag-spl 79bff151de Update winevent_scheduled_task_created_within_public_path.yml 2021-04-14 21:25:26 -06:00
mhaag-spl f18542b214 Update winevent_scheduled_task_created_within_public_path.yml 2021-04-14 21:23:30 -06:00
mhaag-spl 537be8ede4 Update winevent_scheduled_task_created_within_public_path.yml 2021-04-14 21:17:59 -06:00
mhaag-spl bc572e94fa Update aws_iam_delete_policy.yml 2021-04-14 21:14:35 -06:00
mhaag-spl 8a81aee71b AWS Detections 2021-04-14 21:10:46 -06:00
mvelazco 271bb6d85a updaing password spraying detection names 2021-04-14 15:40:17 -04:00
github-actions[bot] d4f3d601f7 Branch was auto-updated. 2021-04-14 19:27:21 +00:00
github-actions[bot] f05f1210c4 Branch was auto-updated. 2021-04-14 19:27:20 +00:00
github-actions[bot] 3b09117d62 Branch was auto-updated. 2021-04-14 19:27:18 +00:00
github-actions[bot] 8775f8b463 Branch was auto-updated. 2021-04-14 19:27:16 +00:00
github-actions[bot] 13cedb2cc9 Branch was auto-updated. 2021-04-14 19:27:13 +00:00
github-actions[bot] d0550f2202 Branch was auto-updated. 2021-04-14 19:27:12 +00:00
github-actions[bot] 9a942f0d23 Branch was auto-updated. 2021-04-14 19:27:10 +00:00
github-actions[bot] beb49969cf Branch was auto-updated. 2021-04-14 19:27:09 +00:00
Bhavin Patel 65b9300449 Merge pull request #1325 from splunk/fixing_deployments
Fixing deployments bug
2021-04-14 12:26:51 -07:00
bpatel 3d2a90f694 merge with develop 2021-04-14 12:18:36 -07:00