Commit Graph

14636 Commits

Author SHA1 Message Date
pyth0n1c a279b38980 Branch was auto-updated. 2022-01-27 14:51:55 -08:00
pyth0n1c 7acdb76a52 Branch was auto-updated. 2022-01-27 14:51:53 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
2022-01-27 14:51:23 -08:00
pyth0n1c d2cd2cb641 Branch was auto-updated. 2022-01-27 14:11:45 -08:00
pyth0n1c 3d05f3f566 Branch was auto-updated. 2022-01-27 14:11:43 -08:00
pyth0n1c d72014418c Branch was auto-updated. 2022-01-27 14:11:42 -08:00
pyth0n1c 2f00808797 Branch was auto-updated. 2022-01-27 14:11:40 -08:00
Bhavin Patel 1975ff75a2 Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
2022-01-27 14:11:19 -08:00
pyth0n1c 501e4b8ed3 Branch was auto-updated. 2022-01-27 13:40:48 -08:00
pyth0n1c 5b547fbc6a Branch was auto-updated. 2022-01-27 13:40:47 -08:00
pyth0n1c 22f959a762 Branch was auto-updated. 2022-01-27 13:40:46 -08:00
pyth0n1c b00dd34ec8 Branch was auto-updated. 2022-01-27 13:40:44 -08:00
Bhavin Patel e96516be57 Merge pull request #1965 from splunk/haagupdate
Cred Dump Update
2022-01-27 13:40:27 -08:00
d1vious 38250086a5 Merge branch 'DontUpdateUp' of github.com:splunk/security_content into DontUpdateUp 2022-01-27 15:57:34 -05:00
d1vious 2a12151862 fixing path 2022-01-27 15:57:21 -05:00
mhaag-spl 7d9e146f76 Cred Dump Update
Based on feedback, updating analytic.
2022-01-27 13:17:30 -07:00
pyth0n1c 8078323a91 Branch was auto-updated. 2022-01-27 12:06:13 -08:00
pyth0n1c 1e680d5fba Branch was auto-updated. 2022-01-27 12:06:10 -08:00
pyth0n1c 47b5574f49 Branch was auto-updated. 2022-01-27 12:06:02 -08:00
pyth0n1c 6af836b39e Branch was auto-updated. 2022-01-27 12:05:53 -08:00
Michael Haag 802b96ef3a Merge pull request #1960 from splunk/TR-1547
TR-1547 :Customer bug
2022-01-27 13:05:27 -07:00
d1vious 39cb6376b4 fixing yaml error 2022-01-27 15:05:08 -05:00
d1vious 8fb6b17139 adding log4shell correlation 2022-01-27 14:59:25 -05:00
Michael Hart f71e3fe202 Adding references 2022-01-27 13:13:42 -05:00
P4T12ICK 228cc28a3b after changing test file format 2022-01-27 16:12:01 +01:00
P4T12ICK 35bb5de26a before changing test file format 2022-01-27 15:56:11 +01:00
tccontre cb94e13bfb Update disabling_controlpanel.yml 2022-01-27 10:19:49 +01:00
tccontre 0c7bfdfb91 Update disabling_cmd_application.yml 2022-01-27 10:19:35 +01:00
tccontre 9a53ad9418 Update disable_windows_smartscreen_protection.yml 2022-01-27 10:19:12 +01:00
tccontre 5f5c573995 Update disable_windows_behavior_monitoring.yml 2022-01-27 10:18:57 +01:00
tccontre e49de99c4e Update disable_windows_app_hotkeys.yml 2022-01-27 10:18:41 +01:00
tccontre ff4554d647 Update disable_uac_remote_restriction.yml 2022-01-27 10:18:28 +01:00
tccontre 00f141b909 Update disable_show_hidden_files.yml 2022-01-27 10:18:14 +01:00
tccontre be9b30dac2 Update disable_security_logs_using_minint_registry.yml 2022-01-27 10:17:58 +01:00
tccontre c31354c68c Update disable_registry_tool.yml 2022-01-27 10:17:43 +01:00
tccontre ee396fd819 Update disable_etw_through_registry.yml 2022-01-27 10:17:29 +01:00
tccontre 6e369a316f reg_yml_analytics_updates_2 2022-01-27 10:14:52 +01:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK a630b8a4b5 before removing SAAWS 2022-01-27 09:39:14 +01:00
truptilangalia-crest 7cc2713064 Delete detect_mimipenguin.yml 2022-01-27 11:54:33 +05:30
truptilangalia-crest 81809b4dcc Delete detect_linux_exploit_suggester_execution.yml 2022-01-27 11:54:16 +05:30
truptilangalia-crest 93a1d46758 Delete detect_linpeas_execution.yml 2022-01-27 11:53:59 +05:30
truptilangalia-crest aea9333e44 Delete detect_linenum_execution.yml 2022-01-27 11:53:33 +05:30
truptilangalia-crest 4e720c0415 Delete detect_autosuid_post_exploitation_tool.yml 2022-01-27 11:52:54 +05:30
truptilangalia-crest 807dd99672 Merge branch 'splunk:develop' into test/enrich_detections 2022-01-27 11:49:35 +05:30
Michael Hart b80af6f151 Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used 2022-01-26 22:38:13 -05:00
d1vious e85fe9f5e7 updating mitre coverage map 2022-01-26 20:41:55 -05:00
patel-bhavin fe5db9e78e adding lookup files 2022-01-26 15:34:10 -08:00
research bot 55a62e8365 updating docs and package bits [ci skip] 2022-01-26 22:55:37 +00:00
patel-bhavin 328417d4fa test files 2022-01-26 14:31:04 -08:00