Commit Graph

14636 Commits

Author SHA1 Message Date
patel-bhavin 69c2787e51 text updates 2022-01-10 13:21:39 -08:00
pyth0n1c 233a5670c8 Branch was auto-updated. 2022-01-10 13:06:35 -08:00
pyth0n1c d322408d84 Branch was auto-updated. 2022-01-10 13:06:33 -08:00
pyth0n1c a27af2372b Branch was auto-updated. 2022-01-10 13:06:29 -08:00
pyth0n1c 4bc8539d78 Branch was auto-updated. 2022-01-10 13:06:27 -08:00
pyth0n1c 4a4f99e7a9 Branch was auto-updated. 2022-01-10 13:06:26 -08:00
pyth0n1c c76e167d05 Branch was auto-updated. 2022-01-10 13:06:25 -08:00
pyth0n1c a2732c6644 Branch was auto-updated. 2022-01-10 13:06:24 -08:00
pyth0n1c eff3b414f5 Branch was auto-updated. 2022-01-10 13:06:23 -08:00
pyth0n1c efe19be3e0 Branch was auto-updated. 2022-01-10 13:06:21 -08:00
pyth0n1c 416b961f10 Branch was auto-updated. 2022-01-10 13:06:20 -08:00
pyth0n1c 5f00114818 Branch was auto-updated. 2022-01-10 13:06:19 -08:00
pyth0n1c a6a7028bfa Branch was auto-updated. 2022-01-10 13:06:18 -08:00
Bhavin Patel 43e2b40935 Merge pull request #1907 from splunk/linux_persist_priv_batch_2
linux_persist_priv_batch_2
2022-01-10 13:05:56 -08:00
Bhavin Patel 3362c243ae Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:59:21 -08:00
Bhavin Patel 26f945c52a Update linux_setuid_using_setcap_utility.yml 2022-01-10 12:56:56 -08:00
Bhavin Patel fabd820804 Update linux_setuid_using_chmod_utility.yml 2022-01-10 12:55:51 -08:00
Bhavin Patel 19d907da37 Update linux_service_started_or_enabled.yml 2022-01-10 12:53:45 -08:00
Bhavin Patel a505181149 Update linux_service_restarted.yml 2022-01-10 12:52:25 -08:00
Bhavin Patel 8bd5c20eac Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:46:34 -08:00
Bhavin Patel 4a08f745b2 Update linux_service_file_created_in_systemd_directory.yml 2022-01-10 12:41:02 -08:00
Bhavin Patel 527d8103b8 Update linux_file_creation_in_profile_directory.yml 2022-01-10 12:33:47 -08:00
Bhavin Patel 2944d1690b Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:32:10 -08:00
Bhavin Patel b60f4a2b5a Update linux_file_creation_in_init_boot_directory.yml 2022-01-10 12:30:55 -08:00
d1vious 6edaa90519 updated generate to match javiers feedback 2022-01-10 15:12:30 -05:00
pyth0n1c ff6b6c4397 Branch was auto-updated. 2022-01-10 12:11:52 -08:00
pyth0n1c 273bf8a809 Branch was auto-updated. 2022-01-10 12:11:51 -08:00
pyth0n1c 4e81a8f541 Branch was auto-updated. 2022-01-10 12:11:49 -08:00
pyth0n1c aa4f1a8cbc Branch was auto-updated. 2022-01-10 12:11:48 -08:00
pyth0n1c f1c16ea6c9 Branch was auto-updated. 2022-01-10 12:11:47 -08:00
pyth0n1c ef018cd9cb Branch was auto-updated. 2022-01-10 12:11:45 -08:00
pyth0n1c 20cfa5d7db Branch was auto-updated. 2022-01-10 12:11:37 -08:00
pyth0n1c 10e575a793 Branch was auto-updated. 2022-01-10 12:11:36 -08:00
pyth0n1c 787a5afd99 Branch was auto-updated. 2022-01-10 12:11:34 -08:00
Bhavin Patel 0bdcacd7b3 Merge pull request #1869 from splunk/T1059
The Haag at The Gates
2022-01-10 12:11:15 -08:00
d1vious 871a66ebae changed to use srs and complex division 2022-01-10 14:59:29 -05:00
tccontre 856635f601 linux_persist_priv_batch_4 2022-01-10 12:51:04 +01:00
tccontre ef99a8c8bc Update linux_sudoers_tmp_file_creation.yml 2022-01-10 12:36:33 +01:00
tccontre f48713b301 Update linux_possible_append_command_to_at_allow_config_file.yml 2022-01-10 09:46:50 +01:00
tccontre 265a1f0494 Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.yml 2022-01-10 09:44:05 +01:00
tccontre 72859e63e8 Update linux_possible_append_command_to_at_allow_config_file.yml 2022-01-10 09:43:33 +01:00
d1vious 067b6e5bbe cleaning up detections 2022-01-07 16:04:51 -05:00
d1vious 20c0196d7f moving things around 2022-01-07 16:04:21 -05:00
Jose Enrique Hernandez 6d206d9646 Merge pull request #1922 from splunk/doc_gen_remcos
Update docs for upcoming blog
2022-01-06 17:45:27 -05:00
Lou Stella a8e2af5782 Update docs for upcoming blog 2022-01-06 16:38:33 -06:00
Jose Enrique Hernandez b7597fc509 Merge pull request #1919 from splunk/playbook_mig_remcos
Playbook migration for remcos
2022-01-06 17:08:37 -05:00
Lou Stella 988f5d157a Created test dataset & moved detection out of experimental 2022-01-06 16:08:08 -06:00
Lou Stella 049482c74c Fixed casing per request 2022-01-06 15:16:52 -06:00
mhaag-spl 89f37444f4 Update msi_module_loaded_by_non_system_binary.yml 2022-01-06 10:06:40 -07:00
pyth0n1c 1dea66d75c Added authorize.conf.tar to make it possible to delete data from completed searches properly. 2022-01-05 15:26:43 -08:00