mvelazco
|
37845b815d
|
adding 2 extra detections
|
2021-11-15 22:42:22 -05:00 |
|
pyth0n1c
|
7aca8f6203
|
Removed the image_manager.py file - it was simple and its functionality was integrated into the container_manager.py.
|
2021-11-15 16:11:17 -08:00 |
|
Bhavin Patel
|
9d1f391883
|
Branch was auto-updated.
|
2021-11-15 14:53:33 -08:00 |
|
Bhavin Patel
|
91693022e2
|
Branch was auto-updated.
|
2021-11-15 14:53:32 -08:00 |
|
Bhavin Patel
|
09748cc1c0
|
Branch was auto-updated.
|
2021-11-15 14:53:31 -08:00 |
|
Bhavin Patel
|
2170e89b6e
|
Branch was auto-updated.
|
2021-11-15 14:53:26 -08:00 |
|
Bhavin Patel
|
b89e7c6579
|
Branch was auto-updated.
|
2021-11-15 14:53:24 -08:00 |
|
Bhavin Patel
|
af23d0506c
|
Branch was auto-updated.
|
2021-11-15 14:53:23 -08:00 |
|
Bhavin Patel
|
ffba11d491
|
Merge pull request #1773 from splunk/feature/PEX-33-API-lambda-scalability-issue
Feature/pex 33 api lambda scalability issue
|
2021-11-15 14:53:04 -08:00 |
|
pyth0n1c
|
9e435bbc43
|
Lots more changes as we break into separate files for more readability and maintainability. Big changes around printing status and managing different threads as they run.
|
2021-11-15 14:47:24 -08:00 |
|
Detection Testing Service
|
f5a627f091
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 22:23:16 +00:00 |
|
root
|
76b92849a3
|
Added detection testing service results inWindows DiskCryptor Usage
|
2021-11-15 22:23:15 +00:00 |
|
Detection Testing Service
|
98eebd76fd
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 22:21:34 +00:00 |
|
root
|
6e45efbf98
|
Added detection testing service results inWindows DiskCryptor Usage
|
2021-11-15 22:21:33 +00:00 |
|
root
|
8f6fe7cc45
|
Added detection testing service results inWindows DiskCryptor Usage
|
2021-11-15 22:17:34 +00:00 |
|
Bhavin Patel
|
6cb7daf9b1
|
Branch was auto-updated.
|
2021-11-15 13:49:27 -08:00 |
|
Bhavin Patel
|
5df971fe13
|
Branch was auto-updated.
|
2021-11-15 13:49:25 -08:00 |
|
Bhavin Patel
|
c0038f5c82
|
Branch was auto-updated.
|
2021-11-15 13:49:22 -08:00 |
|
Bhavin Patel
|
1a20a79a1b
|
Branch was auto-updated.
|
2021-11-15 13:49:19 -08:00 |
|
Bhavin Patel
|
8f9eb87116
|
Branch was auto-updated.
|
2021-11-15 13:49:18 -08:00 |
|
Bhavin Patel
|
4ec3670291
|
Branch was auto-updated.
|
2021-11-15 13:49:18 -08:00 |
|
Bhavin Patel
|
6e68c6b3f5
|
Branch was auto-updated.
|
2021-11-15 13:49:17 -08:00 |
|
pyth0n1c
|
a83e0ce977
|
Merge pull request #1798 from splunk/fixing_issues
Fixed Regex
Minor changes - manually reviewed and looks good!
|
2021-11-15 13:48:56 -08:00 |
|
mhaag-spl
|
ee3e77b45c
|
DefaultAccount
|
2021-11-15 14:30:14 -07:00 |
|
mhaag-spl
|
084e781385
|
dcrypt
|
2021-11-15 14:22:39 -07:00 |
|
mhaag-spl
|
7f5475ff8b
|
plink
|
2021-11-15 14:17:20 -07:00 |
|
mvelazco
|
d7e88b2e1a
|
adding first two detections
|
2021-11-15 15:09:47 -05:00 |
|
Detection Testing Service
|
3bbc33ef4a
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:48:08 +00:00 |
|
root
|
24b1994699
|
Added detection testing service results inWindows InstallUtil Remote Network Connection
|
2021-11-15 18:48:07 +00:00 |
|
Detection Testing Service
|
592504ff67
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:46:36 +00:00 |
|
root
|
48c0b7d039
|
Added detection testing service results inWindows InstallUtil Credential Theft
|
2021-11-15 18:46:36 +00:00 |
|
Detection Testing Service
|
734b8575db
|
Merge branch 'prodigal_haag' of https://github.com/splunk/security_content into prodigal_haag
|
2021-11-15 18:38:46 +00:00 |
|
root
|
000a3acefb
|
Added detection testing service results inWindows InstallUtil URL in Command Line
|
2021-11-15 18:38:45 +00:00 |
|
root
|
87fe65ac66
|
Added detection testing service results inWindows InstallUtil Uninstall Option with Network
|
2021-11-15 18:38:15 +00:00 |
|
root
|
5446bc59a8
|
Added detection testing service results inWindows InstallUtil URL in Command Line
|
2021-11-15 17:59:30 +00:00 |
|
mhaag-spl
|
6e5b06270e
|
Update windows_installutil_credential_theft.yml
|
2021-11-15 10:21:17 -07:00 |
|
mhaag-spl
|
1aa5852b19
|
Update exchange_powershell_module_usage.yml
|
2021-11-15 07:53:20 -07:00 |
|
tccontre
|
e6cc42371e
|
minor_ssa_update
|
2021-11-15 11:39:06 +01:00 |
|
pyth0n1c
|
f64fef09d7
|
Still needs a lot of rework and cleanup - can't run right now. Looking to finish cleanup on Monday.
|
2021-11-12 17:11:10 -08:00 |
|
pyth0n1c
|
4e16ab139d
|
More maintenance to make the testing code more modular and better documented.
|
2021-11-12 16:37:05 -08:00 |
|
pyth0n1c
|
b20d34c6a2
|
Huge changes to refactor docker based detection testing. Broke down massive testing file into smaller files. Not running or tested yet, but in progress.
|
2021-11-12 15:32:02 -08:00 |
|
root
|
07c0bd828b
|
Added detection testing service results inWindows InstallUtil Uninstall Option
|
2021-11-12 22:11:12 +00:00 |
|
root
|
c2f0b8d0f6
|
Added detection testing service results inSchtasks scheduling job on remote system
|
2021-11-12 21:38:18 +00:00 |
|
root
|
dcad854d1b
|
Added detection testing service results inRemote Process Instantiation via WMI
|
2021-11-12 21:17:29 +00:00 |
|
Detection Testing Service
|
28ea433a81
|
Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 20:56:42 +00:00 |
|
root
|
159faea4c6
|
Added detection testing service results inWindows Service Initiation on Remote Endpoint
|
2021-11-12 20:56:41 +00:00 |
|
root
|
8ff650ebe8
|
Added detection testing service results inWindows Service Creation on Remote Endpoint
|
2021-11-12 20:56:33 +00:00 |
|
mvelazco
|
a7a85f2fc3
|
Merge branch 'TR-1085_LateralMovement' of github.com:splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 15:06:22 -05:00 |
|
mvelazco
|
4c7108e0a3
|
fixing unsupported character
|
2021-11-12 15:06:16 -05:00 |
|
Detection Testing Service
|
9903554d3a
|
Merge branch 'TR-1085_LateralMovement' of https://github.com/splunk/security_content into TR-1085_LateralMovement
|
2021-11-12 20:05:57 +00:00 |
|