Commit Graph

14636 Commits

Author SHA1 Message Date
root b23dbeed08 Added detection testing service results inNon Firefox Process Access Firefox Profile Dir 2021-09-15 16:00:56 +00:00
root 50c9e38337 Added detection testing service results inJscript Execution Using Cscript App 2021-09-15 13:59:55 +00:00
root f42e2cd255 Added detection testing service results inOffice Application Drop Executable 2021-09-15 13:03:19 +00:00
root 8422a53a20 Added detection testing service results inXSL Script Execution With WMIC 2021-09-15 12:43:04 +00:00
tccontre d0eff26cde fin7 2021-09-15 13:48:22 +02:00
tccontre d96f70cf8e fin7 2021-09-15 13:45:42 +02:00
Bhavin Patel ceb2b3b0fb Branch was auto-updated. 2021-09-14 12:34:49 -07:00
mvelazco 1fde288203 Merge pull request #1662 from splunk/AD_Discovery_TR-789_5
May The Haag Be With You
2021-09-14 15:34:29 -04:00
root 575377d312 Added detection testing service results inPowerShell Get LocalGroup Discovery 2021-09-14 18:46:53 +00:00
Detection Testing Service 6bed1bdc71 Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5 2021-09-14 18:20:58 +00:00
root 70dfb3b5d1 Added detection testing service results inWmic Group Discovery 2021-09-14 18:20:57 +00:00
Detection Testing Service 1a5e50fbec Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5 2021-09-14 18:14:29 +00:00
root eaacec47db Added detection testing service results inPowershell Get LocalGroup Discovery with Script Block Logging 2021-09-14 18:14:29 +00:00
Detection Testing Service 84f5346fdf Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5 2021-09-14 18:02:07 +00:00
root c514bf1361 Added detection testing service results inNet Localgroup Discovery 2021-09-14 18:02:07 +00:00
Detection Testing Service 5cf90f60b2 Merge branch 'AD_Discovery_TR-789_5' of https://github.com/splunk/security_content into AD_Discovery_TR-789_5 2021-09-14 17:55:42 +00:00
root 7ccd84ccfd Added detection testing service results inGet WMIObject Group Discovery with Script Block Logging 2021-09-14 17:55:41 +00:00
root 9836d8c263 Added detection testing service results inGet WMIObject Group Discovery 2021-09-14 17:52:46 +00:00
mhaag-spl 358917d733 May The Haag Be With You 2021-09-14 11:05:59 -06:00
Bhavin Patel 29051d9cd3 Branch was auto-updated. 2021-09-14 09:02:32 -07:00
Michael Haag cd5bbf6cca Merge pull request #1660 from splunk/AD_Discovery_TR-789_9
AD_Discovery_TR-789_9
2021-09-14 10:02:13 -06:00
mvelazco 47e3c2bf9e fixing message field 2021-09-14 11:54:58 -04:00
mvelazco 2e6bb4886b Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9 2021-09-14 10:01:54 -04:00
mvelazco 379f8e82c1 adding required_fields 2021-09-14 10:01:52 -04:00
Detection Testing Service 042f7e0c74 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-14 13:35:29 +00:00
root 31a0177b31 Added detection testing service results inGetCurrent User with PowerShell Script Block 2021-09-14 13:35:28 +00:00
root 4abb769c46 Added detection testing service results inGetCurrent User with PowerShell 2021-09-14 13:33:53 +00:00
tccontre d3c2aed6b0 fin7 2021-09-14 12:20:02 +02:00
tccontre d8d8c4e44c FIN7 2021-09-14 12:17:55 +02:00
Detection Testing Service 893822a9c9 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 22:58:59 +00:00
root a51106c70d Added detection testing service results inUser Discovery With Env Vars PowerShell 2021-09-13 22:58:58 +00:00
Detection Testing Service d953fb05b1 Merge branch 'AD_Discovery_TR-789_9' of https://github.com/splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 22:58:57 +00:00
root 137aa7a5e5 Added detection testing service results inUser Discovery With Env Vars PowerShell Script Block 2021-09-13 22:58:57 +00:00
root e4719b9437 Added detection testing service results inSystem User Discovery With Whoami 2021-09-13 22:56:08 +00:00
root 07e27ba6ae Added detection testing service results inSystem User Discovery With Query 2021-09-13 22:03:33 +00:00
mvelazco 2959c2edb7 Merge branch 'AD_Discovery_TR-789_9' of github.com:splunk/security_content into AD_Discovery_TR-789_9 2021-09-13 17:22:33 -04:00
mvelazco 687fb1745c adding 4 detections 2021-09-13 17:22:30 -04:00
Bhavin Patel 9522b364c5 Branch was auto-updated. 2021-09-13 11:10:27 -07:00
Bhavin Patel 70dc4c3414 Merge pull request #1658 from splunk/AD_Discovery_TR-789_8
AD_Discovery_TR-789_8
2021-09-13 11:10:10 -07:00
Bhavin Patel eca9191516 Branch was auto-updated. 2021-09-13 11:09:36 -07:00
Bhavin Patel b94510f831 Merge pull request #1624 from splunk/AD_Discovery_TR-789_3
AD_Discovery_TR-789_3
2021-09-13 11:09:16 -07:00
Bhavin Patel 5cd91c53c2 Branch was auto-updated. 2021-09-13 11:07:52 -07:00
Bhavin Patel 2a06605804 Merge pull request #1596 from splunk/AD_Discovery_TR-789_6
AD_Discovery_TR-789_6
2021-09-13 11:07:33 -07:00
Bhavin Patel 20913cd362 Branch was auto-updated. 2021-09-13 11:06:38 -07:00
Bhavin Patel 361c57dfc7 Merge pull request #1620 from splunk/AD_Discovery_TR-789_7
AD_Discovery_TR-789_7
2021-09-13 11:06:16 -07:00
mvelazco ce3b5cadfd initial 2 detections 2021-09-13 12:08:42 -04:00
Jose Enrique Hernandez 6684db4aab Delete CNAME 2021-09-13 11:30:38 -04:00
P4T12ICK 1d1c93893b add new alert action 2021-09-13 17:10:37 +02:00
mhaag-spl fd34f91dcd Update create_or_delete_windows_shares_using_net_exe.yml 2021-09-13 07:34:37 -06:00
d1vious 8c10f910e7 Merge branch 'fancy_docs' of github.com:splunk/security_content into fancy_docs 2021-09-13 09:13:36 -04:00