Commit Graph

15318 Commits

Author SHA1 Message Date
truptilangalia-crest 27bc30da6f Updated detection files with recommended TA list. 2022-05-02 11:41:09 +05:50
Jose Enrique Hernandez ab74318614 Merge pull request #2178 from splunk/TR1807fix
Removing false positives
v3.38.2
2022-04-27 16:01:35 -04:00
Lou Stella 28566660fa Removing false positives 2022-04-27 14:13:01 -05:00
Michael Haag 106e451aa5 Merge pull request #2174 from splunk/industroyer2
industroyer2
2022-04-27 12:32:59 -06:00
pyth0n1c 702550aa5e Branch was auto-updated. 2022-04-26 08:49:55 -07:00
Bhavin Patel a229f866c0 Merge pull request #2173 from splunk/ci/ssa-builds-upload
Upload SSA-Conenent build to Pre-QA
2022-04-26 11:49:31 -04:00
pyth0n1c 21f96b251f Branch was auto-updated. 2022-04-25 11:32:07 -07:00
pyth0n1c 46fcfbdf7c Branch was auto-updated. 2022-04-25 11:32:00 -07:00
Bhavin Patel e0958d88e9 Merge pull request #2139 from splunk/inthewild
The Temple of Haag
2022-04-25 14:31:36 -04:00
Bhavin Patel 93b1f025dc Update windows_registry_modification_for_safe_mode_persistence.yml 2022-04-25 13:46:43 -04:00
Bhavin Patel 324b7b9dfc Update windows_iso_lnk_file_creation.yml
minor change
2022-04-25 13:44:30 -04:00
tccontre 1acfac609c industroyer2 2022-04-25 12:03:54 +02:00
tccontre 11d372b63c industroyer2 2022-04-25 09:36:55 +02:00
Michael Haag e04e3690f8 Update windows_registry_delete_task_sd.yml 2022-04-22 11:37:08 -06:00
Michael Haag 7d4e75523f Update windows_drivers_loaded_by_signature.yml 2022-04-22 10:32:33 -06:00
mhaag-spl abd668b260 updates and story 2022-04-22 10:21:29 -06:00
pyth0n1c 3e96701688 Branch was auto-updated. 2022-04-18 14:42:26 -07:00
pyth0n1c f23595695b Branch was auto-updated. 2022-04-18 14:42:23 -07:00
Bhavin Patel 9eb9e7a88b Merge pull request #2154 from splunk/TR-1735
Tr 1735:nes fields
2022-04-18 14:42:05 -07:00
mhaag-spl 6ba1225077 SD Delete 2022-04-18 10:55:08 -06:00
mhaag-spl 12350f451e Update nltest_domain_trust_discovery.yml 2022-04-18 10:01:25 -06:00
truptilangalia-crest a8718b43ca test: added code to run pre-qa on schedule 2022-04-15 17:06:31 +05:30
research bot 1df940a5e9 updating docs and package bits [ci skip] 2022-04-14 22:03:48 +00:00
pyth0n1c a99614452e Branch was auto-updated. 2022-04-14 13:55:48 -07:00
pyth0n1c 5d8d3c0613 Branch was auto-updated. 2022-04-14 13:55:46 -07:00
Jose Enrique Hernandez e00c2eddc4 Merge pull request #2172 from splunk/moving_tcp_command_and_scripting_interpreter_outbound_ldap_traffic
moving to experimental
v3.38.1
2022-04-14 16:55:25 -04:00
d1vious fdcd471d5d moving to experimental 2022-04-14 16:37:54 -04:00
pyth0n1c 3cdd79a0dd Branch was auto-updated. 2022-04-14 13:34:35 -07:00
pyth0n1c 1e9129f44d Branch was auto-updated. 2022-04-14 13:34:33 -07:00
Lou Stella 652920f18f Merge pull request #2170 from splunk/fishsticks
Update ssa___windows_lolbin_binary_in_non_standard_path.yml
2022-04-14 15:34:11 -05:00
mhaag-spl 327042ede5 Merge branch 'fishsticks' of https://github.com/splunk/security_content into fishsticks 2022-04-14 14:13:26 -06:00
mhaag-spl b356157dc0 Update ssa___windows_rundll32_comsvcs_memory_dump.yml 2022-04-14 14:13:22 -06:00
pyth0n1c 00e3c44d64 Branch was auto-updated. 2022-04-14 13:09:54 -07:00
pyth0n1c ef83f1ed8f Branch was auto-updated. 2022-04-14 13:09:52 -07:00
pyth0n1c 9ff0da4725 Branch was auto-updated. 2022-04-14 13:09:51 -07:00
Michael Haag ccffa29e3f Merge pull request #2171 from splunk/ssa_mshta_fix
Unicode + Regex = There be demons
2022-04-14 14:09:32 -06:00
mhaag-spl 79ee477a19 comsvcs 2022-04-14 14:04:13 -06:00
Lou Stella 71ad17def8 Modified 'required fields' 2022-04-14 14:43:30 -05:00
Lou Stella b75f8ed6aa Modifying field name 2022-04-14 14:40:38 -05:00
mhaag-spl c3e7e4c850 Update ssa___windows_lolbin_binary_in_non_standard_path.yml 2022-04-14 13:40:01 -06:00
mhaag-spl be60ac00b4 Revert "Update ssa___windows_lolbin_binary_in_non_standard_path.yml"
This reverts commit b25fc779c3.
2022-04-14 13:39:00 -06:00
Lou Stella 81e57c3591 Modified Regex 2022-04-14 14:37:01 -05:00
mhaag-spl b25fc779c3 Update ssa___windows_lolbin_binary_in_non_standard_path.yml 2022-04-14 13:20:46 -06:00
P4T12ICK 876071e45d fixed some small issues 2022-04-14 12:24:13 +02:00
Lou Stella 3ad0e714fc push for Jud 2022-04-13 19:46:49 -05:00
pyth0n1c 558d47a35d Branch was auto-updated. 2022-04-13 05:29:58 -07:00
pyth0n1c 36d3bef8f8 Branch was auto-updated. 2022-04-13 05:29:54 -07:00
tccontre cb363eb47a Merge pull request #2162 from splunk/acidrain
acidrain
2022-04-13 14:29:32 +02:00
tccontre ce0f0852dd acidrain 2022-04-13 10:07:22 +02:00
tccontre a7bf512c15 acidrain 2022-04-13 09:34:11 +02:00