 mhaag-spl
|
f986f4a221
|
Update powershell_remove_windows_defender_directory.yml
Resolving https://github.com/splunk/security_content/pull/1962
|
2022-02-02 13:32:53 -07:00 |
|
|
research bot
|
63ca144971
|
updating docs and package bits [ci skip]
|
2022-02-02 18:11:51 +00:00 |
|
|
Rod Soto
|
89cb0a782a
|
rod777
|
2022-02-02 07:53:42 -08:00 |
|
|
P4T12ICK
|
634d28efe3
|
trouble shooting
|
2022-02-02 10:45:37 +01:00 |
|
|
P4T12ICK
|
8b93c99904
|
trouble shooting
|
2022-02-02 08:48:26 +01:00 |
|
|
research bot
|
e52d00b53d
|
updating docs and package bits [ci skip]
|
2022-01-31 20:04:12 +00:00 |
|
|
pyth0n1c
|
59952091e3
|
Branch was auto-updated.
|
2022-01-31 11:29:54 -08:00 |
|
|
pyth0n1c
|
99ad78a9a8
|
Branch was auto-updated.
|
2022-01-31 11:24:12 -08:00 |
|
|
pyth0n1c
|
1144b3ce63
|
Branch was auto-updated.
|
2022-01-31 11:24:11 -08:00 |
|
|
pyth0n1c
|
f0c0612c0c
|
Branch was auto-updated.
|
2022-01-31 11:17:35 -08:00 |
|
|
pyth0n1c
|
b155ae76f1
|
Branch was auto-updated.
|
2022-01-31 11:17:34 -08:00 |
|
|
pyth0n1c
|
0a5a930d9e
|
Branch was auto-updated.
|
2022-01-31 11:17:33 -08:00 |
|
|
Bhavin Patel
|
0cd3274889
|
Merge pull request #1968 from thejud/add_required_tags
Add empty cist20 and nist tags to meet validation
|
2022-01-31 11:17:12 -08:00 |
|
|
Bhavin Patel
|
5eaad1d88b
|
Merge branch 'develop' into reg_yml_analytics_updates
|
2022-01-31 11:07:41 -08:00 |
|
|
Jud Dagnall
|
ff8cdbc089
|
Add empty cist20 and nist tags to meet validation
|
2022-01-28 18:51:51 -08:00 |
|
|
pyth0n1c
|
091a6c0864
|
Branch was auto-updated.
|
2022-01-28 13:28:20 -08:00 |
|
|
pyth0n1c
|
f048b156b8
|
Branch was auto-updated.
|
2022-01-28 13:28:19 -08:00 |
|
|
Bhavin Patel
|
14c145c133
|
Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
|
2022-01-28 13:27:59 -08:00 |
|
|
Michael Hart
|
0911746b03
|
Adding more detail to the description on how scoring works
|
2022-01-28 16:08:25 -05:00 |
|
|
Michael Haag
|
c5db61e52d
|
Quick fix
|
2022-01-28 12:49:03 -07:00 |
|
|
tccontre
|
bea2197612
|
Update disabling_defender_services.yml
|
2022-01-28 18:05:34 +01:00 |
|
|
tccontre
|
2e9afadffa
|
Update disabling_defender_services.yml
|
2022-01-28 11:46:49 +01:00 |
|
|
tccontre
|
648a9b7971
|
Update disabling_controlpanel.yml
|
2022-01-28 11:44:01 +01:00 |
|
|
tccontre
|
05a002fffa
|
Update disabling_cmd_application.yml
|
2022-01-28 11:43:24 +01:00 |
|
|
tccontre
|
d409e0483f
|
Update disable_windows_smartscreen_protection.yml
|
2022-01-28 11:42:02 +01:00 |
|
|
tccontre
|
4bf30817d1
|
Update disable_windows_app_hotkeys.yml
|
2022-01-28 11:36:03 +01:00 |
|
|
tccontre
|
46f2aeddfb
|
Update allow_inbound_traffic_by_firewall_rule_registry.yml
|
2022-01-28 11:04:23 +01:00 |
|
|
tccontre
|
76333b3b9a
|
Update hide_user_account_from_sign_in_screen.yml
|
2022-01-28 10:57:15 +01:00 |
|
|
tccontre
|
246d990aad
|
Update eventvwr_uac_bypass.yml
|
2022-01-28 10:56:54 +01:00 |
|
|
tccontre
|
93fff15d4f
|
Update etw_registry_disabled.yml
|
2022-01-28 10:56:29 +01:00 |
|
|
tccontre
|
f0c7fed9cb
|
Update enable_wdigest_uselogoncredential_registry.yml
|
2022-01-28 10:56:15 +01:00 |
|
|
tccontre
|
4e004a6731
|
Update enable_rdp_in_other_port_number.yml
|
2022-01-28 10:56:01 +01:00 |
|
|
tccontre
|
63d4b1d8a0
|
Update disabling_task_manager.yml
|
2022-01-28 10:55:47 +01:00 |
|
|
tccontre
|
62e6607f6d
|
Update disabling_systemrestore_in_registry.yml
|
2022-01-28 10:55:33 +01:00 |
|
|
tccontre
|
e2fcbaf8a1
|
Update disabling_norun_windows_app.yml
|
2022-01-28 10:55:20 +01:00 |
|
|
tccontre
|
2fde5a7c08
|
Update disabling_folderoptions_windows_feature.yml
|
2022-01-28 10:55:06 +01:00 |
|
|
tccontre
|
4fe7983931
|
Update disabling_defender_services.yml
|
2022-01-28 10:54:53 +01:00 |
|
|
tccontre
|
585ef9de39
|
reg_yml_analytics_updates_3
|
2022-01-28 10:00:46 +01:00 |
|
|
pyth0n1c
|
9f24af21e3
|
Branch was auto-updated.
|
2022-01-27 14:55:48 -08:00 |
|
|
Bhavin Patel
|
3efcb99124
|
Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
|
2022-01-27 14:55:25 -08:00 |
|
|
pyth0n1c
|
b331d100ec
|
Branch was auto-updated.
|
2022-01-27 14:51:56 -08:00 |
|
|
Bhavin Patel
|
7fd71050fe
|
Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
|
2022-01-27 14:51:23 -08:00 |
|
|
pyth0n1c
|
3d05f3f566
|
Branch was auto-updated.
|
2022-01-27 14:11:43 -08:00 |
|
|
pyth0n1c
|
2f00808797
|
Branch was auto-updated.
|
2022-01-27 14:11:40 -08:00 |
|
|
Bhavin Patel
|
1975ff75a2
|
Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
|
2022-01-27 14:11:19 -08:00 |
|
|
pyth0n1c
|
501e4b8ed3
|
Branch was auto-updated.
|
2022-01-27 13:40:48 -08:00 |
|
|
pyth0n1c
|
22f959a762
|
Branch was auto-updated.
|
2022-01-27 13:40:46 -08:00 |
|
|
mhaag-spl
|
7d9e146f76
|
Cred Dump Update
Based on feedback, updating analytic.
|
2022-01-27 13:17:30 -07:00 |
|
|
pyth0n1c
|
8078323a91
|
Branch was auto-updated.
|
2022-01-27 12:06:13 -08:00 |
|
|
pyth0n1c
|
47b5574f49
|
Branch was auto-updated.
|
2022-01-27 12:06:02 -08:00 |
|