Commit Graph

21 Commits

Author SHA1 Message Date
Xiao Lin 04f8db150a Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 22:40:23 +00:00
Xiao Lin da26faa9d9 change input field names 2020-10-28 22:57:25 +00:00
miskoSplunk 4ca69a1e0f Rename CredentialExtraction_SSA.ipynb to ssa___CredentialExtraction.ipynb 2020-10-27 11:31:43 -07:00
Xiao Lin 4b933ff9ef add test notebooks 2020-10-22 20:54:31 +00:00
Jose Enrique Hernandez f84dd4ad4a Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-10-22 14:13:07 -04:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
Stanislav Miskovic 8aa5392c50 Adding SSA detections for credential extraction from dumped secure stores or live Windows systems. 2020-10-19 01:42:14 -07:00
Ignacio 14b88aa2af Merge branch 'develop' into lolbas-fixes 2020-10-16 15:46:58 -07:00
Xiao Lin 7a9be3fa01 add 2020-10-16 15:34:26 -07:00
Ignacio d857af2a0a Merge branch 'develop' into lolbas-fixes 2020-10-16 10:01:17 -07:00
Ignacio Bermudez Corrales 7981684b5f Merge branch 'lolbas-fixes' of github.com:splunk/security-content into lolbas-fixes 2020-10-15 14:54:18 -07:00
Ignacio Bermudez Corrales e04592401b unusual lolbas short time period 2020-10-15 14:53:59 -07:00
Jose Enrique Hernandez 8520f3a281 Merge branch 'develop' into lolbas-fixes 2020-10-15 17:14:34 -04:00
Ignacio Bermudez Corrales 5da1fde8cf Added notebook 2020-10-15 13:15:17 -07:00
Jose Enrique Hernandez 78784320fd Merge branch 'develop' into unit_test_prohibited_apps_spawning_cmdprompt 2020-10-15 16:04:26 -04:00
Xiao Lin 9db448a52e update unit test 2020-10-15 19:47:12 +00:00
divious1 015514ee1e notebook for prohibited apps spawning 2020-10-15 15:43:22 -04:00
divious1 dac98c19b9 skeleton 2020-09-24 18:05:10 -04:00