351 Commits

Author	SHA1	Message	Date
patel-bhavin	05972240f4	story name	2021-10-12 13:03:43 -07:00
patel-bhavin	f2872c7774	merge conflicts	2021-09-30 12:08:43 -07:00
Bhavin Patel	9740a785b1	Branch was auto-updated.	2021-09-27 10:20:34 -07:00
tccontre	b2853d1878	remcos_agent	2021-09-23 13:46:35 +02:00
tccontre	d3c2aed6b0	fin7	2021-09-14 12:20:02 +02:00
tccontre	d8d8c4e44c	FIN7	2021-09-14 12:17:55 +02:00
Bhavin Patel	cfdf3ee2f7	Branch was auto-updated.	2021-09-09 00:27:31 -07:00
mhaag-spl	4515f473a9	Create microsoft_mshtml_remote_code_execution_cve_2021_40444.yml	2021-09-08 12:40:40 -06:00
Bhavin Patel	a4296acaad	Branch was auto-updated.	2021-09-08 00:52:41 -07:00
Bhavin Patel	5358ac5031	Branch was auto-updated.	2021-09-07 11:09:06 -07:00
Bhavin Patel	ef6247d05c	Branch was auto-updated.	2021-09-07 11:09:05 -07:00
tccontre	ba61023e49	blackMatter_ransomware	2021-09-07 13:38:26 +02:00
tccontre	a4e04374ad	blackMatter_ransomware	2021-09-07 13:26:59 +02:00
tccontre	01cd109007	blackMatter_ransomware	2021-09-07 13:24:13 +02:00
P4T12ICK	890b46cb22	Merge branch 'develop' into dev_sec_ops_package	2021-09-03 11:35:31 +02:00
pyth0n1c	16575c55b9	Branch was auto-updated.	2021-09-02 12:34:56 -07:00
mhaag-spl	e89824cda4	another fix	2021-09-01 21:01:13 -06:00
mhaag-spl	e8de140562	fixes	2021-09-01 16:58:23 -06:00
Michael Haag	52a959712e	Update petitpotam_ntlm_relay_adcs.yml	2021-09-01 15:20:45 -06:00
mvelazco	900559e872	updating petitpotam analytic story and detections	2021-09-01 16:08:40 -04:00
mhaag-spl	74e8d41c1a	Create petitpotam.yml	2021-09-01 08:28:09 -06:00
P4T12ICK	8509ecb3f9	support for devsecops pacckage	2021-08-26 14:59:59 +02:00
Michael Haag	e1dc76f7f2	Merge branch 'develop' into AD_Discovery_TR-789	2021-08-25 09:09:24 -06:00
mvelazco	0974bde2fa	first batch of AD Disccovery detections	2021-08-24 16:12:46 -04:00
mhaag-spl	dfab9d28b7	ProxyShell	2021-08-24 12:53:07 -06:00
mvelazco	fcdd9de006	Create active_directory_discovery.yml	2021-08-19 09:56:23 -04:00
patel-bhavin	c7bc4d7243	rename	2021-08-18 13:49:15 -07:00
P4T12ICK	3270cdc014	aws ecr dataset	2021-08-18 14:53:28 +02:00
P4T12ICK	2075f8a9fd	AWS ECR detections	2021-08-18 14:07:45 +02:00
P4T12ICK	c10d11aa94	AWS ECR detections	2021-08-18 12:57:22 +02:00
patel-bhavin	e1ff3993cd	run generate again	2021-08-16 15:57:44 -07:00
tccontre	5054148a72	story	2021-07-29 17:14:14 +02:00
P4T12ICK	80be6029de	updated stories	2021-07-21 12:26:15 +02:00
P4T12ICK	80b1104320	fix escu stanzas errors	2021-07-13 10:09:54 +02:00
tccontre	2f74506fc0	minor update	2021-07-02 14:02:31 +02:00
mhaag-spl	63bdd403b0	Update printnightmare_cve_2021_1675.yml	2021-07-01 15:14:22 -06:00
mhaag-spl	5c29c36356	Update printnightmare_cve_2021_1675.yml	2021-07-01 12:20:34 -06:00
mhaag-spl	a1a6fe9258	Update printnightmare_cve_2021_1675.yml	2021-07-01 12:18:34 -06:00
mhaag-spl	e86a988621	Printing All your Nightmares	2021-07-01 12:01:45 -06:00
github-actions[bot]	e03fde8770	Branch was auto-updated.	2021-06-22 20:00:55 +00:00
mhaag-spl	c85fc0e1c2	Update malicious_powershell.yml	2021-06-16 10:41:49 -06:00
divious1	06fbc3c476	Merge branch 'develop' into deprecation_of_detections	2021-06-16 10:42:00 -04:00
Michael Hart	990b3cd13a	Fixing analytic story yaml	2021-06-09 16:10:03 -04:00
Michael Hart	7236281a42	Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection	2021-06-09 14:24:41 -04:00
github-actions[bot]	e547ad7395	Branch was auto-updated.	2021-06-08 19:00:26 +00:00
Michael Hart	69c1de8e5e	Initial import of the detection and story for support	2021-06-08 10:01:32 -04:00
divious1	5c55e12833	udpating with develop	2021-06-07 21:21:41 -04:00
tccontre	09796e3f67	revil	2021-06-04 16:07:02 +02:00
mhaag-spl	cc40bf658c	SharpHound	2021-06-03 08:48:19 -06:00
Bhavin Patel	ece4317cc9	Merge branch 'develop' into xmrig	2021-05-20 11:15:23 -07:00