 pyth0n1c
|
02248e73fd
|
Branch was auto-updated.
|
2022-02-02 07:54:13 -08:00 |
|
|
Rod Soto
|
89cb0a782a
|
rod777
|
2022-02-02 07:53:42 -08:00 |
|
|
pyth0n1c
|
5e252c67b0
|
Branch was auto-updated.
|
2022-02-02 01:55:39 -08:00 |
|
|
P4T12ICK
|
5719edb467
|
Merge pull request #1985 from splunk/ssa_trouble_shooting
Fix detection BA Hiding Files And Directories With Attrib exe
|
2022-02-02 10:55:09 +01:00 |
|
|
P4T12ICK
|
634d28efe3
|
trouble shooting
|
2022-02-02 10:45:37 +01:00 |
|
|
P4T12ICK
|
8b93c99904
|
trouble shooting
|
2022-02-02 08:48:26 +01:00 |
|
|
mhaag-spl
|
e8dd9051bc
|
pkexec
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
|
2022-02-01 09:52:52 -07:00 |
|
|
research bot
|
e52d00b53d
|
updating docs and package bits [ci skip]
|
2022-01-31 20:04:12 +00:00 |
|
|
Bhavin Patel
|
5ee1f5b7f0
|
Merge pull request #1974 from splunk/ssa_dist
building SSA package
v3.34.1
|
2022-01-31 11:53:19 -08:00 |
|
|
patel-bhavin
|
c43646a827
|
building SSA package
|
2022-01-31 11:47:41 -08:00 |
|
|
Bhavin Patel
|
ff7f0dfad8
|
Merge pull request #1966 from splunk/reg_yml_analytics_updates_3
reg_yml_analytics_updates_3
|
2022-01-31 11:44:23 -08:00 |
|
|
pyth0n1c
|
59952091e3
|
Branch was auto-updated.
|
2022-01-31 11:29:54 -08:00 |
|
|
Bhavin Patel
|
43a1e7269c
|
Merge pull request #1963 from splunk/reg_yml_analytics_updates_2
reg_yml_analytics_updates_2
|
2022-01-31 11:29:33 -08:00 |
|
|
pyth0n1c
|
99ad78a9a8
|
Branch was auto-updated.
|
2022-01-31 11:24:12 -08:00 |
|
|
pyth0n1c
|
1144b3ce63
|
Branch was auto-updated.
|
2022-01-31 11:24:11 -08:00 |
|
|
Bhavin Patel
|
3cf35d037b
|
Merge pull request #1958 from splunk/reg_yml_analytics_updates
reg_yml_analytics_updates
|
2022-01-31 11:23:43 -08:00 |
|
|
pyth0n1c
|
f0c0612c0c
|
Branch was auto-updated.
|
2022-01-31 11:17:35 -08:00 |
|
|
pyth0n1c
|
b155ae76f1
|
Branch was auto-updated.
|
2022-01-31 11:17:34 -08:00 |
|
|
pyth0n1c
|
0a5a930d9e
|
Branch was auto-updated.
|
2022-01-31 11:17:33 -08:00 |
|
|
Bhavin Patel
|
0cd3274889
|
Merge pull request #1968 from thejud/add_required_tags
Add empty cist20 and nist tags to meet validation
|
2022-01-31 11:17:12 -08:00 |
|
|
Bhavin Patel
|
5eaad1d88b
|
Merge branch 'develop' into reg_yml_analytics_updates
|
2022-01-31 11:07:41 -08:00 |
|
|
Jud Dagnall
|
ff8cdbc089
|
Add empty cist20 and nist tags to meet validation
|
2022-01-28 18:51:51 -08:00 |
|
|
pyth0n1c
|
091a6c0864
|
Branch was auto-updated.
|
2022-01-28 13:28:20 -08:00 |
|
|
pyth0n1c
|
f048b156b8
|
Branch was auto-updated.
|
2022-01-28 13:28:19 -08:00 |
|
|
Bhavin Patel
|
14c145c133
|
Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
|
2022-01-28 13:27:59 -08:00 |
|
|
Michael Hart
|
0911746b03
|
Adding more detail to the description on how scoring works
|
2022-01-28 16:08:25 -05:00 |
|
|
Michael Haag
|
c5db61e52d
|
Quick fix
|
2022-01-28 12:49:03 -07:00 |
|
|
tccontre
|
bea2197612
|
Update disabling_defender_services.yml
|
2022-01-28 18:05:34 +01:00 |
|
|
tccontre
|
2e9afadffa
|
Update disabling_defender_services.yml
|
2022-01-28 11:46:49 +01:00 |
|
|
tccontre
|
648a9b7971
|
Update disabling_controlpanel.yml
|
2022-01-28 11:44:01 +01:00 |
|
|
tccontre
|
05a002fffa
|
Update disabling_cmd_application.yml
|
2022-01-28 11:43:24 +01:00 |
|
|
tccontre
|
d409e0483f
|
Update disable_windows_smartscreen_protection.yml
|
2022-01-28 11:42:02 +01:00 |
|
|
tccontre
|
4bf30817d1
|
Update disable_windows_app_hotkeys.yml
|
2022-01-28 11:36:03 +01:00 |
|
|
tccontre
|
46f2aeddfb
|
Update allow_inbound_traffic_by_firewall_rule_registry.yml
|
2022-01-28 11:04:23 +01:00 |
|
|
tccontre
|
76333b3b9a
|
Update hide_user_account_from_sign_in_screen.yml
|
2022-01-28 10:57:15 +01:00 |
|
|
tccontre
|
246d990aad
|
Update eventvwr_uac_bypass.yml
|
2022-01-28 10:56:54 +01:00 |
|
|
tccontre
|
93fff15d4f
|
Update etw_registry_disabled.yml
|
2022-01-28 10:56:29 +01:00 |
|
|
tccontre
|
f0c7fed9cb
|
Update enable_wdigest_uselogoncredential_registry.yml
|
2022-01-28 10:56:15 +01:00 |
|
|
tccontre
|
4e004a6731
|
Update enable_rdp_in_other_port_number.yml
|
2022-01-28 10:56:01 +01:00 |
|
|
tccontre
|
63d4b1d8a0
|
Update disabling_task_manager.yml
|
2022-01-28 10:55:47 +01:00 |
|
|
tccontre
|
62e6607f6d
|
Update disabling_systemrestore_in_registry.yml
|
2022-01-28 10:55:33 +01:00 |
|
|
tccontre
|
e2fcbaf8a1
|
Update disabling_norun_windows_app.yml
|
2022-01-28 10:55:20 +01:00 |
|
|
tccontre
|
2fde5a7c08
|
Update disabling_folderoptions_windows_feature.yml
|
2022-01-28 10:55:06 +01:00 |
|
|
tccontre
|
4fe7983931
|
Update disabling_defender_services.yml
|
2022-01-28 10:54:53 +01:00 |
|
|
tccontre
|
585ef9de39
|
reg_yml_analytics_updates_3
|
2022-01-28 10:00:46 +01:00 |
|
|
pyth0n1c
|
9f24af21e3
|
Branch was auto-updated.
|
2022-01-27 14:55:48 -08:00 |
|
|
Bhavin Patel
|
3efcb99124
|
Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
|
2022-01-27 14:55:25 -08:00 |
|
|
pyth0n1c
|
b331d100ec
|
Branch was auto-updated.
|
2022-01-27 14:51:56 -08:00 |
|
|
Bhavin Patel
|
7fd71050fe
|
Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
|
2022-01-27 14:51:23 -08:00 |
|
|
pyth0n1c
|
3d05f3f566
|
Branch was auto-updated.
|
2022-01-27 14:11:43 -08:00 |
|