Bhavin Patel
|
02967574c4
|
Merge pull request #3329 from splunk/inspect_stacktype
upating appinspect command
|
2025-02-12 16:04:46 -08:00 |
|
Bhavin Patel
|
c124468ab7
|
Merge branch 'develop' into inspect_stacktype
|
2025-02-12 15:53:48 -08:00 |
|
research-bot
|
903bfe6de5
|
upating appinspect command
|
2025-02-12 15:41:03 -08:00 |
|
Bhavin Patel
|
3aef81e0e1
|
Merge pull request #3327 from splunk/slack_change
Slack link change
|
2025-02-12 12:41:32 -08:00 |
|
Lou Stella
|
c0a5ff84bd
|
Merge branch 'develop' into slack_change
|
2025-02-12 12:33:14 -06:00 |
|
ljstella
|
529121c01d
|
mend
|
2025-02-12 12:32:33 -06:00 |
|
ljstella
|
19242f51b9
|
Reword README
|
2025-02-12 12:31:34 -06:00 |
|
ljstella
|
0954e0c1a0
|
Slack link change
|
2025-02-12 12:08:17 -06:00 |
|
Bhavin Patel
|
5cabf43635
|
Merge pull request #3275 from splunk/rdp_brute
RDP bruteforce - production!
|
2025-02-11 10:27:04 -08:00 |
|
Bhavin Patel
|
471b49044f
|
version
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:05:52 -08:00 |
|
Bhavin Patel
|
a7cc4a8602
|
Merge branch 'develop' into rdp_brute
|
2025-02-11 10:04:33 -08:00 |
|
Bhavin Patel
|
15d12b81ee
|
Update detections/network/windows_remote_desktop_network_bruteforce_attempt.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:04:24 -08:00 |
|
Bhavin Patel
|
8e0c230a81
|
Update detections/deprecated/remote_desktop_network_bruteforce.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:03:58 -08:00 |
|
Bhavin Patel
|
59b99a0974
|
Merge pull request #3280 from nterl0k/nterl0k-t1114.003-o365-transport-rule-change
Nterl0k - T1114.003 O365 Transport Rule Changed
|
2025-02-11 08:59:31 -08:00 |
|
Bhavin Patel
|
f3e0d875e0
|
Merge branch 'develop' into nterl0k-t1114.003-o365-transport-rule-change
|
2025-02-11 08:42:28 -08:00 |
|
Bhavin Patel
|
25af0925e6
|
rba message
|
2025-02-11 08:41:18 -08:00 |
|
Bhavin Patel
|
56c4d19ea1
|
Merge pull request #3291 from splunk/analytics_enhancement
analytics_enhancement
|
2025-02-10 14:22:26 -08:00 |
|
Bhavin Patel
|
0468dff0a3
|
Merge branch 'develop' into analytics_enhancement
|
2025-02-10 14:02:47 -08:00 |
|
research-bot
|
15ab58b798
|
updating descirption
|
2025-02-10 14:02:05 -08:00 |
|
tccontre
|
b09110908d
|
analytics_enhancement
|
2025-02-10 09:43:20 +01:00 |
|
tccontre
|
51ae906f15
|
analytics_enhancement
|
2025-02-10 09:39:53 +01:00 |
|
tccontre
|
67844bec4e
|
analytics_enhancement
|
2025-02-10 09:36:32 +01:00 |
|
Bhavin Patel
|
9dc252d5bb
|
Merge pull request #3272 from nterl0k/nterl0k-t1213.002-sus-sharepoint-search
Nterl0k - T1213.002 Sus SharePoint Search
|
2025-02-07 10:32:38 -08:00 |
|
Bhavin Patel
|
5ee9bf7d69
|
Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search
|
2025-02-07 10:16:55 -08:00 |
|
tccontre
|
1ed454b5bc
|
analytics_enhancement
|
2025-02-07 09:56:32 +01:00 |
|
tccontre
|
153871c33f
|
analytics_enhancement
|
2025-02-07 09:53:03 +01:00 |
|
tccontre
|
f33a18e9cf
|
analytics_enhancement
|
2025-02-07 09:49:06 +01:00 |
|
Bhavin Patel
|
3eaad9a5cd
|
Merge pull request #3312 from nterl0k/nterl0k-rmm-story-update-1
Nterl0k - RMM Story and Detection Update, Again
|
2025-02-06 12:51:34 -08:00 |
|
Br3akp0int
|
abd24d63bc
|
Update windows_security_and_backup_services_stop.yml
|
2025-02-06 18:59:01 +01:00 |
|
Br3akp0int
|
636e63d492
|
Update windows_driver_load_non_standard_path.yml
|
2025-02-06 17:42:14 +01:00 |
|
Br3akp0int
|
f97787306f
|
Update suspicious_driver_loaded_path.yml
|
2025-02-06 17:02:59 +01:00 |
|
Br3akp0int
|
2f48e04006
|
Merge branch 'develop' into analytics_enhancement
|
2025-02-06 16:58:21 +01:00 |
|
Steven Dick
|
9658514c13
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:24:08 -05:00 |
|
Steven Dick
|
30edc65d04
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:18:27 -05:00 |
|
Steven Dick
|
911ebe61fd
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:18:05 -05:00 |
|
Steven Dick
|
ef5eca5bd1
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 08:07:31 -05:00 |
|
Steven Dick
|
f5160eba6f
|
Update detect_remote_access_software_usage_traffic.yml
|
2025-02-06 08:06:29 -05:00 |
|
Steven Dick
|
8d3da80557
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 08:05:27 -05:00 |
|
Steven Dick
|
41c92476b9
|
Update detect_remote_access_software_usage_url.yml
|
2025-02-06 08:04:38 -05:00 |
|
Steven Dick
|
0885f557bb
|
Update detect_remote_access_software_usage_file.yml
|
2025-02-06 08:03:56 -05:00 |
|
Steven Dick
|
f4a78d9f60
|
Update detect_remote_access_software_usage_fileinfo.yml
|
2025-02-06 08:03:25 -05:00 |
|
Steven Dick
|
b85aacf75f
|
Update detect_remote_access_software_usage_registry.yml
|
2025-02-06 08:02:38 -05:00 |
|
Steven Dick
|
778d7fa7cd
|
Update detect_remote_access_software_usage_process.yml
|
2025-02-06 08:01:53 -05:00 |
|
Steven Dick
|
38af78103f
|
Update detect_remote_access_software_usage_fileinfo.yml
|
2025-02-06 08:00:27 -05:00 |
|
Steven Dick
|
dea4448a4f
|
Update detect_remote_access_software_usage_file.yml
|
2025-02-06 07:58:47 -05:00 |
|
Steven Dick
|
7773664924
|
Update detect_remote_access_software_usage_url.yml
|
2025-02-06 07:57:46 -05:00 |
|
Steven Dick
|
2447329ea9
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 07:56:12 -05:00 |
|
Steven Dick
|
db40375a6b
|
Update detect_remote_access_software_usage_traffic.yml
|
2025-02-06 07:55:50 -05:00 |
|
Steven Dick
|
8b0bf13a10
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 07:53:56 -05:00 |
|
Steven Dick
|
d73c82d75f
|
Add files via upload
|
2025-02-06 07:53:20 -05:00 |
|