Commit Graph

3697 Commits

Author SHA1 Message Date
P4T12ICK 04e72ce0f2 Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two 2020-12-09 12:01:00 +01:00
P4T12ICK 132f536d44 new test file 2020-12-09 12:00:49 +01:00
root f14305b7f0 Added detection testing service results inAttempt To Set Default PowerShell Execution Policy To Unrestricted or Bypass 2020-12-09 09:18:47 +00:00
P4T12ICK b85dd98c8a Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two 2020-12-09 10:00:41 +01:00
P4T12ICK 442edba8d8 new attack data 2020-12-09 10:00:12 +01:00
Detection Testing Service a926dd52bb Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 15:11:33 +00:00
root 12ac913b13 Added detection testing service results inSuspicious LNK file launching a process 2020-12-08 15:11:32 +00:00
Detection Testing Service 6c8a8172a8 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 14:58:23 +00:00
root 0838a2835d Added detection testing service results inWMI Permanent Event Subscription - Sysmon 2020-12-08 14:58:22 +00:00
P4T12ICK 8de0985548 new test file 2020-12-08 15:55:35 +01:00
P4T12ICK 9a77cf6057 new test file 2020-12-08 15:43:25 +01:00
P4T12ICK 8651a35dce Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two 2020-12-08 15:17:14 +01:00
P4T12ICK 23ac763f02 new test file 2020-12-08 15:17:01 +01:00
root 5bb3f16aa5 Added detection testing service results inUSN Journal Deletion 2020-12-08 13:34:34 +00:00
P4T12ICK 3b411763d3 new test file 2020-12-08 14:18:59 +01:00
P4T12ICK dd3e31cd44 new test file 2020-12-08 14:18:08 +01:00
root f020f30c5e Added detection testing service results inUnusually Long Command Line 2020-12-08 13:17:15 +00:00
P4T12ICK 268ba8ad21 new test file 2020-12-08 14:00:25 +01:00
Detection Testing Service aea4ee11b3 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 12:46:08 +00:00
root d52882f2c3 Added detection testing service results inSystem Processes Run From Unexpected Locations 2020-12-08 12:46:06 +00:00
P4T12ICK b00298de86 new test file 2020-12-08 13:38:41 +01:00
P4T12ICK b789637035 new test file 2020-12-08 13:27:58 +01:00
root 99aa182a5a Added detection testing service results inSuspicious writes to windows Recycle Bin 2020-12-08 11:06:38 +00:00
P4T12ICK 3d2776df2c Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two 2020-12-08 11:48:13 +01:00
P4T12ICK fb36b0d93a new test file 2020-12-08 11:47:59 +01:00
root 499da30671 Added detection testing service results inSuspicious File Write 2020-12-08 10:37:22 +00:00
P4T12ICK 466735ac5a new test file 2020-12-08 11:19:49 +01:00
Detection Testing Service 235cf9a5b5 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 09:28:47 +00:00
root ee4a9ae5f5 Added detection testing service results inSingle Letter Process On Endpoint 2020-12-08 09:28:45 +00:00
Detection Testing Service 552760a579 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 09:18:08 +00:00
root c442ea740a Added detection testing service results inShim Database File Creation 2020-12-08 09:18:06 +00:00
P4T12ICK 12124c6280 Merge branch 'detection_testing_part_two' of github.com:splunk/security-content into detection_testing_part_two 2020-12-08 10:12:39 +01:00
P4T12ICK 927e09bf1f new test file 2020-12-08 10:12:15 +01:00
Detection Testing Service fe3e942301 Merge branch 'detection_testing_part_two' of https://github.com/splunk/security-content into detection_testing_part_two 2020-12-08 09:09:38 +00:00
root 0b74cc710d Added detection testing service results inSchtasks used for forcing a reboot 2020-12-08 09:09:37 +00:00
P4T12ICK 059949037c test detection 2020-12-08 10:02:38 +01:00
root e1518258d6 Added detection testing service results inScript Execution via WMI 2020-12-07 18:00:12 +00:00
P4T12ICK 3c4bcbece1 small change 2020-12-07 18:40:17 +01:00
P4T12ICK a86b7a5c81 Merge pull request #992 from splunk/update_new_attack_data_project
Update new attack data project
2020-12-07 18:23:27 +01:00
P4T12ICK 68c8baea92 Merge branch 'develop' into update_new_attack_data_project 2020-12-07 18:07:27 +01:00
root 5dad0fa5cf Added detection testing service results inSchtasks scheduling job on remote system 2020-12-07 14:54:00 +00:00
dependabot[bot] d87959208c Merge pull request #996 from splunk/dependabot/pip/virtualenv-20.2.2 2020-12-07 14:51:51 +00:00
dependabot[bot] eb30127527 Bump virtualenv from 20.2.1 to 20.2.2
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.2.1 to 20.2.2.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.2.1...20.2.2)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-07 14:45:53 +00:00
dependabot[bot] 4c4467c840 Merge pull request #997 from splunk/dependabot/pip/botocore-1.19.30 2020-12-07 14:44:59 +00:00
dependabot[bot] 3f640840e4 Bump botocore from 1.19.29 to 1.19.30
Bumps [botocore](https://github.com/boto/botocore) from 1.19.29 to 1.19.30.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.29...1.19.30)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-07 14:40:51 +00:00
dependabot[bot] 8a353d8920 Merge pull request #995 from splunk/dependabot/pip/boto3-1.16.30 2020-12-07 14:40:20 +00:00
P4T12ICK 9a0bd3beef test file 2020-12-07 15:37:28 +01:00
dependabot[bot] d72bb08f98 Bump boto3 from 1.16.29 to 1.16.30
Bumps [boto3](https://github.com/boto/boto3) from 1.16.29 to 1.16.30.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.29...1.16.30)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-07 14:03:12 +00:00
P4T12ICK 3fc88e1dc4 new test file 2020-12-07 14:21:52 +01:00
P4T12ICK 7d062e4d9f new test file 2020-12-07 14:18:07 +01:00