 Michael Haag
|
097683ffbb
|
Update wmiprsve_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:07:35 -07:00 |
|
|
root
|
ba111107f8
|
Added detection testing service results inWindows Service Created Within Public Path
|
2021-11-24 15:24:21 +00:00 |
|
|
root
|
9f122d542c
|
Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn
|
2021-11-24 14:58:42 +00:00 |
|
|
mvelazco
|
42913444c4
|
update dataset location
|
2021-11-24 09:37:47 -05:00 |
|
|
mvelazco
|
46aa673605
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 21:04:10 -05:00 |
|
|
mvelazco
|
33e9597304
|
updating logic and adding datasets
|
2021-11-23 21:04:04 -05:00 |
|
|
root
|
9e165574c0
|
Added detection testing service results inWsmprovhost.exe LOLBAS Execution Process Spawn
|
2021-11-24 01:53:58 +00:00 |
|
|
mvelazco
|
eba7f33aa9
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 20:33:28 -05:00 |
|
|
mvelazco
|
ad273d4ca1
|
update datasets
|
2021-11-23 20:33:27 -05:00 |
|
|
Detection Testing Service
|
25a60dfdc7
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-24 00:03:26 +00:00 |
|
|
root
|
6c45a549e3
|
Added detection testing service results inWmiprsve.exe LOLBAS Execution Process Spawn
|
2021-11-24 00:03:25 +00:00 |
|
|
Detection Testing Service
|
2c6ae766cc
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 23:52:09 +00:00 |
|
|
root
|
e7ad40a54b
|
Added detection testing service results inMmc.exe LOLBAS Execution Process Spawn
|
2021-11-23 23:52:08 +00:00 |
|
|
mvelazco
|
2e86ded458
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 18:42:50 -05:00 |
|
|
mvelazco
|
c13de25f73
|
update dataset metadata
|
2021-11-23 18:42:48 -05:00 |
|
|
root
|
37f4a32647
|
Added detection testing service results inServices.exe LOLBAS Execution Process Spawn
|
2021-11-23 22:39:17 +00:00 |
|
|
mvelazco
|
c2fd0a4b29
|
adding dataset fields
|
2021-11-23 17:15:06 -05:00 |
|
|
mvelazco
|
190c0cba21
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 16:00:06 -05:00 |
|
|
mvelazco
|
5211a97f11
|
update detections
|
2021-11-23 16:00:04 -05:00 |
|
|
root
|
c8c731e449
|
Added detection testing service results inWindows Service Created With Suspicious Service Path
|
2021-11-23 19:20:48 +00:00 |
|
|
mvelazco
|
4c696f9ad8
|
updating detections
|
2021-11-23 14:01:28 -05:00 |
|
|
mvelazco
|
9b944b67a2
|
adding 4 new detections
|
2021-11-23 10:13:07 -05:00 |
|
|
mvelazco
|
f2a7006482
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-22 16:21:46 -05:00 |
|
|
mvelazco
|
8c2baf103e
|
creating an extra detection
|
2021-11-22 16:21:43 -05:00 |
|
|
Bhavin Patel
|
fe491600d5
|
Branch was auto-updated.
|
2021-11-22 02:53:45 -08:00 |
|
|
P4T12ICK
|
2ee09fbceb
|
Merge pull request #1836 from splunk/ssa_insider_secure_delete
ssa_sdelete
|
2021-11-22 11:53:20 +01:00 |
|
|
P4T12ICK
|
8b174b9967
|
small change
|
2021-11-22 11:07:10 +01:00 |
|
|
tccontre
|
45e691bd0d
|
ssa_sdelete
|
2021-11-22 10:39:45 +01:00 |
|
|
Bhavin Patel
|
07d7b120bf
|
Branch was auto-updated.
|
2021-11-22 01:30:02 -08:00 |
|
|
Bhavin Patel
|
4d5e291714
|
Branch was auto-updated.
|
2021-11-22 01:30:00 -08:00 |
|
|
P4T12ICK
|
ff4c8a27d5
|
Merge pull request #1840 from splunk/ssa_improved_testing_pipeline
Ssa improved testing pipeline
|
2021-11-22 10:29:41 +01:00 |
|
|
root
|
afc5bf9a9a
|
Added detection testing service results inImpacket Lateral Movement Commandline Parameters
|
2021-11-19 22:16:55 +00:00 |
|
|
mhaag-spl
|
d679eeef45
|
Update ssa___sdelete_application_execution.yml
|
2021-11-19 14:54:26 -07:00 |
|
|
mvelazco
|
6df7df2622
|
adding first detection
|
2021-11-19 16:40:04 -05:00 |
|
|
mhaag-spl
|
dab01c7d47
|
Update ssa___sdelete_application_execution.yml
|
2021-11-19 14:29:11 -07:00 |
|
|
Bhavin Patel
|
8bf462e1d5
|
Branch was auto-updated.
|
2021-11-19 10:07:57 -08:00 |
|
|
Bhavin Patel
|
c23dd9d42f
|
Branch was auto-updated.
|
2021-11-19 10:07:55 -08:00 |
|
|
pyth0n1c
|
8ef8da6d06
|
Merge pull request #1834 from splunk/TR-1085_LateralMovement_2
Lateral Movement Content Update #2
|
2021-11-19 10:07:34 -08:00 |
|
|
Bhavin Patel
|
9342a79271
|
Branch was auto-updated.
|
2021-11-19 10:01:25 -08:00 |
|
|
Bhavin Patel
|
92dbd495ed
|
Branch was auto-updated.
|
2021-11-19 10:01:24 -08:00 |
|
|
Bhavin Patel
|
568af8275c
|
Branch was auto-updated.
|
2021-11-19 10:01:15 -08:00 |
|
|
pyth0n1c
|
f123e73be6
|
Merge pull request #1800 from splunk/TR-1085_LateralMovement
Lateral Movement Content Update #1
|
2021-11-19 10:00:57 -08:00 |
|
|
Bhavin Patel
|
e94ed3f223
|
Branch was auto-updated.
|
2021-11-19 03:56:35 -08:00 |
|
|
Bhavin Patel
|
7f1521b24e
|
Branch was auto-updated.
|
2021-11-19 03:56:34 -08:00 |
|
|
Bhavin Patel
|
0d904638f7
|
Branch was auto-updated.
|
2021-11-19 03:56:26 -08:00 |
|
|
Bhavin Patel
|
63ea949fa9
|
Branch was auto-updated.
|
2021-11-19 03:56:24 -08:00 |
|
|
P4T12ICK
|
de15a819bb
|
Merge pull request #1842 from splunk/ssa_fix_datasets
fix broken dataset links
|
2021-11-19 12:56:04 +01:00 |
|
|
P4T12ICK
|
27d981717d
|
fix broken dataset links
|
2021-11-19 12:49:53 +01:00 |
|
|
P4T12ICK
|
04cbf7beaa
|
improved testing
|
2021-11-19 11:30:43 +01:00 |
|
|
P4T12ICK
|
7223d1167a
|
improved testing
|
2021-11-19 10:43:59 +01:00 |
|