 pyth0n1c
|
0a5a930d9e
|
Branch was auto-updated.
|
2022-01-31 11:17:33 -08:00 |
|
|
Bhavin Patel
|
0cd3274889
|
Merge pull request #1968 from thejud/add_required_tags
Add empty cist20 and nist tags to meet validation
|
2022-01-31 11:17:12 -08:00 |
|
|
Bhavin Patel
|
5eaad1d88b
|
Merge branch 'develop' into reg_yml_analytics_updates
|
2022-01-31 11:07:41 -08:00 |
|
|
Jud Dagnall
|
ff8cdbc089
|
Add empty cist20 and nist tags to meet validation
|
2022-01-28 18:51:51 -08:00 |
|
|
Bhavin Patel
|
14c145c133
|
Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
|
2022-01-28 13:27:59 -08:00 |
|
|
Michael Hart
|
0911746b03
|
Adding more detail to the description on how scoring works
|
2022-01-28 16:08:25 -05:00 |
|
|
Michael Haag
|
c5db61e52d
|
Quick fix
|
2022-01-28 12:49:03 -07:00 |
|
|
tccontre
|
46f2aeddfb
|
Update allow_inbound_traffic_by_firewall_rule_registry.yml
|
2022-01-28 11:04:23 +01:00 |
|
|
Bhavin Patel
|
3efcb99124
|
Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
|
2022-01-27 14:55:25 -08:00 |
|
|
Bhavin Patel
|
7fd71050fe
|
Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
|
2022-01-27 14:51:23 -08:00 |
|
|
pyth0n1c
|
3d05f3f566
|
Branch was auto-updated.
|
2022-01-27 14:11:43 -08:00 |
|
|
Bhavin Patel
|
1975ff75a2
|
Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
|
2022-01-27 14:11:19 -08:00 |
|
|
pyth0n1c
|
22f959a762
|
Branch was auto-updated.
|
2022-01-27 13:40:46 -08:00 |
|
|
Bhavin Patel
|
e96516be57
|
Merge pull request #1965 from splunk/haagupdate
Cred Dump Update
|
2022-01-27 13:40:27 -08:00 |
|
|
mhaag-spl
|
7d9e146f76
|
Cred Dump Update
Based on feedback, updating analytic.
|
2022-01-27 13:17:30 -07:00 |
|
|
pyth0n1c
|
8078323a91
|
Branch was auto-updated.
|
2022-01-27 12:06:13 -08:00 |
|
|
Michael Haag
|
802b96ef3a
|
Merge pull request #1960 from splunk/TR-1547
TR-1547 :Customer bug
|
2022-01-27 13:05:27 -07:00 |
|
|
Michael Hart
|
f71e3fe202
|
Adding references
|
2022-01-27 13:13:42 -05:00 |
|
|
Michael Hart
|
b80af6f151
|
Editing the macro to put the apply statement into the search query so that it's clear that MLTK is being used
|
2022-01-26 22:38:13 -05:00 |
|
|
patel-bhavin
|
fe5db9e78e
|
adding lookup files
|
2022-01-26 15:34:10 -08:00 |
|
|
research bot
|
55a62e8365
|
updating docs and package bits [ci skip]
|
2022-01-26 22:55:37 +00:00 |
|
|
pyth0n1c
|
0f3cc3e4f7
|
Branch was auto-updated.
|
2022-01-26 14:10:09 -08:00 |
|
|
Michael Haag
|
3058c7fa57
|
Merge pull request #1959 from splunk/remove_linux_post
Remove linux post exploitation story
v3.34.0
|
2022-01-26 15:09:43 -07:00 |
|
|
patel-bhavin
|
341385a97c
|
wrong file
|
2022-01-26 13:54:01 -08:00 |
|
|
patel-bhavin
|
45c4a7b600
|
remove files that are already merged
|
2022-01-26 13:51:51 -08:00 |
|
|
patel-bhavin
|
df46c560d6
|
Merge branch 'develop' of github.com:splunk/security_content into develop
|
2022-01-26 13:45:21 -08:00 |
|
|
pyth0n1c
|
e737a019b9
|
Branch was auto-updated.
|
2022-01-26 13:36:12 -08:00 |
|
|
Bhavin Patel
|
67ba0750ef
|
Merge pull request #1945 from splunk/whisper
WhisperTangoFoxtrot
|
2022-01-26 13:35:35 -08:00 |
|
|
mhaag-spl
|
8cb1e0abe0
|
dataset again
|
2022-01-26 13:50:32 -07:00 |
|
|
mhaag-spl
|
bed6990986
|
datasets
|
2022-01-26 13:40:09 -07:00 |
|
|
Michael Haag
|
67e413d0e0
|
Update __mlspl_unusual_commandline_detection.yml
|
2022-01-26 11:26:25 -07:00 |
|
|
tccontre
|
ec66a35885
|
Update time_provider_persistence_registry.yml
|
2022-01-26 11:42:05 +01:00 |
|
|
tccontre
|
c792da85e8
|
Update start_up_during_safe_mode_boot.yml
|
2022-01-26 11:41:47 +01:00 |
|
|
tccontre
|
28342ca7dc
|
Update remcos_client_registry_install_entry.yml
|
2022-01-26 11:41:25 +01:00 |
|
|
tccontre
|
708552a3d0
|
Update registry_keys_used_for_privilege_escalation.yml
|
2022-01-26 11:41:06 +01:00 |
|
|
tccontre
|
bcdf46a631
|
Update registry_keys_used_for_persistence.yml
|
2022-01-26 11:40:46 +01:00 |
|
|
tccontre
|
3bcf548b83
|
Update disable_defender_submit_samples_consent_feature.yml
|
2022-01-26 11:40:35 +01:00 |
|
|
tccontre
|
eacd0a9534
|
Update disable_defender_spynet_reporting.yml
|
2022-01-26 11:40:18 +01:00 |
|
|
tccontre
|
1db596ff6c
|
Update disable_defender_mpengine_registry.yml
|
2022-01-26 11:40:07 +01:00 |
|
|
tccontre
|
abefdaef06
|
Update disable_defender_enhanced_notification.yml
|
2022-01-26 11:39:48 +01:00 |
|
|
tccontre
|
c69a14fb35
|
Update disable_defender_blockatfirstseen_feature.yml
|
2022-01-26 11:39:37 +01:00 |
|
|
tccontre
|
644644675b
|
Update disable_defender_antivirus_registry.yml
|
2022-01-26 11:39:27 +01:00 |
|
|
tccontre
|
4decf3f72b
|
Update disable_amsi_through_registry.yml
|
2022-01-26 11:39:08 +01:00 |
|
|
tccontre
|
0d575b49f9
|
Update allow_operation_with_consent_admin.yml
|
2022-01-26 11:38:57 +01:00 |
|
|
tccontre
|
183e8cdd0d
|
Update allow_inbound_traffic_by_firewall_rule_registry.yml
|
2022-01-26 11:38:47 +01:00 |
|
|
tccontre
|
8a5cd4b7c8
|
Update add_defaultuser_and_password_in_registry.yml
|
2022-01-26 11:38:33 +01:00 |
|
|
tccontre
|
11efabfcc7
|
Update active_setup_registry_autostart.yml
|
2022-01-26 11:38:21 +01:00 |
|
|
tccontre
|
fda14b6eff
|
Update time_provider_persistence_registry.yml
|
2022-01-26 11:37:52 +01:00 |
|
|
tccontre
|
21e55e786f
|
Update start_up_during_safe_mode_boot.yml
|
2022-01-26 11:37:34 +01:00 |
|
|
tccontre
|
3fb82f029d
|
Update revil_registry_entry.yml
|
2022-01-26 11:37:21 +01:00 |
|