Commit Graph

7770 Commits

Author SHA1 Message Date
mhaag-spl 15a86efb80 Update suspicious_event_log_service_behavior.yml 2021-06-22 14:24:22 -06:00
github-actions[bot] 30e4b35d56 Branch was auto-updated. 2021-06-22 20:00:53 +00:00
mvelazco 960a398f80 Merge pull request #1446 from splunk/deprecation_of_detections
Deprecation of detections
2021-06-22 16:00:35 -04:00
divious1 8c150335fd readding mitre lookup it was a mistake I left in here 2021-06-22 15:56:14 -04:00
github-actions[bot] 208fb06daa Branch was auto-updated. 2021-06-22 14:26:42 +00:00
github-actions[bot] 14980f46b5 Branch was auto-updated. 2021-06-22 14:26:32 +00:00
peter 8e6733e922 Merge pull request #1454 from splunk/ssa_remove_old_lolbas
Removing old, deprecated version of the parent-child-lolbas detection
2021-06-22 09:26:09 -05:00
peter-cg eeddaf1200 Removing old, deprecated version of the parent-child-lolbas detection 2021-06-22 09:23:48 -05:00
github-actions[bot] 0304f6dda9 Branch was auto-updated. 2021-06-22 02:30:41 +00:00
github-actions[bot] 35ac3c38a1 Branch was auto-updated. 2021-06-22 02:30:32 +00:00
peter 3008438d10 Merge pull request #1447 from splunk/TR-724_fixing_bodies_error
TR-723 fixing bodies error
2021-06-21 21:30:15 -05:00
mhaag-spl 4166bb3104 Update windows_event_log_cleared.yml 2021-06-21 16:15:10 -06:00
mhaag-spl b7e73f5f60 quick updates 2021-06-21 16:14:31 -06:00
mvelazco ee1362204b Merge branch 'TR-745_refactor' of github.com:splunk/security_content into TR-745_refactor 2021-06-21 17:54:47 -04:00
mvelazco 19ea75d969 adding references 2021-06-21 17:50:09 -04:00
mhaag-spl b3d2ddba58 Minor fixes 2021-06-21 15:47:47 -06:00
mvelazco e4f5a3894d fixing errors
fixing filter name
2021-06-21 17:10:54 -04:00
mvelazco 8d0b0caa91 Update suspicious_event_log_service_behavior.yml
updating filter name
2021-06-21 16:45:52 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
github-actions[bot] 193089f6c5 Branch was auto-updated. 2021-06-18 07:45:41 +00:00
github-actions[bot] 4debdfb17e Branch was auto-updated. 2021-06-18 07:45:39 +00:00
P4T12ICK 68ee41c11e Merge pull request #1423 from splunk/ssa_gitlabci_clear_old_pipelines
Clear out old CI pipelines
2021-06-18 09:45:23 +02:00
P4T12ICK be3519aeac small change to triiger ci 2021-06-18 09:19:02 +02:00
github-actions[bot] 7e83e6fd14 Branch was auto-updated. 2021-06-17 13:27:07 +00:00
github-actions[bot] 2d7679a2b5 Branch was auto-updated. 2021-06-17 13:27:06 +00:00
github-actions[bot] 817bee6359 Branch was auto-updated. 2021-06-17 13:27:01 +00:00
tccontre d67359635f Merge pull request #1440 from splunk/hpot_ttp
Hpot ttp
2021-06-17 15:26:40 +02:00
github-actions[bot] 8c3061f290 Branch was auto-updated. 2021-06-17 13:22:24 +00:00
github-actions[bot] 1a788a30b0 Branch was auto-updated. 2021-06-17 13:22:19 +00:00
github-actions[bot] 4bb5b1c8ad Branch was auto-updated. 2021-06-17 13:22:18 +00:00
github-actions[bot] 83bcadf468 Branch was auto-updated. 2021-06-17 13:22:14 +00:00
tccontre 882f1eafd0 Merge pull request #1436 from splunk/ransom_ttps
ransomware common TTPs
2021-06-17 15:21:56 +02:00
Jose Enrique Hernandez bfa0daabd4 fixe dv 2021-06-16 15:50:19 -04:00
divious1 d35abc5689 moved around location of label 2021-06-16 12:06:49 -04:00
divious1 3134df2380 added deprecated label as well as description annotation 2021-06-16 11:59:31 -04:00
divious1 06fbc3c476 Merge branch 'develop' into deprecation_of_detections 2021-06-16 10:42:00 -04:00
divious1 59ffaf8c25 adding deprecation to generate 2021-06-16 10:31:30 -04:00
tccontre a1b27f125f Delete allow_operation_with_consent_admin.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:22:00 +02:00
tccontre 9a25b289c3 Delete clear_unallocated_sector_using_cipher_app.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:41 +02:00
tccontre de20af3ac5 Delete permission_modification_using_takeown_app.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:28 +02:00
tccontre 150d8c9f34 Delete prevent_automatic_repair_mode_using_bcdedit.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:05 +02:00
tccontre 32defb377a Delete start_up_during_safe_mode_boot.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:20:51 +02:00
tccontre b198eb9a22 Delete start_up_during_safe_mode_boot.yml
un-intended files. this is already in rttp PR
2021-06-16 10:20:32 +02:00
tccontre 6a92e68a08 Delete prevent_automatic_repair_mode_using_bcdedit.yml
un-intended files. this is already in rttp PR
2021-06-16 10:20:17 +02:00
tccontre 75189e2b1d Delete permission_modification_using_takeown_app.yml
un-intended files. this is already in rttp PR
2021-06-16 10:19:57 +02:00
tccontre e9e5c446f4 Delete clear_unallocated_sector_using_cipher_app.yml
un-intended files. this is already in rttp PR
2021-06-16 10:19:39 +02:00
tccontre c7c2b94d37 Delete allow_operation_with_consent_admin.yml
un-intended files. this is already in rttp PR
2021-06-16 10:19:27 +02:00
tccontre 878bf692fa Delete disable_logs_using_wevtutil.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:13:51 +02:00
tccontre ff8878ce3d Delete disable_logs_using_wevtutil.yml
un-intended files to be included in this PR. this file is in rttp PR
2021-06-16 10:12:14 +02:00
Detection Testing Service 3381ce7205 Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp 2021-06-15 15:50:48 +00:00