Michael Haag
|
1c928ebffe
|
fixord
|
2022-09-08 10:27:54 -06:00 |
|
Michael Haag
|
6ea7428011
|
test test
|
2022-09-08 10:23:08 -06:00 |
|
pyth0n1c
|
0ecef3ae3d
|
Branch was auto-updated.
|
2022-09-06 14:07:49 -07:00 |
|
Rod Soto
|
73e84a326d
|
fixedpathlog
|
2022-09-06 13:40:08 -07:00 |
|
pyth0n1c
|
5946b4adfa
|
Branch was auto-updated.
|
2022-09-02 19:15:30 -04:00 |
|
pyth0n1c
|
5c4d054652
|
Update linux_kernel_module_enumeration.test.yml
Changing sourcetype from linux_sysmon --> sysmon_linux
|
2022-09-02 18:50:48 -04:00 |
|
Michael Haag
|
6287645f48
|
BA
|
2022-09-02 14:44:39 -06:00 |
|
Michael Haag
|
affae7229d
|
SSA all things
|
2022-09-01 15:02:44 -06:00 |
|
pyth0n1c
|
bd2d1515cb
|
Branch was auto-updated.
|
2022-08-26 10:01:42 -07:00 |
|
pyth0n1c
|
0ae64ea317
|
Branch was auto-updated.
|
2022-08-23 13:05:57 -07:00 |
|
pyth0n1c
|
4788d6c4e3
|
Branch was auto-updated.
|
2022-08-23 13:05:54 -07:00 |
|
pyth0n1c
|
7f5507a4c2
|
Branch was auto-updated.
|
2022-08-23 12:49:59 -07:00 |
|
pyth0n1c
|
80c9e04de8
|
Branch was auto-updated.
|
2022-08-23 12:49:55 -07:00 |
|
pyth0n1c
|
b1fc807d1c
|
Branch was auto-updated.
|
2022-08-23 12:49:52 -07:00 |
|
Michael Haag
|
8248278109
|
Remote Access Software
|
2022-08-22 21:57:53 -06:00 |
|
Michael Haag
|
13d400611a
|
LSA 🐍 SS
|
2022-08-22 21:16:12 -06:00 |
|
Michael Haag
|
fd88c88762
|
Hijack Libraries
|
2022-08-19 14:37:29 -06:00 |
|
d1vious
|
19f3a3b982
|
fixing on all places
|
2022-08-16 15:01:56 -04:00 |
|
mvelazco
|
b2332df9a0
|
Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover
|
2022-08-16 12:13:02 -04:00 |
|
mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|
pyth0n1c
|
8a72b522ac
|
Branch was auto-updated.
|
2022-08-16 08:40:57 -07:00 |
|
pyth0n1c
|
7d441871cb
|
Branch was auto-updated.
|
2022-08-16 08:40:56 -07:00 |
|
d1vious
|
b7e1a5fe94
|
adding new detections
|
2022-08-16 11:30:24 -04:00 |
|
gowthamarajr
|
6759feccd4
|
Add Azure AD Multi-Factor Authentication Disabled
|
2022-08-15 17:22:54 -04:00 |
|
pyth0n1c
|
31be7c1b3e
|
Branch was auto-updated.
|
2022-08-12 13:01:04 -07:00 |
|
gowthamarajr
|
ddf0db898d
|
Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301
|
2022-08-12 07:27:19 -04:00 |
|
gowthamarajr
|
bed8043fe8
|
Add 12 More detections (T1548)
|
2022-08-12 07:27:16 -04:00 |
|
pyth0n1c
|
084d711188
|
Branch was auto-updated.
|
2022-08-11 12:16:22 -07:00 |
|
pyth0n1c
|
9379ece487
|
Branch was auto-updated.
|
2022-08-11 12:16:14 -07:00 |
|
pyth0n1c
|
742d674a89
|
Branch was auto-updated.
|
2022-08-11 11:30:14 -07:00 |
|
pyth0n1c
|
2eb9bf40de
|
Branch was auto-updated.
|
2022-08-11 11:30:10 -07:00 |
|
pyth0n1c
|
0136017be3
|
Branch was auto-updated.
|
2022-08-11 11:30:09 -07:00 |
|
Bhavin Patel
|
74ece59913
|
Merge pull request #2309 from splunk/tatertots
Haag it!
|
2022-08-11 11:29:48 -07:00 |
|
patel-bhavin
|
8d25d3d27a
|
getpassworddata
|
2022-08-10 16:03:18 -07:00 |
|
mvelazco
|
5579f1ebdb
|
adding new detection
|
2022-08-10 13:34:18 -04:00 |
|
gowthamarajr
|
51693e4ba5
|
Add T1548.003
|
2022-08-10 06:58:54 -04:00 |
|
gowthamarajr
|
3cc956cd99
|
Add AWS Credential Access detections
|
2022-08-08 01:47:33 -04:00 |
|
gowthamarajr
|
29a61f8cb6
|
Add detections for Awk, Node, Docker Lotl
|
2022-08-02 16:23:31 -04:00 |
|
Michael Haag
|
83e57921ad
|
iscsi fix
|
2022-08-02 08:35:54 -06:00 |
|
tccontre
|
44517188c1
|
Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml
|
2022-08-01 14:22:35 +02:00 |
|
tccontre
|
7ef8d1dadf
|
Update windows_ingress_tool_transfer_using_explorer_exe.test.yml
|
2022-08-01 14:18:38 +02:00 |
|
tccontre
|
b67f2c69a1
|
dcrat-analytics3
|
2022-08-01 14:15:02 +02:00 |
|
Michael Haag
|
8bc3086675
|
iscsicpl
|
2022-07-29 17:39:55 -06:00 |
|
pyth0n1c
|
9b9ee9b2bf
|
Branch was auto-updated.
|
2022-07-29 15:44:01 -07:00 |
|
Michael Haag
|
8ad83a0b5f
|
Haag It
Linux Curl Upload File
Linux Ingress Tool Transfer Hunting
Linux Ingress Tool Transfer with Curl
Linux Proxy Socks Curl
|
2022-07-29 11:17:19 -06:00 |
|
tccontre
|
bcb5aab4ee
|
dcrat-analytics3
|
2022-07-29 10:06:40 +02:00 |
|
pyth0n1c
|
faf01969d7
|
Branch was auto-updated.
|
2022-07-28 13:50:30 -07:00 |
|
pyth0n1c
|
d963ff033c
|
Branch was auto-updated.
|
2022-07-28 13:47:24 -07:00 |
|
pyth0n1c
|
b3c8645b06
|
Branch was auto-updated.
|
2022-07-28 13:47:21 -07:00 |
|
pyth0n1c
|
319530efa2
|
Branch was auto-updated.
|
2022-07-28 13:11:04 -07:00 |
|