Commit Graph

13289 Commits

Author SHA1 Message Date
tccontre 250ed063d4 Update disable_amsi_through_registry.yml 2022-01-26 11:25:31 +01:00
tccontre abc1202e26 Update allow_operation_with_consent_admin.yml 2022-01-26 11:25:19 +01:00
tccontre ddc14a55d0 Update allow_inbound_traffic_by_firewall_rule_registry.yml 2022-01-26 11:25:04 +01:00
tccontre 34556d7e86 Update add_defaultuser_and_password_in_registry.yml 2022-01-26 11:24:53 +01:00
tccontre 272d28f5de Update active_setup_registry_autostart.yml 2022-01-26 11:24:38 +01:00
tccontre 626f16dada Update disable_defender_enhanced_notification.yml 2022-01-26 11:23:42 +01:00
tccontre d133a6b36d Update disable_defender_blockatfirstseen_feature.yml 2022-01-26 11:23:31 +01:00
tccontre c7d6287be9 Update disable_defender_antivirus_registry.yml 2022-01-26 11:23:19 +01:00
tccontre 441ae1b3a8 Update disable_amsi_through_registry.yml 2022-01-26 11:23:08 +01:00
tccontre 58369314a9 Update allow_operation_with_consent_admin.yml 2022-01-26 11:22:55 +01:00
tccontre 5de9c40af1 Update allow_inbound_traffic_by_firewall_rule_registry.yml 2022-01-26 11:22:44 +01:00
tccontre 941c3e4924 Update add_defaultuser_and_password_in_registry.yml 2022-01-26 11:22:32 +01:00
tccontre ada0fe5bf3 Update active_setup_registry_autostart.yml 2022-01-26 11:22:20 +01:00
tccontre 7159436577 reg_yml_analytics_updates 2022-01-26 11:20:07 +01:00
research bot e91c2b737d updating docs and package bits [ci skip] 2022-01-25 02:37:48 +00:00
pyth0n1c d1dcbfd629 Merge pull request #1873 from splunk/nixpost
Nixpost - following test shows success:
https://github.com/splunk/security_content/runs/4888172812?check_suite_focus=true
2022-01-24 10:50:37 -08:00
pyth0n1c 53ca345c06 Branch was auto-updated. 2022-01-24 10:40:46 -08:00
Michael Haag 2a9b3648d2 Merge pull request #1946 from splunk/WhisperGateIsOpen
WhisperGateIsOpen
2022-01-24 11:40:18 -07:00
mvelazco 321fd725f1 minor changes 2022-01-24 13:23:11 -05:00
Michael Haag fbbaef0c99 Quick fixes 2022-01-24 07:33:36 -07:00
root 8537e07fee Added detection testing service results inExcessive File Deletion In WinDefender Folder 2022-01-24 09:29:59 +00:00
root 83e24a88e9 Added detection testing service results inPing Sleep Batch Command 2022-01-24 09:12:02 +00:00
root 49f5de9836 Added detection testing service results inPowershell Remove Windows Defender Directory 2022-01-24 08:45:36 +00:00
root 99462820e1 Added detection testing service results inSuspicious Process With Discord DNS Query 2022-01-24 08:27:32 +00:00
research bot 23a0acc37d updating docs and package bits [ci skip] 2022-01-21 21:02:48 +00:00
pyth0n1c 9f191dee05 Branch was auto-updated. 2022-01-21 10:58:42 -08:00
pyth0n1c e7deccdf27 Branch was auto-updated. 2022-01-21 10:58:37 -08:00
Bhavin Patel 63155722c0 Merge pull request #1952 from splunk/fixing_badge
Update README.md
2022-01-21 10:58:21 -08:00
Jose Enrique Hernandez 264294b2c8 Update README.md 2022-01-21 13:56:55 -05:00
pyth0n1c 4fba87dec6 Branch was auto-updated. 2022-01-21 09:35:11 -08:00
pyth0n1c 82ef50c5ab Branch was auto-updated. 2022-01-21 09:35:03 -08:00
Jose Enrique Hernandez 80ce7adc4e Merge pull request #1951 from splunk/move_comlpex_detections_to_experimental
moving to match what prod should have
2022-01-21 12:34:42 -05:00
d1vious 72d33b23ac moving to match what prod should have 2022-01-21 12:29:13 -05:00
tccontre 4752ceea0f WhisperGateIsOpen 2022-01-21 10:46:28 +01:00
tccontre 2b4f34956d WhisperGateIsOpen 2022-01-21 10:45:00 +01:00
tccontre 742441eb3d Update ping_sleep_batch_command.yml 2022-01-21 09:45:25 +01:00
tccontre bc0e4454c2 Update suspicious_process_file_path.yml 2022-01-21 09:38:21 +01:00
tccontre eef369a633 Update wscript_or_cscript_suspicious_child_process.yml 2022-01-21 09:37:16 +01:00
tccontre 044b81b922 Update add_or_set_windows_defender_exclusion.yml 2022-01-21 09:34:41 +01:00
pyth0n1c 0621c82ddd Branch was auto-updated. 2022-01-20 18:20:03 -08:00
pyth0n1c 693ba420b5 Branch was auto-updated. 2022-01-20 18:19:59 -08:00
mhart-splunk 72d48b26a8 Add mlmodel to lookups packaging (#1948)
Adding support for packaging mlmodel lookup files in github actions
2022-01-20 21:18:54 -05:00
pyth0n1c d8cb2d7a83 Branch was auto-updated. 2022-01-20 16:07:15 -08:00
pyth0n1c a8046a9927 Branch was auto-updated. 2022-01-20 16:07:11 -08:00
Bhavin Patel de74520ad7 Merge pull request #1950 from splunk/ransomware_update
ransomware update
2022-01-20 16:06:49 -08:00
patel-bhavin 6d13de615c duplicate 2022-01-20 15:50:28 -08:00
pyth0n1c 630f582ffc Branch was auto-updated. 2022-01-20 13:07:09 -08:00
pyth0n1c 280b71bdb2 Branch was auto-updated. 2022-01-20 13:07:04 -08:00
Jose Enrique Hernandez 69b262d1ab Merge pull request #1938 from splunk/update_ssa_ymls
adding risk_severity to SSA ymls
2022-01-20 16:06:45 -05:00
patel-bhavin 4d7d7ef645 wrong file 2022-01-20 12:55:07 -08:00