 tccontre
|
261182ca93
|
Merge branch 'hpot_ttp' of github.com:splunk/security_content into hpot_ttp
|
2021-06-15 16:43:50 +02:00 |
|
|
tccontre
|
bed3227224
|
wild_check
|
2021-06-15 16:43:23 +02:00 |
|
|
github-actions[bot]
|
4292b82e6c
|
Branch was auto-updated.
|
2021-06-15 14:23:36 +00:00 |
|
|
P4T12ICK
|
ec1a205bb5
|
Merge pull request #1442 from splunk/data_exfil
data_exfil
|
2021-06-15 16:23:17 +02:00 |
|
|
P4T12ICK
|
62ce70ce18
|
Merge branch 'develop' into data_exfil
|
2021-06-15 16:18:22 +02:00 |
|
|
tccontre
|
197e73cd61
|
de
|
2021-06-15 15:51:08 +02:00 |
|
|
github-actions[bot]
|
90f9bfabcc
|
Branch was auto-updated.
|
2021-06-15 13:44:07 +00:00 |
|
|
mhart-splunk
|
6270837a4c
|
Excessive win temp detection (#1438)
Detects artifacts in windows event logs while meterpreter is operating on a remote host.
|
2021-06-15 09:43:48 -04:00 |
|
|
tccontre
|
9e009e50b7
|
data_exfil
|
2021-06-15 15:36:41 +02:00 |
|
|
github-actions[bot]
|
a856e9127a
|
Branch was auto-updated.
|
2021-06-14 15:38:16 +00:00 |
|
|
Jose Enrique Hernandez
|
c0b6f6bffe
|
Merge pull request #1407 from splunk/dependabot/pip/mysql-connector-python-8.0.25
Bump mysql-connector-python from 8.0.24 to 8.0.25
|
2021-06-14 11:37:50 -04:00 |
|
|
github-actions[bot]
|
b14a8ec28e
|
Branch was auto-updated.
|
2021-06-14 15:33:32 +00:00 |
|
|
github-actions[bot]
|
d94668d844
|
Branch was auto-updated.
|
2021-06-14 15:33:28 +00:00 |
|
|
Jose Enrique Hernandez
|
bfc4d1cd98
|
Merge pull request #1406 from splunk/dependabot/pip/ansible-3.4.0
Bump ansible from 3.1.0 to 3.4.0
|
2021-06-14 11:33:12 -04:00 |
|
|
github-actions[bot]
|
fff5b34889
|
Branch was auto-updated.
|
2021-06-14 15:29:05 +00:00 |
|
|
github-actions[bot]
|
9395db67bc
|
Branch was auto-updated.
|
2021-06-14 15:28:55 +00:00 |
|
|
github-actions[bot]
|
d26320f350
|
Branch was auto-updated.
|
2021-06-14 15:28:54 +00:00 |
|
|
Jose Enrique Hernandez
|
48ac32535e
|
Merge pull request #1403 from splunk/dependabot/pip/botocore-1.20.74
Bump botocore from 1.20.30 to 1.20.74
|
2021-06-14 11:28:35 -04:00 |
|
|
github-actions[bot]
|
33f326de2b
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
|
github-actions[bot]
|
bc0a1f1f9a
|
Branch was auto-updated.
|
2021-06-14 15:24:18 +00:00 |
|
|
github-actions[bot]
|
8d9c89ff00
|
Branch was auto-updated.
|
2021-06-14 15:24:17 +00:00 |
|
|
github-actions[bot]
|
1a1963ea02
|
Branch was auto-updated.
|
2021-06-14 15:24:10 +00:00 |
|
|
Jose Enrique Hernandez
|
585f87dbd8
|
Merge pull request #1402 from splunk/dependabot/pip/azure-mgmt-resource-17.0.0
Bump azure-mgmt-resource from 16.1.0 to 17.0.0
|
2021-06-14 11:23:51 -04:00 |
|
|
root
|
a292fe9789
|
Added detection testing service results inWMI Recon Running Process Or Services
|
2021-06-14 13:04:18 +00:00 |
|
|
root
|
4d748347be
|
Added detection testing service results inRecon Using WMI Class
|
2021-06-14 12:28:21 +00:00 |
|
|
root
|
ab69531f6f
|
Added detection testing service results inRecon AVProduct Through Pwh or WMI
|
2021-06-14 12:04:32 +00:00 |
|
|
root
|
219a73ae7c
|
Added detection testing service results inPowershell Using memory As Backing Store
|
2021-06-14 11:40:08 +00:00 |
|
|
root
|
aee919474e
|
Added detection testing service results inPowershell Processing Stream Of Data
|
2021-06-14 10:48:43 +00:00 |
|
|
root
|
c2ff77befb
|
Added detection testing service results inPowershell Creating Thread Mutex
|
2021-06-14 10:27:11 +00:00 |
|
|
tccontre
|
3b479c8af1
|
hpot
|
2021-06-14 11:55:13 +02:00 |
|
|
github-actions[bot]
|
f56fd2e97d
|
Branch was auto-updated.
|
2021-06-11 21:15:04 +00:00 |
|
|
github-actions[bot]
|
31c7049591
|
Branch was auto-updated.
|
2021-06-11 21:15:03 +00:00 |
|
|
github-actions[bot]
|
f8be256efe
|
Branch was auto-updated.
|
2021-06-11 21:15:02 +00:00 |
|
|
github-actions[bot]
|
cf09dfe776
|
Branch was auto-updated.
|
2021-06-11 21:15:01 +00:00 |
|
|
Bhavin Patel
|
5b94efe450
|
Merge pull request #1439 from splunk/updating-SAAWS-readme
Update README.md
|
2021-06-11 14:14:39 -07:00 |
|
|
Jose Enrique Hernandez
|
1a0d4ef4ad
|
Update README.md
|
2021-06-11 17:07:19 -04:00 |
|
|
Jose Enrique Hernandez
|
7febccc44a
|
Update README.md
|
2021-06-11 16:58:03 -04:00 |
|
|
research bot
|
67de895441
|
updating docs and package bits [ci skip]
|
2021-06-10 18:46:43 +00:00 |
|
|
github-actions[bot]
|
564b202cf9
|
Branch was auto-updated.
|
2021-06-10 17:32:09 +00:00 |
|
|
github-actions[bot]
|
a4a92872fd
|
Branch was auto-updated.
|
2021-06-10 17:32:08 +00:00 |
|
|
github-actions[bot]
|
8c0038c34a
|
Branch was auto-updated.
|
2021-06-10 17:32:07 +00:00 |
|
|
github-actions[bot]
|
65536c3fb5
|
Branch was auto-updated.
|
2021-06-10 17:32:07 +00:00 |
|
|
Bhavin Patel
|
5216a108ef
|
Merge pull request #1434 from splunk/excessive_taskhost_process_detection
Excessive taskhost process detection
v3.23.0
|
2021-06-10 10:31:41 -07:00 |
|
|
tccontre
|
ccf3080958
|
rttp
|
2021-06-10 15:18:16 +02:00 |
|
|
root
|
56a065240b
|
Added detection testing service results inExcessive number of taskhost processes
|
2021-06-09 20:58:34 +00:00 |
|
|
Michael Hart
|
990b3cd13a
|
Fixing analytic story yaml
|
2021-06-09 16:10:03 -04:00 |
|
|
Michael Hart
|
af4eff8cb5
|
Fixing file reference name
|
2021-06-09 14:57:17 -04:00 |
|
|
Michael Hart
|
7236281a42
|
Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection
|
2021-06-09 14:24:41 -04:00 |
|
|
Michael Hart
|
144bcaff80
|
Adding in test file
|
2021-06-09 14:20:03 -04:00 |
|
|
github-actions[bot]
|
689fcc5ad1
|
Branch was auto-updated.
|
2021-06-09 17:37:32 +00:00 |
|