Commit Graph

21286 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 28179fa009 Branch was auto-updated. 2023-06-22 13:13:44 -07:00
Bhavin Patel 3c5c5ad3ec Merge pull request #2732 from splunk/delete_deprecated_kubernetes_detection
Delete deprecated detection
2023-06-22 13:11:37 -07:00
srv-rr-gh-researchbt e31e957e4b Branch was auto-updated. 2023-06-22 13:10:54 -07:00
srv-rr-gh-researchbt 7560ee99f4 Branch was auto-updated. 2023-06-22 13:10:52 -07:00
Bhavin Patel ae662992ef Merge pull request #2722 from splunk/pows
Update powershell_4104_hunting.yml
2023-06-22 13:10:21 -07:00
srv-rr-gh-researchbt ec76b3139b Branch was auto-updated. 2023-06-22 12:03:34 -07:00
srv-rr-gh-researchbt 7122054234 Branch was auto-updated. 2023-06-22 12:03:30 -07:00
srv-rr-gh-researchbt 844c840f37 Branch was auto-updated. 2023-06-22 12:03:29 -07:00
research bot 563df5b0cd Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-06-22 19:03:00 +00:00
srv-rr-gh-researchbt da9e33c6a6 Branch was auto-updated. 2023-06-22 11:42:32 -07:00
srv-rr-gh-researchbt 31c64f1c36 Branch was auto-updated. 2023-06-22 11:42:30 -07:00
srv-rr-gh-researchbt 4c0747534d Branch was auto-updated. 2023-06-22 11:42:29 -07:00
Bhavin Patel f55a8b4fb7 Merge pull request #2735 from splunk/fix_ba_detection
Improved BA detection
v4.5.1
2023-06-22 11:42:00 -07:00
tccontre 9e44ed00b3 Update windows_files_and_dirs_access_rights_modification_via_icacls.yml 2023-06-22 14:55:59 +02:00
tccontre f38daa7919 Update windows_files_and_dirs_access_rights_modification_via_icacls.yml 2023-06-22 14:55:45 +02:00
tccontre f75acdb416 Update windows_credentials_from_password_stores_chrome_login_data_access.yml 2023-06-22 14:54:35 +02:00
tccontre f292c7b09c Update windows_credentials_from_password_stores_chrome_localstate_access.yml 2023-06-22 14:53:17 +02:00
tccontre 2d3e149641 Update windows_credentials_from_password_stores_chrome_extension_access.yml 2023-06-22 14:52:11 +02:00
tccontre aba4d78285 Update suspicious_process_file_path.yml 2023-06-22 14:41:28 +02:00
tccontre a26b5e40c9 Update suspicious_process_file_path.yml 2023-06-22 14:40:42 +02:00
tccontre 5123f93811 Update scheduled_task_deleted_or_created_via_cmd.yml 2023-06-22 14:30:01 +02:00
tccontre f3ae3584fa Update registry_keys_used_for_persistence.yml 2023-06-22 14:28:35 +02:00
tccontre 50dbd4be15 Update icacls_grant_command.yml 2023-06-22 14:26:43 +02:00
tccontre e40ab340d9 Update icacls_deny_command.yml 2023-06-22 14:24:28 +02:00
tccontre 76fa90dd68 Update executables_or_script_creation_in_suspicious_path.yml 2023-06-22 14:22:01 +02:00
P4T12ICK 903466b1a8 Improved BA detection 2023-06-22 13:26:40 +02:00
srv-rr-gh-researchbt 9d7553a3b9 Branch was auto-updated. 2023-06-21 16:41:04 -07:00
srv-rr-gh-researchbt 5323d63b1e Branch was auto-updated. 2023-06-21 16:41:02 -07:00
srv-rr-gh-researchbt 66992ed16a Branch was auto-updated. 2023-06-21 16:40:59 -07:00
Bhavin Patel f76250c9ed Merge pull request #2730 from splunk/add_codeowners_file
Add Default Reviewer
2023-06-21 16:40:38 -07:00
srv-rr-gh-researchbt 3a9d27e917 Branch was auto-updated. 2023-06-21 15:02:19 -07:00
srv-rr-gh-researchbt 0b10cb5abe Branch was auto-updated. 2023-06-21 15:02:14 -07:00
srv-rr-gh-researchbt 3256d555ac Branch was auto-updated. 2023-06-21 15:02:11 -07:00
srv-rr-gh-researchbt fed705594b Branch was auto-updated. 2023-06-21 15:02:08 -07:00
Bhavin Patel 5020ffce66 Merge pull request #2734 from splunk/badge_fix
Fix badge in README.md
2023-06-21 15:01:51 -07:00
Lou Stella db50789414 Fix badge in README.md 2023-06-21 16:39:17 -05:00
srv-rr-gh-researchbt 20214c3976 Branch was auto-updated. 2023-06-21 14:07:09 -07:00
srv-rr-gh-researchbt 63c7f886d2 Branch was auto-updated. 2023-06-21 14:07:04 -07:00
srv-rr-gh-researchbt 415a1298c7 Branch was auto-updated. 2023-06-21 14:07:00 -07:00
srv-rr-gh-researchbt f37ddbd17a Branch was auto-updated. 2023-06-21 14:06:53 -07:00
Bhavin Patel 925c5c3156 Merge pull request #2733 from splunk/vmwareCVE-2023-20887
VMware - CVE-2023-20887
2023-06-21 14:06:29 -07:00
Bhavin Patel 67f6df47d8 Update vmware_aria_operations_vrealize_cve_2023_20887.yml 2023-06-21 13:34:39 -07:00
Bhavin Patel 817570d696 Update vmware_aria_operations_exploit_attempt.yml
added \
2023-06-21 13:33:54 -07:00
Michael Haag 84c34e6d0b description update 2023-06-21 12:39:58 -06:00
Michael Haag d404d52075 VMware - CVE-2023-20887
VMware - CVE-2023-20887
2023-06-21 10:33:56 -06:00
srv-rr-gh-researchbt d243488075 Branch was auto-updated. 2023-06-21 09:01:21 -07:00
srv-rr-gh-researchbt f16ba4c3d2 Branch was auto-updated. 2023-06-21 09:01:14 -07:00
srv-rr-gh-researchbt 2ab6f73043 Branch was auto-updated. 2023-06-21 09:01:10 -07:00
srv-rr-gh-researchbt 4fb7ebfb12 Branch was auto-updated. 2023-06-21 09:01:07 -07:00
P4T12ICK 8d9b32c550 Merge pull request #2708 from splunk/virustotal_fixes
VirusTotal Scoring Algo Fixes
2023-06-21 18:00:47 +02:00