Commit Graph

12131 Commits

Author SHA1 Message Date
Bhavin Patel 299fc9cece Branch was auto-updated. 2021-11-19 10:08:00 -08:00
pyth0n1c 8ef8da6d06 Merge pull request #1834 from splunk/TR-1085_LateralMovement_2
Lateral Movement Content Update #2
2021-11-19 10:07:34 -08:00
Bhavin Patel 3d3f5836e7 Branch was auto-updated. 2021-11-19 10:01:21 -08:00
Bhavin Patel 568af8275c Branch was auto-updated. 2021-11-19 10:01:15 -08:00
pyth0n1c f123e73be6 Merge pull request #1800 from splunk/TR-1085_LateralMovement
Lateral Movement Content Update #1
2021-11-19 10:00:57 -08:00
Bhavin Patel e94ed3f223 Branch was auto-updated. 2021-11-19 03:56:35 -08:00
Bhavin Patel 7f1521b24e Branch was auto-updated. 2021-11-19 03:56:34 -08:00
Bhavin Patel 94c941342e Branch was auto-updated. 2021-11-19 03:56:29 -08:00
P4T12ICK de15a819bb Merge pull request #1842 from splunk/ssa_fix_datasets
fix broken dataset links
2021-11-19 12:56:04 +01:00
P4T12ICK 27d981717d fix broken dataset links 2021-11-19 12:49:53 +01:00
Bhavin Patel b67d5cdc84 Branch was auto-updated. 2021-11-19 00:38:41 -08:00
Bhavin Patel 63eaf77d49 Branch was auto-updated. 2021-11-19 00:38:35 -08:00
Bhavin Patel 2f534f53d9 Branch was auto-updated. 2021-11-19 00:38:34 -08:00
tccontre dda5f844f0 Merge pull request #1838 from splunk/ioc_detections
ioc_detections
2021-11-19 09:38:15 +01:00
mvelazco a9f6b03646 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 16:26:34 -05:00
mvelazco 399ebb4e7f adding extra detection 2021-11-18 16:26:32 -05:00
Detection Testing Service 0b568f6169 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 21:05:53 +00:00
root f18afbbd8c Added detection testing service results inExecutable File Written in Administrative SMB Share 2021-11-18 21:05:53 +00:00
Bhavin Patel 1539fcb1cc Branch was auto-updated. 2021-11-18 12:58:50 -08:00
Bhavin Patel 4263408a65 Branch was auto-updated. 2021-11-18 12:58:46 -08:00
Bhavin Patel 19eb60a778 Branch was auto-updated. 2021-11-18 12:58:40 -08:00
Bhavin Patel 3ddbaae002 Branch was auto-updated. 2021-11-18 12:58:38 -08:00
Michael Haag a449b3d5cf Merge pull request #1825 from splunk/prodigal_haag
The Prodigal Haag Returns
2021-11-18 13:58:18 -07:00
mvelazco e7f395d6a5 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 15:43:58 -05:00
mvelazco 7d25f2599c updating other detections 2021-11-18 15:43:56 -05:00
root b78ea71386 Added detection testing service results inLoading Of Dynwrapx Module 2021-11-18 14:28:20 +00:00
tccontre 08cc78c723 ioc_detections 2021-11-18 15:10:02 +01:00
tccontre ee2e94cd0d Merge branch 'ioc_detections' of github.com:splunk/security_content into ioc_detections 2021-11-18 13:00:41 +01:00
tccontre f2f3eb3231 ioc_detections 2021-11-18 13:00:20 +01:00
root 8d42e73720 Added detection testing service results inSuspicious Process DNS Query Known Abuse Web Services 2021-11-18 11:27:52 +00:00
tccontre b566f7c72f ioc_detections 2021-11-18 12:05:43 +01:00
mhaag-spl 7ba2d8d412 removed 2021-11-17 14:47:49 -07:00
mhaag-spl 18ad17726e Update windows_enable_defaultaccount.yml 2021-11-17 12:01:58 -07:00
Detection Testing Service 7014972391 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 18:00:11 +00:00
root a442e207fe Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell Script Block 2021-11-17 18:00:10 +00:00
root bba838dde1 Added detection testing service results inRemote Process Instantiation via WinRM and PowerShell 2021-11-17 17:59:33 +00:00
Detection Testing Service 4f356d3398 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 17:38:32 +00:00
root 16218d8d85 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell Script Block 2021-11-17 17:38:32 +00:00
Detection Testing Service 75e7628f04 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-17 17:34:46 +00:00
root 5c8c71e813 Added detection testing service results inRemote Process Instantiation via WMI and PowerShell 2021-11-17 17:34:45 +00:00
root 59ad0b224b Added detection testing service results inRemote Process Instantiation via DCOM and PowerShell Script Block 2021-11-17 17:32:46 +00:00
Detection Testing Service 006c70ca7c Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:29:56 +00:00
root 1697f8fdc1 Added detection testing service results inRunas Execution in CommandLine 2021-11-17 17:29:56 +00:00
Detection Testing Service 476656b206 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:21:52 +00:00
root be52e7f820 Added detection testing service results inNetwork Discovery Using Route Windows App 2021-11-17 17:21:51 +00:00
Detection Testing Service 9060785858 Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:18:18 +00:00
root 0d919f6d15 Added detection testing service results inCSC Net On The Fly Compilation 2021-11-17 17:18:17 +00:00
Detection Testing Service 525c57d80f Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:16:05 +00:00
root c1e4366302 Added detection testing service results inFirewall Allowed Program Enable 2021-11-17 17:16:04 +00:00
Detection Testing Service 82ad0c564d Merge branch 'ioc_detections' of https://github.com/splunk/security_content into ioc_detections 2021-11-17 17:12:42 +00:00