srv-rr-gh-researchbt
|
29efd46e18
|
Branch was auto-updated.
|
2023-04-17 17:03:34 -07:00 |
|
Bhavin Patel
|
4261e70954
|
Merge pull request #2613 from splunk/sandworm_data_destruction
sandworm_data_destruction
|
2023-04-17 17:03:05 -07:00 |
|
srv-rr-gh-researchbt
|
0f03e6211c
|
Branch was auto-updated.
|
2023-04-17 16:57:24 -07:00 |
|
srv-rr-gh-researchbt
|
6b3714fb82
|
Branch was auto-updated.
|
2023-04-17 16:57:13 -07:00 |
|
Bhavin Patel
|
9924a35dd0
|
Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks
virustotal_v3_dynamic_analysis_playbooks
|
2023-04-17 16:56:49 -07:00 |
|
srv-rr-gh-researchbt
|
939e1d4ae6
|
Branch was auto-updated.
|
2023-04-17 16:53:23 -07:00 |
|
srv-rr-gh-researchbt
|
c570a16b0a
|
Branch was auto-updated.
|
2023-04-17 16:53:20 -07:00 |
|
srv-rr-gh-researchbt
|
72ab2d082e
|
Branch was auto-updated.
|
2023-04-17 16:53:10 -07:00 |
|
Bhavin Patel
|
2b5558c553
|
Merge pull request #2619 from splunk/data_destruction_wiper_story
data_destruction_wiper_story
|
2023-04-17 16:52:51 -07:00 |
|
Bhavin Patel
|
2aafdb6cfe
|
Merge branch 'develop' into sandworm_data_destruction
|
2023-04-17 16:44:20 -07:00 |
|
srv-rr-gh-researchbt
|
677fb762c4
|
Branch was auto-updated.
|
2023-04-17 16:26:26 -07:00 |
|
srv-rr-gh-researchbt
|
ec104c0d19
|
Branch was auto-updated.
|
2023-04-17 16:26:23 -07:00 |
|
srv-rr-gh-researchbt
|
d3ebc2795c
|
Branch was auto-updated.
|
2023-04-17 16:26:19 -07:00 |
|
Bhavin Patel
|
290dfde752
|
Merge pull request #2625 from splunk/bugfix_2622
Macro name change in one detection
|
2023-04-17 16:26:01 -07:00 |
|
Bhavin Patel
|
0d2826b215
|
Update data_destruction.yml
|
2023-04-17 16:23:21 -07:00 |
|
patel-bhavin
|
59443bd27e
|
remove tests
|
2023-04-17 16:19:43 -07:00 |
|
srv-rr-gh-researchbt
|
febf103b87
|
Branch was auto-updated.
|
2023-04-17 13:11:24 -07:00 |
|
srv-rr-gh-researchbt
|
37b753cd78
|
Branch was auto-updated.
|
2023-04-17 13:11:23 -07:00 |
|
srv-rr-gh-researchbt
|
1a444b2b04
|
Branch was auto-updated.
|
2023-04-17 13:11:21 -07:00 |
|
srv-rr-gh-researchbt
|
02803d91be
|
Branch was auto-updated.
|
2023-04-17 13:11:16 -07:00 |
|
Michael Haag
|
03041105aa
|
Merge pull request #2629 from splunk/bugfix_2623
Removing extra characters around field name
|
2023-04-17 14:10:54 -06:00 |
|
srv-rr-gh-researchbt
|
21c5a0bcae
|
Branch was auto-updated.
|
2023-04-17 13:04:05 -07:00 |
|
srv-rr-gh-researchbt
|
f1d9ef6c05
|
Branch was auto-updated.
|
2023-04-17 13:03:58 -07:00 |
|
srv-rr-gh-researchbt
|
3aeb70a13b
|
Branch was auto-updated.
|
2023-04-17 13:03:54 -07:00 |
|
srv-rr-gh-researchbt
|
6955f7d8c6
|
Branch was auto-updated.
|
2023-04-17 13:03:53 -07:00 |
|
srv-rr-gh-researchbt
|
50f7e69d8f
|
Branch was auto-updated.
|
2023-04-17 13:03:52 -07:00 |
|
Bhavin Patel
|
bfd03a449c
|
Merge pull request #2606 from splunk/winter_vivern_analytics
winter_vivern_analytics
|
2023-04-17 13:03:33 -07:00 |
|
Lou Stella
|
ed394e2ce1
|
Removing extra 11186 around field name
|
2023-04-17 15:00:52 -05:00 |
|
Lou Stella
|
dbcf0b2e31
|
properly name generated macro
|
2023-04-17 14:53:23 -05:00 |
|
srv-rr-gh-researchbt
|
80f9ab2e28
|
Branch was auto-updated.
|
2023-04-17 00:45:40 -07:00 |
|
srv-rr-gh-researchbt
|
a0760026ea
|
Branch was auto-updated.
|
2023-04-17 00:45:37 -07:00 |
|
srv-rr-gh-researchbt
|
179508d9ca
|
Branch was auto-updated.
|
2023-04-17 00:45:32 -07:00 |
|
srv-rr-gh-researchbt
|
ffd6112503
|
Branch was auto-updated.
|
2023-04-17 00:45:31 -07:00 |
|
srv-rr-gh-researchbt
|
80be9b457d
|
Branch was auto-updated.
|
2023-04-17 00:45:29 -07:00 |
|
P4T12ICK
|
7c28591f88
|
Merge pull request #2592 from splunk/crowdstrike_oauth_api_playbook_v2
crowdstrike_oauth_api_playbook_v2
|
2023-04-17 09:45:07 +02:00 |
|
tccontre
|
f276d22e6c
|
data_destruction_wiper_story
|
2023-04-14 10:50:14 +02:00 |
|
tccontre
|
033c45858c
|
Update winevent_windows_task_scheduler_event_action_started.yml
|
2023-04-14 10:45:52 +02:00 |
|
tccontre
|
68e61ae4cd
|
Update winevent_windows_task_scheduler_event_action_started.yml
|
2023-04-14 10:44:14 +02:00 |
|
tccontre
|
5311028ec7
|
Update malicious_powershell_process___encoded_command.yml
|
2023-04-14 10:42:16 +02:00 |
|
tccontre
|
ecf8ff90d4
|
Update detect_mimikatz_with_powershell_script_block_logging.yml
|
2023-04-14 10:40:15 +02:00 |
|
tccontre
|
e1c4580b9c
|
Update winevent_windows_task_scheduler_event_action_started.yml
|
2023-04-14 10:39:01 +02:00 |
|
tccontre
|
bf4daef2ca
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2023-04-14 10:38:20 +02:00 |
|
tccontre
|
357de299b3
|
Update powershell_loading_dotnet_into_memory_via_reflection.yml
|
2023-04-14 10:36:29 +02:00 |
|
tccontre
|
60ec2a1c2c
|
Update powershell_fileless_script_contains_base64_encoded_content.yml
|
2023-04-14 10:35:54 +02:00 |
|
tccontre
|
53b7dc49e9
|
Update cmd_carry_out_string_command_parameter.yml
|
2023-04-14 10:34:44 +02:00 |
|
tccontre
|
d460df3354
|
Update any_powershell_downloadstring.yml
|
2023-04-14 10:33:19 +02:00 |
|
patel-bhavin
|
61d4414f2f
|
fix up with 4.0
|
2023-04-13 11:30:14 -07:00 |
|
patel-bhavin
|
5ebf3d6484
|
remove tests
|
2023-04-13 11:19:19 -07:00 |
|
patel-bhavin
|
19c67e3d85
|
fixup to match 4.0
|
2023-04-13 11:16:43 -07:00 |
|
Michael Haag
|
95a776160f
|
Update sandworm_tools.yml
|
2023-04-13 12:15:47 -06:00 |
|