Commit Graph

19708 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 29efd46e18 Branch was auto-updated. 2023-04-17 17:03:34 -07:00
Bhavin Patel 4261e70954 Merge pull request #2613 from splunk/sandworm_data_destruction
sandworm_data_destruction
2023-04-17 17:03:05 -07:00
srv-rr-gh-researchbt 0f03e6211c Branch was auto-updated. 2023-04-17 16:57:24 -07:00
srv-rr-gh-researchbt 6b3714fb82 Branch was auto-updated. 2023-04-17 16:57:13 -07:00
Bhavin Patel 9924a35dd0 Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks
virustotal_v3_dynamic_analysis_playbooks
2023-04-17 16:56:49 -07:00
srv-rr-gh-researchbt 939e1d4ae6 Branch was auto-updated. 2023-04-17 16:53:23 -07:00
srv-rr-gh-researchbt c570a16b0a Branch was auto-updated. 2023-04-17 16:53:20 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
Bhavin Patel 2b5558c553 Merge pull request #2619 from splunk/data_destruction_wiper_story
data_destruction_wiper_story
2023-04-17 16:52:51 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt 677fb762c4 Branch was auto-updated. 2023-04-17 16:26:26 -07:00
srv-rr-gh-researchbt ec104c0d19 Branch was auto-updated. 2023-04-17 16:26:23 -07:00
srv-rr-gh-researchbt d3ebc2795c Branch was auto-updated. 2023-04-17 16:26:19 -07:00
Bhavin Patel 290dfde752 Merge pull request #2625 from splunk/bugfix_2622
Macro name change in one detection
2023-04-17 16:26:01 -07:00
Bhavin Patel 0d2826b215 Update data_destruction.yml 2023-04-17 16:23:21 -07:00
patel-bhavin 59443bd27e remove tests 2023-04-17 16:19:43 -07:00
srv-rr-gh-researchbt febf103b87 Branch was auto-updated. 2023-04-17 13:11:24 -07:00
srv-rr-gh-researchbt 37b753cd78 Branch was auto-updated. 2023-04-17 13:11:23 -07:00
srv-rr-gh-researchbt 1a444b2b04 Branch was auto-updated. 2023-04-17 13:11:21 -07:00
srv-rr-gh-researchbt 02803d91be Branch was auto-updated. 2023-04-17 13:11:16 -07:00
Michael Haag 03041105aa Merge pull request #2629 from splunk/bugfix_2623
Removing extra characters around field name
2023-04-17 14:10:54 -06:00
srv-rr-gh-researchbt 21c5a0bcae Branch was auto-updated. 2023-04-17 13:04:05 -07:00
srv-rr-gh-researchbt f1d9ef6c05 Branch was auto-updated. 2023-04-17 13:03:58 -07:00
srv-rr-gh-researchbt 3aeb70a13b Branch was auto-updated. 2023-04-17 13:03:54 -07:00
srv-rr-gh-researchbt 6955f7d8c6 Branch was auto-updated. 2023-04-17 13:03:53 -07:00
srv-rr-gh-researchbt 50f7e69d8f Branch was auto-updated. 2023-04-17 13:03:52 -07:00
Bhavin Patel bfd03a449c Merge pull request #2606 from splunk/winter_vivern_analytics
winter_vivern_analytics
2023-04-17 13:03:33 -07:00
Lou Stella ed394e2ce1 Removing extra 11186 around field name 2023-04-17 15:00:52 -05:00
Lou Stella dbcf0b2e31 properly name generated macro 2023-04-17 14:53:23 -05:00
srv-rr-gh-researchbt 80f9ab2e28 Branch was auto-updated. 2023-04-17 00:45:40 -07:00
srv-rr-gh-researchbt a0760026ea Branch was auto-updated. 2023-04-17 00:45:37 -07:00
srv-rr-gh-researchbt 179508d9ca Branch was auto-updated. 2023-04-17 00:45:32 -07:00
srv-rr-gh-researchbt ffd6112503 Branch was auto-updated. 2023-04-17 00:45:31 -07:00
srv-rr-gh-researchbt 80be9b457d Branch was auto-updated. 2023-04-17 00:45:29 -07:00
P4T12ICK 7c28591f88 Merge pull request #2592 from splunk/crowdstrike_oauth_api_playbook_v2
crowdstrike_oauth_api_playbook_v2
2023-04-17 09:45:07 +02:00
tccontre f276d22e6c data_destruction_wiper_story 2023-04-14 10:50:14 +02:00
tccontre 033c45858c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:45:52 +02:00
tccontre 68e61ae4cd Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:44:14 +02:00
tccontre 5311028ec7 Update malicious_powershell_process___encoded_command.yml 2023-04-14 10:42:16 +02:00
tccontre ecf8ff90d4 Update detect_mimikatz_with_powershell_script_block_logging.yml 2023-04-14 10:40:15 +02:00
tccontre e1c4580b9c Update winevent_windows_task_scheduler_event_action_started.yml 2023-04-14 10:39:01 +02:00
tccontre bf4daef2ca Update winevent_scheduled_task_created_within_public_path.yml 2023-04-14 10:38:20 +02:00
tccontre 357de299b3 Update powershell_loading_dotnet_into_memory_via_reflection.yml 2023-04-14 10:36:29 +02:00
tccontre 60ec2a1c2c Update powershell_fileless_script_contains_base64_encoded_content.yml 2023-04-14 10:35:54 +02:00
tccontre 53b7dc49e9 Update cmd_carry_out_string_command_parameter.yml 2023-04-14 10:34:44 +02:00
tccontre d460df3354 Update any_powershell_downloadstring.yml 2023-04-14 10:33:19 +02:00
patel-bhavin 61d4414f2f fix up with 4.0 2023-04-13 11:30:14 -07:00
patel-bhavin 5ebf3d6484 remove tests 2023-04-13 11:19:19 -07:00
patel-bhavin 19c67e3d85 fixup to match 4.0 2023-04-13 11:16:43 -07:00
Michael Haag 95a776160f Update sandworm_tools.yml 2023-04-13 12:15:47 -06:00