 tccontre
|
2af43e044b
|
Delete ssa___disable_net_user_account.yml
|
2021-06-30 16:17:36 +02:00 |
|
|
tccontre
|
e511c2bcfa
|
Delete ssa___delete_a_net_user.yml
|
2021-06-30 16:17:28 +02:00 |
|
|
tccontre
|
273400cf56
|
Delete ssa___attempt_to_disable_services.yml
|
2021-06-30 16:17:17 +02:00 |
|
|
tccontre
|
1f6393f9a8
|
Delete ssa___attempt_to_delete_services.yml
|
2021-06-30 16:17:10 +02:00 |
|
|
tccontre
|
7da993833d
|
attacker_tool_t1
|
2021-06-30 16:15:57 +02:00 |
|
|
tccontre
|
5b7255c9df
|
Merge branch 'refactor_xmrig' of github.com:splunk/security_content into refactor_xmrig
|
2021-06-30 16:11:29 +02:00 |
|
|
github-actions[bot]
|
6c34a1c52e
|
Branch was auto-updated.
|
2021-06-29 18:30:57 +00:00 |
|
|
Bhavin Patel
|
fb6f9c82a7
|
Merge pull request #1462 from splunk/ssa_wevtutil_branch_reversion
[PR-1444] fix branch reversion.
|
2021-06-29 13:30:38 -05:00 |
|
|
patel-bhavin
|
ebfa202cae
|
time
|
2021-06-29 12:35:04 -05:00 |
|
|
tccontre
|
63937f9521
|
Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det
|
2021-06-29 17:01:58 +02:00 |
|
|
tccontre
|
5c3fe3dda1
|
ssa8
|
2021-06-29 17:01:40 +02:00 |
|
|
github-actions[bot]
|
52aaa53e40
|
Branch was auto-updated.
|
2021-06-28 18:29:47 +00:00 |
|
|
github-actions[bot]
|
73a7d75731
|
Branch was auto-updated.
|
2021-06-28 18:29:46 +00:00 |
|
|
github-actions[bot]
|
828f08bc04
|
Branch was auto-updated.
|
2021-06-28 18:29:45 +00:00 |
|
|
Michael Haag
|
40278784b2
|
Merge pull request #1465 from splunk/excessive_sc_start_disable
Excessive number of sc.exe start as disabled calls
|
2021-06-28 12:29:30 -06:00 |
|
|
Michael Hart
|
d9c8e10920
|
Slight correction. Process contains cmd line arguments for finding distinct number of sc invocations. Removing this and process id from BY clause
|
2021-06-28 14:14:42 -04:00 |
|
|
Michael Haag
|
f10bdb4742
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 11:34:18 -06:00 |
|
|
Michael Haag
|
bfa5d036ae
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 10:35:29 -06:00 |
|
|
Michael Haag
|
ae269feb4b
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 10:35:01 -06:00 |
|
|
github-actions[bot]
|
d57b067af1
|
Branch was auto-updated.
|
2021-06-28 16:09:43 +00:00 |
|
|
github-actions[bot]
|
62b9fa10e6
|
Branch was auto-updated.
|
2021-06-28 16:09:42 +00:00 |
|
|
github-actions[bot]
|
f17961abd1
|
Branch was auto-updated.
|
2021-06-28 16:09:41 +00:00 |
|
|
github-actions[bot]
|
8722a9fae7
|
Branch was auto-updated.
|
2021-06-28 16:09:41 +00:00 |
|
|
Jose Enrique Hernandez
|
c5919dee1f
|
Merge pull request #1467 from splunk/doc_gen_bug
doc gen bug
|
2021-06-28 12:09:20 -04:00 |
|
|
divious1
|
8ae54e8e1e
|
this was brough up by doc team, it was causing docs to not be updated
|
2021-06-25 15:54:57 -04:00 |
|
|
github-actions[bot]
|
d67e5ced6a
|
Branch was auto-updated.
|
2021-06-25 19:51:24 +00:00 |
|
|
github-actions[bot]
|
6885dcaaa5
|
Branch was auto-updated.
|
2021-06-25 19:51:23 +00:00 |
|
|
github-actions[bot]
|
85f267f3ed
|
Branch was auto-updated.
|
2021-06-25 19:51:22 +00:00 |
|
|
github-actions[bot]
|
874a906d4b
|
Branch was auto-updated.
|
2021-06-25 19:51:21 +00:00 |
|
|
Jose Enrique Hernandez
|
8ab5325de6
|
Merge pull request #1466 from splunk/mustang_fixing_names
Mustang fixing names
|
2021-06-25 15:51:05 -04:00 |
|
|
root
|
d184ff8b1e
|
Added detection testing service results inExcessive number of service control start as disabled
|
2021-06-25 19:29:17 +00:00 |
|
|
divious1
|
30b6ec1eed
|
Revert "changing O365 to Office 365"
This reverts commit b05af9f100.
|
2021-06-25 15:05:19 -04:00 |
|
|
divious1
|
022c5be43e
|
Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming"
This reverts commit 45c138d518.
|
2021-06-25 15:03:55 -04:00 |
|
|
Michael Hart
|
1a26fc38e3
|
contentctl puts relative link to detection file in wrong place
|
2021-06-25 15:00:46 -04:00 |
|
|
Michael Hart
|
98a7b4e3ff
|
Adding references
|
2021-06-25 14:56:08 -04:00 |
|
|
divious1
|
b05af9f100
|
changing O365 to Office 365
|
2021-06-25 14:52:58 -04:00 |
|
|
divious1
|
f262360d0a
|
updated CloudTrails to AWS CloudTrails
|
2021-06-25 14:50:50 -04:00 |
|
|
Michael Hart
|
518d03b1a1
|
Detection looks for excessive number of sc.exe start as disabled calls
|
2021-06-25 14:48:48 -04:00 |
|
|
divious1
|
45c138d518
|
updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming
|
2021-06-25 14:44:02 -04:00 |
|
|
tccontre
|
33de9753a3
|
ssa_det7
|
2021-06-25 19:19:51 +02:00 |
|
|
github-actions[bot]
|
5c1431addd
|
Branch was auto-updated.
|
2021-06-25 13:14:26 +00:00 |
|
|
github-actions[bot]
|
169c71f6bd
|
Branch was auto-updated.
|
2021-06-25 13:14:22 +00:00 |
|
|
github-actions[bot]
|
1054dbbac0
|
Branch was auto-updated.
|
2021-06-25 13:14:22 +00:00 |
|
|
Jose Enrique Hernandez
|
9011c52d9c
|
Merge pull request #1463 from splunk/fixing_reporting_bugs
Coverage reporting 101% .. mathematically incorrect.
|
2021-06-25 09:14:04 -04:00 |
|
|
divious1
|
b29a96d222
|
Merge branch 'fixing_reporting_bugs' of github.com:splunk/security_content into fixing_reporting_bugs
|
2021-06-25 08:41:54 -04:00 |
|
|
divious1
|
3c39aa59ae
|
with the change of the default image pip is treated slightly different
|
2021-06-25 08:41:48 -04:00 |
|
|
github-actions[bot]
|
199c36af2d
|
Branch was auto-updated.
|
2021-06-25 07:49:37 +00:00 |
|
|
github-actions[bot]
|
18d4d85ee4
|
Branch was auto-updated.
|
2021-06-25 07:49:36 +00:00 |
|
|
github-actions[bot]
|
7fc55957df
|
Branch was auto-updated.
|
2021-06-25 07:49:28 +00:00 |
|
|
github-actions[bot]
|
93c7997b49
|
Branch was auto-updated.
|
2021-06-25 07:49:24 +00:00 |
|