664 Commits

Author	SHA1	Message	Date
tccontre	5b7255c9df	Merge branch 'refactor_xmrig' of github.com:splunk/security_content into refactor_xmrig	2021-06-30 16:11:29 +02:00
github-actions[bot]	6c34a1c52e	Branch was auto-updated.	2021-06-29 18:30:57 +00:00
patel-bhavin	ebfa202cae	time	2021-06-29 12:35:04 -05:00
github-actions[bot]	52aaa53e40	Branch was auto-updated.	2021-06-28 18:29:47 +00:00
github-actions[bot]	73a7d75731	Branch was auto-updated.	2021-06-28 18:29:46 +00:00
github-actions[bot]	828f08bc04	Branch was auto-updated.	2021-06-28 18:29:45 +00:00
Michael Hart	1a26fc38e3	contentctl puts relative link to detection file in wrong place	2021-06-25 15:00:46 -04:00
Michael Hart	518d03b1a1	Detection looks for excessive number of sc.exe start as disabled calls	2021-06-25 14:48:48 -04:00
jzsplunk	5d39a5eed2	[PR-1444] fix branch reversion.	2021-06-24 01:36:15 -07:00
github-actions[bot]	49052e5c5f	Branch was auto-updated.	2021-06-23 23:37:51 +00:00
github-actions[bot]	04fa057c01	Branch was auto-updated.	2021-06-23 23:37:50 +00:00
mhaag-spl	3217246bcd	Update attacker_tools_on_endpoint.test.yml	2021-06-23 15:58:49 -06:00
Jose Enrique Hernandez	dbdf39cd28	Revert "ssa"	2021-06-23 17:49:11 -04:00
mhaag-spl	97944c5622	tune up	2021-06-23 14:44:37 -06:00
github-actions[bot]	3d484e756b	Branch was auto-updated.	2021-06-23 18:51:10 +00:00
github-actions[bot]	7b6ace3294	Branch was auto-updated.	2021-06-23 18:51:07 +00:00
github-actions[bot]	55a4e46521	Branch was auto-updated.	2021-06-23 17:54:41 +00:00
github-actions[bot]	8894544766	Branch was auto-updated.	2021-06-23 17:54:35 +00:00
github-actions[bot]	1511847430	Branch was auto-updated.	2021-06-23 17:54:34 +00:00
tccontre	e728f6b661	ssa_d	2021-06-23 14:52:44 +02:00
tccontre	6bcea461e5	Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det	2021-06-23 14:48:04 +02:00
tccontre	580d73a178	ssa_p2	2021-06-23 14:47:14 +02:00
tccontre	2f249722aa	Delete ssa___deny_permission_using_cacls_utility.test.yml	2021-06-23 14:34:19 +02:00
tccontre	a0029c5f44	Delete ssa___grant_permission_using_cacls_utility.test.yml	2021-06-23 14:34:10 +02:00
tccontre	950071d533	Delete ssa___modify_acls_permission_of_files_or_folders.test.yml	2021-06-23 14:33:59 +02:00
tccontre	99fceb5476	Delete ssa___wevtutil_usage_to_clear_logs.test.yml	2021-06-23 14:33:48 +02:00
tccontre	b193abce66	Delete ssa___wevtutil_usage_to_disable_logs.test.yml	2021-06-23 14:33:41 +02:00
tccontre	f8a4f7e508	ssa2	2021-06-23 14:16:05 +02:00
tccontre	c7361eca3f	ssa5	2021-06-23 13:49:14 +02:00
tccontre	96968c4538	ssa4	2021-06-23 13:49:14 +02:00
tccontre	60f656915b	ssa3	2021-06-23 13:49:14 +02:00
tccontre	125c270d12	ssa2	2021-06-23 13:49:14 +02:00
tccontre	400024cf79	ssa2	2021-06-23 13:49:14 +02:00
tccontre	5cf864aad7	ssa	2021-06-23 13:49:14 +02:00
github-actions[bot]	81b916991d	Branch was auto-updated.	2021-06-22 21:32:16 +00:00
github-actions[bot]	d5533ca607	Branch was auto-updated.	2021-06-22 21:32:15 +00:00
github-actions[bot]	467032107d	Branch was auto-updated.	2021-06-22 21:32:12 +00:00
mvelazco	e4f5a3894d	fixing errors ... fixing filter name	2021-06-21 17:10:54 -04:00
mvelazco	1b7f966a84	re-factoring windows event log cleared detections	2021-06-21 16:40:59 -04:00
mhaag-spl	ad85879e89	Fixing descriptions	2021-06-18 13:41:54 -06:00
mhaag-spl	35492c75fb	wrong data	2021-06-18 11:00:34 -06:00
mhaag-spl	2e9b99ecf1	Updates	2021-06-18 10:34:25 -06:00
mhaag-spl	9396034913	Remote WMI Command Attempt	2021-06-18 10:02:13 -06:00
mhaag-spl	b51f291810	Update detect_wmi_event_subscription_persistence.test.yml	2021-06-18 08:22:36 -06:00
tccontre	0106cc56be	ssa5	2021-06-18 13:46:01 +02:00
tccontre	57a3dbc5a3	ssa4	2021-06-18 13:10:16 +02:00
tccontre	2492795204	ssa3	2021-06-18 13:04:26 +02:00
github-actions[bot]	0cacbf100a	Branch was auto-updated.	2021-06-18 07:45:44 +00:00
github-actions[bot]	30011967a1	Branch was auto-updated.	2021-06-18 07:45:38 +00:00
github-actions[bot]	1a8410d76f	Branch was auto-updated.	2021-06-18 07:45:37 +00:00