srv-rr-gh-researchbt
|
2b77c7bca3
|
Branch was auto-updated.
|
2023-03-21 13:59:04 -07:00 |
|
Bhavin Patel
|
55ac860378
|
Merge pull request #2580 from splunk/errrrrr
minor
v3.62.0
|
2023-03-21 15:58:43 -05:00 |
|
patel-bhavin
|
bfa37e96e3
|
rename story
|
2023-03-21 15:52:17 -05:00 |
|
patel-bhavin
|
2d66f943b3
|
space
|
2023-03-21 15:49:13 -05:00 |
|
patel-bhavin
|
f73287ce98
|
minor
|
2023-03-21 15:48:02 -05:00 |
|
srv-rr-gh-researchbt
|
90917eaafd
|
Branch was auto-updated.
|
2023-03-21 13:00:26 -07:00 |
|
Bhavin Patel
|
b22e7ced59
|
Merge pull request #2579 from splunk/errrrrr
backit up
|
2023-03-21 15:00:03 -05:00 |
|
patel-bhavin
|
2250b24fc3
|
backit up
|
2023-03-21 14:56:47 -05:00 |
|
srv-rr-gh-researchbt
|
e322761f34
|
Branch was auto-updated.
|
2023-03-21 12:25:56 -07:00 |
|
Bhavin Patel
|
7960f8c1cb
|
Merge pull request #2577 from splunk/oka234
Okta 2023
|
2023-03-21 14:25:39 -05:00 |
|
mvelazco
|
1683b988df
|
Merge branch 'TR-2838_AD_PrivilegeEscalation' of github.com:splunk/security_content into TR-2838_AD_PrivilegeEscalation
|
2023-03-21 15:03:10 -04:00 |
|
mvelazco
|
7774a9bc22
|
adding two detections
|
2023-03-21 15:03:07 -04:00 |
|
srv-rr-gh-researchbt
|
079e6e5f10
|
Branch was auto-updated.
|
2023-03-21 11:57:43 -07:00 |
|
srv-rr-gh-researchbt
|
84dfd2c7e2
|
Branch was auto-updated.
|
2023-03-21 11:57:36 -07:00 |
|
Bhavin Patel
|
76e9bf648c
|
Merge pull request #2578 from splunk/namefix
Renamed story Outlook Elevation of Privilege
|
2023-03-21 13:57:19 -05:00 |
|
patel-bhavin
|
032a804509
|
pita
|
2023-03-21 13:52:04 -05:00 |
|
Michael Haag
|
9fc418583b
|
Renamed story Outlook Elevation of Privilege
|
2023-03-21 12:05:31 -06:00 |
|
patel-bhavin
|
2b91b38919
|
yaml fixes
|
2023-03-21 11:19:44 -05:00 |
|
Michael Haag
|
ecf698442f
|
Delete windows_service_create_remcomsvc.test.yml
|
2023-03-21 09:48:04 -06:00 |
|
Michael Haag
|
9cedba5456
|
Delete windows_lateral_tool_transfer_remcom.test.yml
|
2023-03-21 09:47:32 -06:00 |
|
Michael Haag
|
cb492b9c37
|
Delete windows_service_create_remcomsvc.yml
|
2023-03-21 09:47:13 -06:00 |
|
Michael Haag
|
af080e3d13
|
Delete windows_lateral_tool_transfer_remcom.yml
|
2023-03-21 09:47:00 -06:00 |
|
Michael Haag
|
3fd201bda6
|
Oktasaur
|
2023-03-21 09:38:36 -06:00 |
|
srv-rr-gh-researchbt
|
e868de829d
|
Branch was auto-updated.
|
2023-03-20 15:16:49 -07:00 |
|
srv-rr-gh-researchbt
|
460fe3e614
|
Branch was auto-updated.
|
2023-03-20 15:16:48 -07:00 |
|
Bhavin Patel
|
3caf195760
|
Merge pull request #2569 from VatsalJagani/madusa-ransomware
Added medusa ransomware file extension and note file names.
|
2023-03-20 17:16:29 -05:00 |
|
Michael Haag
|
7b0c83eee0
|
MOCMER
|
2023-03-20 15:26:20 -06:00 |
|
Michael Haag
|
b3128e8e85
|
every haag everywhere all at once
|
2023-03-20 14:46:12 -06:00 |
|
srv-rr-gh-researchbt
|
c04b14b1ba
|
Branch was auto-updated.
|
2023-03-20 11:33:19 -07:00 |
|
Bhavin Patel
|
9b970195cd
|
Merge pull request #2567 from splunk/onemorehaag
Haag is Back 🎆
|
2023-03-20 13:32:57 -05:00 |
|
mvelazco
|
e2aa9fbc4c
|
Merge branch 'TR-2838_AD_PrivilegeEscalation' of github.com:splunk/security_content into TR-2838_AD_PrivilegeEscalation
|
2023-03-20 13:16:22 -04:00 |
|
mvelazco
|
759eaaf39f
|
added descriptions
|
2023-03-20 13:15:58 -04:00 |
|
Vatsal Jagani
|
06b9231ed5
|
Code review change. Made change in the right file.
|
2023-03-20 22:04:10 +05:30 |
|
srv-rr-gh-researchbt
|
a8197f9e72
|
Branch was auto-updated.
|
2023-03-20 09:18:07 -07:00 |
|
srv-rr-gh-researchbt
|
b4b3e1647c
|
Branch was auto-updated.
|
2023-03-20 09:18:06 -07:00 |
|
Bhavin Patel
|
96efd77478
|
Merge pull request #2570 from VatsalJagani/ransomware-notes-lookup-case-insensitive
Made ransomware notes lookup case insensitive.
|
2023-03-20 11:17:08 -05:00 |
|
srv-rr-gh-researchbt
|
f16d49b4d5
|
Branch was auto-updated.
|
2023-03-19 23:45:48 -07:00 |
|
srv-rr-gh-researchbt
|
277e179ba8
|
Branch was auto-updated.
|
2023-03-19 23:45:46 -07:00 |
|
P4T12ICK
|
8bb1cb2f0f
|
Merge pull request #2575 from splunk/playbook_spelling_fix
Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml
|
2023-03-20 07:45:29 +01:00 |
|
Lou Stella
|
fb92555b55
|
Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml
|
2023-03-19 20:30:47 -05:00 |
|
mvelazco
|
2c866381b5
|
adding datamodel tag
|
2023-03-17 15:14:09 -04:00 |
|
mvelazco
|
2a32bc9694
|
adding new detection
|
2023-03-17 14:17:07 -04:00 |
|
Michael Haag
|
b4e22c20a9
|
fix
|
2023-03-16 15:54:47 -06:00 |
|
Michael Haag
|
88c58f5821
|
JOIN
|
2023-03-16 15:17:20 -06:00 |
|
mvelazco
|
7ccc45422e
|
adding detection
|
2023-03-16 15:46:57 -04:00 |
|
Michael Haag
|
8bbd291aa6
|
shipments
|
2023-03-16 12:30:58 -06:00 |
|
srv-rr-gh-researchbt
|
fc08810ecb
|
Branch was auto-updated.
|
2023-03-14 09:20:27 -07:00 |
|
Rod Soto
|
57b4410041
|
Merge pull request #2571 from splunk/update_import_applocker_policy
Update windows_powershell_import_applocker_policy.yml
|
2023-03-14 09:20:03 -07:00 |
|
tccontre
|
f2ceb2520f
|
Update windows_powershell_import_applocker_policy.yml
add mitre attack id for windows powershell import applocker policy related to defense evasion
|
2023-03-14 16:51:19 +01:00 |
|
Vatsal Jagani
|
cf14595674
|
Made ransomware notes lookup case insensitive.
|
2023-03-14 18:38:43 +05:30 |
|