Commit Graph

19273 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 2b77c7bca3 Branch was auto-updated. 2023-03-21 13:59:04 -07:00
Bhavin Patel 55ac860378 Merge pull request #2580 from splunk/errrrrr
minor
v3.62.0
2023-03-21 15:58:43 -05:00
patel-bhavin bfa37e96e3 rename story 2023-03-21 15:52:17 -05:00
patel-bhavin 2d66f943b3 space 2023-03-21 15:49:13 -05:00
patel-bhavin f73287ce98 minor 2023-03-21 15:48:02 -05:00
srv-rr-gh-researchbt 90917eaafd Branch was auto-updated. 2023-03-21 13:00:26 -07:00
Bhavin Patel b22e7ced59 Merge pull request #2579 from splunk/errrrrr
backit up
2023-03-21 15:00:03 -05:00
patel-bhavin 2250b24fc3 backit up 2023-03-21 14:56:47 -05:00
srv-rr-gh-researchbt e322761f34 Branch was auto-updated. 2023-03-21 12:25:56 -07:00
Bhavin Patel 7960f8c1cb Merge pull request #2577 from splunk/oka234
Okta 2023
2023-03-21 14:25:39 -05:00
mvelazco 1683b988df Merge branch 'TR-2838_AD_PrivilegeEscalation' of github.com:splunk/security_content into TR-2838_AD_PrivilegeEscalation 2023-03-21 15:03:10 -04:00
mvelazco 7774a9bc22 adding two detections 2023-03-21 15:03:07 -04:00
srv-rr-gh-researchbt 079e6e5f10 Branch was auto-updated. 2023-03-21 11:57:43 -07:00
srv-rr-gh-researchbt 84dfd2c7e2 Branch was auto-updated. 2023-03-21 11:57:36 -07:00
Bhavin Patel 76e9bf648c Merge pull request #2578 from splunk/namefix
Renamed story Outlook Elevation of Privilege
2023-03-21 13:57:19 -05:00
patel-bhavin 032a804509 pita 2023-03-21 13:52:04 -05:00
Michael Haag 9fc418583b Renamed story Outlook Elevation of Privilege 2023-03-21 12:05:31 -06:00
patel-bhavin 2b91b38919 yaml fixes 2023-03-21 11:19:44 -05:00
Michael Haag ecf698442f Delete windows_service_create_remcomsvc.test.yml 2023-03-21 09:48:04 -06:00
Michael Haag 9cedba5456 Delete windows_lateral_tool_transfer_remcom.test.yml 2023-03-21 09:47:32 -06:00
Michael Haag cb492b9c37 Delete windows_service_create_remcomsvc.yml 2023-03-21 09:47:13 -06:00
Michael Haag af080e3d13 Delete windows_lateral_tool_transfer_remcom.yml 2023-03-21 09:47:00 -06:00
Michael Haag 3fd201bda6 Oktasaur 2023-03-21 09:38:36 -06:00
srv-rr-gh-researchbt e868de829d Branch was auto-updated. 2023-03-20 15:16:49 -07:00
srv-rr-gh-researchbt 460fe3e614 Branch was auto-updated. 2023-03-20 15:16:48 -07:00
Bhavin Patel 3caf195760 Merge pull request #2569 from VatsalJagani/madusa-ransomware
Added medusa ransomware file extension and note file names.
2023-03-20 17:16:29 -05:00
Michael Haag 7b0c83eee0 MOCMER 2023-03-20 15:26:20 -06:00
Michael Haag b3128e8e85 every haag everywhere all at once 2023-03-20 14:46:12 -06:00
srv-rr-gh-researchbt c04b14b1ba Branch was auto-updated. 2023-03-20 11:33:19 -07:00
Bhavin Patel 9b970195cd Merge pull request #2567 from splunk/onemorehaag
Haag is Back 🎆
2023-03-20 13:32:57 -05:00
mvelazco e2aa9fbc4c Merge branch 'TR-2838_AD_PrivilegeEscalation' of github.com:splunk/security_content into TR-2838_AD_PrivilegeEscalation 2023-03-20 13:16:22 -04:00
mvelazco 759eaaf39f added descriptions 2023-03-20 13:15:58 -04:00
Vatsal Jagani 06b9231ed5 Code review change. Made change in the right file. 2023-03-20 22:04:10 +05:30
srv-rr-gh-researchbt a8197f9e72 Branch was auto-updated. 2023-03-20 09:18:07 -07:00
srv-rr-gh-researchbt b4b3e1647c Branch was auto-updated. 2023-03-20 09:18:06 -07:00
Bhavin Patel 96efd77478 Merge pull request #2570 from VatsalJagani/ransomware-notes-lookup-case-insensitive
Made ransomware notes lookup case insensitive.
2023-03-20 11:17:08 -05:00
srv-rr-gh-researchbt f16d49b4d5 Branch was auto-updated. 2023-03-19 23:45:48 -07:00
srv-rr-gh-researchbt 277e179ba8 Branch was auto-updated. 2023-03-19 23:45:46 -07:00
P4T12ICK 8bb1cb2f0f Merge pull request #2575 from splunk/playbook_spelling_fix
Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml
2023-03-20 07:45:29 +01:00
Lou Stella fb92555b55 Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml 2023-03-19 20:30:47 -05:00
mvelazco 2c866381b5 adding datamodel tag 2023-03-17 15:14:09 -04:00
mvelazco 2a32bc9694 adding new detection 2023-03-17 14:17:07 -04:00
Michael Haag b4e22c20a9 fix 2023-03-16 15:54:47 -06:00
Michael Haag 88c58f5821 JOIN 2023-03-16 15:17:20 -06:00
mvelazco 7ccc45422e adding detection 2023-03-16 15:46:57 -04:00
Michael Haag 8bbd291aa6 shipments 2023-03-16 12:30:58 -06:00
srv-rr-gh-researchbt fc08810ecb Branch was auto-updated. 2023-03-14 09:20:27 -07:00
Rod Soto 57b4410041 Merge pull request #2571 from splunk/update_import_applocker_policy
Update windows_powershell_import_applocker_policy.yml
2023-03-14 09:20:03 -07:00
tccontre f2ceb2520f Update windows_powershell_import_applocker_policy.yml
add mitre attack id for windows powershell import applocker policy related to defense evasion
2023-03-14 16:51:19 +01:00
Vatsal Jagani cf14595674 Made ransomware notes lookup case insensitive. 2023-03-14 18:38:43 +05:30