Commit Graph

641 Commits

Author SHA1 Message Date
github-actions[bot] 90d62f8358 Branch was auto-updated. 2021-06-29 18:31:00 +00:00
github-actions[bot] dc67fbd644 Branch was auto-updated. 2021-06-28 18:29:49 +00:00
github-actions[bot] 52aaa53e40 Branch was auto-updated. 2021-06-28 18:29:47 +00:00
Michael Hart 1a26fc38e3 contentctl puts relative link to detection file in wrong place 2021-06-25 15:00:46 -04:00
Michael Hart 518d03b1a1 Detection looks for excessive number of sc.exe start as disabled calls 2021-06-25 14:48:48 -04:00
jzsplunk 5d39a5eed2 [PR-1444] fix branch reversion. 2021-06-24 01:36:15 -07:00
github-actions[bot] e8f2752083 Branch was auto-updated. 2021-06-23 23:37:52 +00:00
Jose Enrique Hernandez dbdf39cd28 Revert "ssa" 2021-06-23 17:49:11 -04:00
github-actions[bot] 90263bd1ed Branch was auto-updated. 2021-06-23 18:51:06 +00:00
github-actions[bot] 3a7d86f6c3 Branch was auto-updated. 2021-06-23 17:54:40 +00:00
github-actions[bot] 8894544766 Branch was auto-updated. 2021-06-23 17:54:35 +00:00
github-actions[bot] 81b916991d Branch was auto-updated. 2021-06-22 21:32:16 +00:00
github-actions[bot] d5533ca607 Branch was auto-updated. 2021-06-22 21:32:15 +00:00
github-actions[bot] ab9bf6ee37 Branch was auto-updated. 2021-06-22 21:32:13 +00:00
mvelazco e4f5a3894d fixing errors
fixing filter name
2021-06-21 17:10:54 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
mhaag-spl ad85879e89 Fixing descriptions 2021-06-18 13:41:54 -06:00
mhaag-spl 35492c75fb wrong data 2021-06-18 11:00:34 -06:00
mhaag-spl 2e9b99ecf1 Updates 2021-06-18 10:34:25 -06:00
mhaag-spl 9396034913 Remote WMI Command Attempt 2021-06-18 10:02:13 -06:00
mhaag-spl b51f291810 Update detect_wmi_event_subscription_persistence.test.yml 2021-06-18 08:22:36 -06:00
P4T12ICK f474be39f6 Merge branch 'develop' into labeled_data_for_ml 2021-06-18 14:12:44 +02:00
tccontre 0106cc56be ssa5 2021-06-18 13:46:01 +02:00
tccontre 57a3dbc5a3 ssa4 2021-06-18 13:10:16 +02:00
tccontre 2492795204 ssa3 2021-06-18 13:04:26 +02:00
github-actions[bot] 30011967a1 Branch was auto-updated. 2021-06-18 07:45:38 +00:00
github-actions[bot] 1a8410d76f Branch was auto-updated. 2021-06-18 07:45:37 +00:00
github-actions[bot] 758cd6fad0 Branch was auto-updated. 2021-06-17 13:27:10 +00:00
github-actions[bot] 2f325f074e Branch was auto-updated. 2021-06-17 13:27:09 +00:00
github-actions[bot] 817bee6359 Branch was auto-updated. 2021-06-17 13:27:01 +00:00
github-actions[bot] 8c3061f290 Branch was auto-updated. 2021-06-17 13:22:24 +00:00
github-actions[bot] 6ee17226c5 Branch was auto-updated. 2021-06-17 13:22:17 +00:00
github-actions[bot] 8f58b91da6 Branch was auto-updated. 2021-06-17 13:22:15 +00:00
github-actions[bot] 83bcadf468 Branch was auto-updated. 2021-06-17 13:22:14 +00:00
mhaag-spl 99e3af8d10 wmi event subscription 2021-06-16 13:48:07 -06:00
tccontre b6ab35397a ssa2 2021-06-16 17:11:08 +02:00
tccontre fb1ce4133b ssa2 2021-06-16 17:01:00 +02:00
tccontre 79c86ce0fd ssa 2021-06-16 16:19:55 +02:00
tccontre a1b27f125f Delete allow_operation_with_consent_admin.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:22:00 +02:00
tccontre 9a25b289c3 Delete clear_unallocated_sector_using_cipher_app.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:41 +02:00
tccontre de20af3ac5 Delete permission_modification_using_takeown_app.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:28 +02:00
tccontre 150d8c9f34 Delete prevent_automatic_repair_mode_using_bcdedit.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:21:05 +02:00
tccontre 32defb377a Delete start_up_during_safe_mode_boot.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:20:51 +02:00
tccontre 878bf692fa Delete disable_logs_using_wevtutil.test.yml
un-intended files. this is already in rttp PR
2021-06-16 10:13:51 +02:00
mhaag-spl 25b1087abc Domain enumeration 2021-06-15 14:02:45 -06:00
mhaag-spl 4476dc1705 spec chars 2021-06-15 13:28:27 -06:00
mhaag-spl a169f1b226 Name fix 2021-06-15 13:26:01 -06:00
mhaag-spl a4d3947ee3 System.Reflection.Assembly
System.Reflection.Assembly
2021-06-15 13:16:17 -06:00
github-actions[bot] 375416e0a4 Branch was auto-updated. 2021-06-15 13:44:14 +00:00
github-actions[bot] 85ecf75bb9 Branch was auto-updated. 2021-06-15 13:44:09 +00:00