github-actions[bot]
|
90d62f8358
|
Branch was auto-updated.
|
2021-06-29 18:31:00 +00:00 |
|
github-actions[bot]
|
dc67fbd644
|
Branch was auto-updated.
|
2021-06-28 18:29:49 +00:00 |
|
github-actions[bot]
|
52aaa53e40
|
Branch was auto-updated.
|
2021-06-28 18:29:47 +00:00 |
|
Michael Hart
|
1a26fc38e3
|
contentctl puts relative link to detection file in wrong place
|
2021-06-25 15:00:46 -04:00 |
|
Michael Hart
|
518d03b1a1
|
Detection looks for excessive number of sc.exe start as disabled calls
|
2021-06-25 14:48:48 -04:00 |
|
jzsplunk
|
5d39a5eed2
|
[PR-1444] fix branch reversion.
|
2021-06-24 01:36:15 -07:00 |
|
github-actions[bot]
|
e8f2752083
|
Branch was auto-updated.
|
2021-06-23 23:37:52 +00:00 |
|
Jose Enrique Hernandez
|
dbdf39cd28
|
Revert "ssa"
|
2021-06-23 17:49:11 -04:00 |
|
github-actions[bot]
|
90263bd1ed
|
Branch was auto-updated.
|
2021-06-23 18:51:06 +00:00 |
|
github-actions[bot]
|
3a7d86f6c3
|
Branch was auto-updated.
|
2021-06-23 17:54:40 +00:00 |
|
github-actions[bot]
|
8894544766
|
Branch was auto-updated.
|
2021-06-23 17:54:35 +00:00 |
|
github-actions[bot]
|
81b916991d
|
Branch was auto-updated.
|
2021-06-22 21:32:16 +00:00 |
|
github-actions[bot]
|
d5533ca607
|
Branch was auto-updated.
|
2021-06-22 21:32:15 +00:00 |
|
github-actions[bot]
|
ab9bf6ee37
|
Branch was auto-updated.
|
2021-06-22 21:32:13 +00:00 |
|
mvelazco
|
e4f5a3894d
|
fixing errors
fixing filter name
|
2021-06-21 17:10:54 -04:00 |
|
mvelazco
|
1b7f966a84
|
re-factoring windows event log cleared detections
|
2021-06-21 16:40:59 -04:00 |
|
mhaag-spl
|
ad85879e89
|
Fixing descriptions
|
2021-06-18 13:41:54 -06:00 |
|
mhaag-spl
|
35492c75fb
|
wrong data
|
2021-06-18 11:00:34 -06:00 |
|
mhaag-spl
|
2e9b99ecf1
|
Updates
|
2021-06-18 10:34:25 -06:00 |
|
mhaag-spl
|
9396034913
|
Remote WMI Command Attempt
|
2021-06-18 10:02:13 -06:00 |
|
mhaag-spl
|
b51f291810
|
Update detect_wmi_event_subscription_persistence.test.yml
|
2021-06-18 08:22:36 -06:00 |
|
P4T12ICK
|
f474be39f6
|
Merge branch 'develop' into labeled_data_for_ml
|
2021-06-18 14:12:44 +02:00 |
|
tccontre
|
0106cc56be
|
ssa5
|
2021-06-18 13:46:01 +02:00 |
|
tccontre
|
57a3dbc5a3
|
ssa4
|
2021-06-18 13:10:16 +02:00 |
|
tccontre
|
2492795204
|
ssa3
|
2021-06-18 13:04:26 +02:00 |
|
github-actions[bot]
|
30011967a1
|
Branch was auto-updated.
|
2021-06-18 07:45:38 +00:00 |
|
github-actions[bot]
|
1a8410d76f
|
Branch was auto-updated.
|
2021-06-18 07:45:37 +00:00 |
|
github-actions[bot]
|
758cd6fad0
|
Branch was auto-updated.
|
2021-06-17 13:27:10 +00:00 |
|
github-actions[bot]
|
2f325f074e
|
Branch was auto-updated.
|
2021-06-17 13:27:09 +00:00 |
|
github-actions[bot]
|
817bee6359
|
Branch was auto-updated.
|
2021-06-17 13:27:01 +00:00 |
|
github-actions[bot]
|
8c3061f290
|
Branch was auto-updated.
|
2021-06-17 13:22:24 +00:00 |
|
github-actions[bot]
|
6ee17226c5
|
Branch was auto-updated.
|
2021-06-17 13:22:17 +00:00 |
|
github-actions[bot]
|
8f58b91da6
|
Branch was auto-updated.
|
2021-06-17 13:22:15 +00:00 |
|
github-actions[bot]
|
83bcadf468
|
Branch was auto-updated.
|
2021-06-17 13:22:14 +00:00 |
|
mhaag-spl
|
99e3af8d10
|
wmi event subscription
|
2021-06-16 13:48:07 -06:00 |
|
tccontre
|
b6ab35397a
|
ssa2
|
2021-06-16 17:11:08 +02:00 |
|
tccontre
|
fb1ce4133b
|
ssa2
|
2021-06-16 17:01:00 +02:00 |
|
tccontre
|
79c86ce0fd
|
ssa
|
2021-06-16 16:19:55 +02:00 |
|
tccontre
|
a1b27f125f
|
Delete allow_operation_with_consent_admin.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:22:00 +02:00 |
|
tccontre
|
9a25b289c3
|
Delete clear_unallocated_sector_using_cipher_app.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:41 +02:00 |
|
tccontre
|
de20af3ac5
|
Delete permission_modification_using_takeown_app.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:28 +02:00 |
|
tccontre
|
150d8c9f34
|
Delete prevent_automatic_repair_mode_using_bcdedit.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:05 +02:00 |
|
tccontre
|
32defb377a
|
Delete start_up_during_safe_mode_boot.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:20:51 +02:00 |
|
tccontre
|
878bf692fa
|
Delete disable_logs_using_wevtutil.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:13:51 +02:00 |
|
mhaag-spl
|
25b1087abc
|
Domain enumeration
|
2021-06-15 14:02:45 -06:00 |
|
mhaag-spl
|
4476dc1705
|
spec chars
|
2021-06-15 13:28:27 -06:00 |
|
mhaag-spl
|
a169f1b226
|
Name fix
|
2021-06-15 13:26:01 -06:00 |
|
mhaag-spl
|
a4d3947ee3
|
System.Reflection.Assembly
System.Reflection.Assembly
|
2021-06-15 13:16:17 -06:00 |
|
github-actions[bot]
|
375416e0a4
|
Branch was auto-updated.
|
2021-06-15 13:44:14 +00:00 |
|
github-actions[bot]
|
85ecf75bb9
|
Branch was auto-updated.
|
2021-06-15 13:44:09 +00:00 |
|