Commit Graph

16871 Commits

Author SHA1 Message Date
tccontre 2df3a64798 Rename windows_ingress_tool_transfer_using_explorer_exe.yml to windows_ingress_tool_transfer_using_explorer.yml 2022-08-01 14:23:01 +02:00
tccontre 44517188c1 Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml 2022-08-01 14:22:35 +02:00
tccontre f3f40edf9e Update windows_gather_victim_host_information_camera.yml 2022-08-01 14:22:03 +02:00
tccontre 7ef8d1dadf Update windows_ingress_tool_transfer_using_explorer_exe.test.yml 2022-08-01 14:18:38 +02:00
tccontre d8690a4386 Update windows_ingress_tool_transfer_using_explorer_exe.yml 2022-08-01 14:18:20 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
pyth0n1c f58e086d92 Branch was auto-updated. 2022-07-29 15:44:04 -07:00
Jose Enrique Hernandez 014ea9855d Merge pull request #2311 from splunk/0729_playbooks
Adding hunting playbook
2022-07-29 18:43:40 -04:00
Lou Stella d1f890a4e9 Adding hunting playbook 2022-07-29 17:12:35 -05:00
tccontre a0336d013a dcrat-analytics3 2022-07-29 10:12:22 +02:00
tccontre bcb5aab4ee dcrat-analytics3 2022-07-29 10:06:40 +02:00
research bot b622c65def updating docs and package bits [ci skip] 2022-07-28 22:52:59 +00:00
Bhavin Patel 7bf7bfe134 Merge pull request #2278 from splunk/TR-2219_AzureAD_Password_Srapying
Azure Active Directory Account Takeover Analytic Story
v3.46.0
2022-07-28 14:32:50 -07:00
patel-bhavin 114df09d78 meta updates 2022-07-28 14:18:45 -07:00
Bhavin Patel 1b645a499c Update azure_ad_successful_single_factor_authentication.yml 2022-07-28 14:12:18 -07:00
Bhavin Patel 95e47b7fd4 Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml 2022-07-28 14:11:40 -07:00
Bhavin Patel 22f3d9bfee Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:09:17 -07:00
Bhavin Patel 07290ffeb7 Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:08:32 -07:00
Bhavin Patel 42241b1b2e Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml 2022-07-28 14:07:47 -07:00
Bhavin Patel 72d0a37a12 Update azure_ad_authentication_failed_during_mfa_challenge.yml 2022-07-28 14:05:57 -07:00
Bhavin Patel f22813da22 Update azure_active_directory_high_risk_sign_in.yml 2022-07-28 14:05:14 -07:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
Bhavin Patel 21278f8d68 Merge pull request #2305 from splunk/dcrat-analytics2
dcrat-analytics2
2022-07-28 13:50:05 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Bhavin Patel 19dfced28f Merge pull request #2301 from splunk/haagonymous
Haagnux
2022-07-28 13:47:00 -07:00
Bhavin Patel f2731454b1 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 13:30:37 -07:00
Bhavin Patel 979dd80466 Update windows_system_shutdown_commandline.yml 2022-07-28 13:28:00 -07:00
Bhavin Patel d71ddb7e26 Update windows_system_reboot_commandline.yml 2022-07-28 13:26:54 -07:00
Bhavin Patel c0427508a9 Update windows_command_shell_dcrat_forkbomb_payload.yml 2022-07-28 13:25:36 -07:00
Bhavin Patel 8f78e18334 Update windows_system_logoff_commandline.yml 2022-07-28 13:24:39 -07:00
Bhavin Patel 1498d090fe Update windows_system_reboot_commandline.yml 2022-07-28 13:23:33 -07:00
Bhavin Patel b2d1bdb62e Update windows_system_shutdown_commandline.yml 2022-07-28 13:23:07 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
pyth0n1c e35f6dc30a Branch was auto-updated. 2022-07-28 13:10:57 -07:00
Bhavin Patel 099a7d029a Merge pull request #2293 from splunk/TR-2222_AWS_defense_evasion_story
Tr 2222 aws defense evasion story
2022-07-28 13:10:40 -07:00
Michael Haag 508424da99 Updates 2022-07-28 12:07:05 -06:00
pyth0n1c 6c0c4f75ca Branch was auto-updated. 2022-07-28 10:37:48 -07:00
pyth0n1c 1e03d0fddf Branch was auto-updated. 2022-07-28 10:37:47 -07:00
pyth0n1c d14bb84a81 Branch was auto-updated. 2022-07-28 10:37:44 -07:00
pyth0n1c 1bad5cc933 Branch was auto-updated. 2022-07-28 10:37:43 -07:00
Bhavin Patel 32b7d880eb Merge pull request #2298 from splunk/fix-git-issue-req
fix-git-issue-req
2022-07-28 10:37:26 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre 972bd7b176 Update windows_system_logoff_commandline.yml 2022-07-28 16:12:20 +02:00
tccontre c9611980c2 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 15:31:45 +02:00
tccontre 12ab56093b Merge branch 'dcrat-analytics2' of github.com:splunk/security_content into dcrat-analytics2 2022-07-28 15:29:44 +02:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
pyth0n1c 2f684c5680 Branch was auto-updated. 2022-07-28 06:13:23 -07:00
pyth0n1c cc74cea07f Branch was auto-updated. 2022-07-28 06:13:22 -07:00