Commit Graph

12100 Commits

Author SHA1 Message Date
mvelazco 2e86ded458 Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3 2021-11-23 18:42:50 -05:00
mvelazco c13de25f73 update dataset metadata 2021-11-23 18:42:48 -05:00
root 37f4a32647 Added detection testing service results inServices.exe LOLBAS Execution Process Spawn 2021-11-23 22:39:17 +00:00
mvelazco c2fd0a4b29 adding dataset fields 2021-11-23 17:15:06 -05:00
mvelazco 190c0cba21 Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3 2021-11-23 16:00:06 -05:00
mvelazco 5211a97f11 update detections 2021-11-23 16:00:04 -05:00
root c8c731e449 Added detection testing service results inWindows Service Created With Suspicious Service Path 2021-11-23 19:20:48 +00:00
mvelazco 4c696f9ad8 updating detections 2021-11-23 14:01:28 -05:00
mvelazco 9b944b67a2 adding 4 new detections 2021-11-23 10:13:07 -05:00
mvelazco f2a7006482 Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3 2021-11-22 16:21:46 -05:00
mvelazco 8c2baf103e creating an extra detection 2021-11-22 16:21:43 -05:00
Bhavin Patel fe491600d5 Branch was auto-updated. 2021-11-22 02:53:45 -08:00
P4T12ICK 2ee09fbceb Merge pull request #1836 from splunk/ssa_insider_secure_delete
ssa_sdelete
2021-11-22 11:53:20 +01:00
P4T12ICK 8b174b9967 small change 2021-11-22 11:07:10 +01:00
tccontre 45e691bd0d ssa_sdelete 2021-11-22 10:39:45 +01:00
Bhavin Patel 07d7b120bf Branch was auto-updated. 2021-11-22 01:30:02 -08:00
Bhavin Patel 4d5e291714 Branch was auto-updated. 2021-11-22 01:30:00 -08:00
P4T12ICK ff4c8a27d5 Merge pull request #1840 from splunk/ssa_improved_testing_pipeline
Ssa improved testing pipeline
2021-11-22 10:29:41 +01:00
root afc5bf9a9a Added detection testing service results inImpacket Lateral Movement Commandline Parameters 2021-11-19 22:16:55 +00:00
mhaag-spl d679eeef45 Update ssa___sdelete_application_execution.yml 2021-11-19 14:54:26 -07:00
mvelazco 6df7df2622 adding first detection 2021-11-19 16:40:04 -05:00
mhaag-spl dab01c7d47 Update ssa___sdelete_application_execution.yml 2021-11-19 14:29:11 -07:00
Bhavin Patel 8bf462e1d5 Branch was auto-updated. 2021-11-19 10:07:57 -08:00
Bhavin Patel c23dd9d42f Branch was auto-updated. 2021-11-19 10:07:55 -08:00
pyth0n1c 8ef8da6d06 Merge pull request #1834 from splunk/TR-1085_LateralMovement_2
Lateral Movement Content Update #2
2021-11-19 10:07:34 -08:00
Bhavin Patel 9342a79271 Branch was auto-updated. 2021-11-19 10:01:25 -08:00
Bhavin Patel 92dbd495ed Branch was auto-updated. 2021-11-19 10:01:24 -08:00
Bhavin Patel 568af8275c Branch was auto-updated. 2021-11-19 10:01:15 -08:00
pyth0n1c f123e73be6 Merge pull request #1800 from splunk/TR-1085_LateralMovement
Lateral Movement Content Update #1
2021-11-19 10:00:57 -08:00
Bhavin Patel e94ed3f223 Branch was auto-updated. 2021-11-19 03:56:35 -08:00
Bhavin Patel 7f1521b24e Branch was auto-updated. 2021-11-19 03:56:34 -08:00
Bhavin Patel 0d904638f7 Branch was auto-updated. 2021-11-19 03:56:26 -08:00
Bhavin Patel 63ea949fa9 Branch was auto-updated. 2021-11-19 03:56:24 -08:00
P4T12ICK de15a819bb Merge pull request #1842 from splunk/ssa_fix_datasets
fix broken dataset links
2021-11-19 12:56:04 +01:00
P4T12ICK 27d981717d fix broken dataset links 2021-11-19 12:49:53 +01:00
P4T12ICK 04cbf7beaa improved testing 2021-11-19 11:30:43 +01:00
P4T12ICK 7223d1167a improved testing 2021-11-19 10:43:59 +01:00
P4T12ICK 697b15e41b improved testing 2021-11-19 10:18:36 +01:00
P4T12ICK 4d32809923 improved testing 2021-11-19 09:58:55 +01:00
P4T12ICK 3d3fe05447 improved testing 2021-11-19 09:56:54 +01:00
Bhavin Patel f9b37ff8ab Branch was auto-updated. 2021-11-19 00:38:44 -08:00
Bhavin Patel 63eaf77d49 Branch was auto-updated. 2021-11-19 00:38:35 -08:00
Bhavin Patel 2f534f53d9 Branch was auto-updated. 2021-11-19 00:38:34 -08:00
tccontre dda5f844f0 Merge pull request #1838 from splunk/ioc_detections
ioc_detections
2021-11-19 09:38:15 +01:00
mvelazco a9f6b03646 Merge branch 'TR-1085_LateralMovement_2' of github.com:splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 16:26:34 -05:00
mvelazco 399ebb4e7f adding extra detection 2021-11-18 16:26:32 -05:00
Detection Testing Service 0b568f6169 Merge branch 'TR-1085_LateralMovement_2' of https://github.com/splunk/security_content into TR-1085_LateralMovement_2 2021-11-18 21:05:53 +00:00
root f18afbbd8c Added detection testing service results inExecutable File Written in Administrative SMB Share 2021-11-18 21:05:53 +00:00
Bhavin Patel 1539fcb1cc Branch was auto-updated. 2021-11-18 12:58:50 -08:00
Bhavin Patel 266b6e1151 Branch was auto-updated. 2021-11-18 12:58:42 -08:00