3399bc4288
Adding DSRM Account Changes
2022-09-08 20:45:45 +10:00
3d2301f161
Adding DSRM Passwod Reset
2022-09-08 20:13:10 +10:00
8ccec66c07
Adding Rogue DC Detection
2022-09-08 19:43:23 +10:00
66990b409d
Adding Rogue DC Detection
2022-09-08 19:39:52 +10:00
1441cca790
Adding Rogue DC Detection
2022-09-08 18:44:09 +10:00
0b0b19f10d
Adding Rogue DC Detection
2022-09-08 18:39:38 +10:00
32dd94c6ef
Adding DCSync Attack
2022-09-08 18:17:58 +10:00
29da484365
Adding DCSync Attack
2022-09-08 18:14:24 +10:00
925b1eb2cd
DCShadow Detection
2022-09-08 16:08:36 +10:00
f9c3a86423
DCShadow Detection
2022-09-08 15:49:03 +10:00
ab1ba478ae
DCShadow Detection
2022-09-08 14:41:16 +10:00
56ddcbc15c
DCShadow Detection
2022-09-08 14:33:53 +10:00
1d6c0d6350
DCShadow Detection
2022-09-08 14:29:17 +10:00
7692e55d9d
DCShadow Detection
2022-09-07 17:06:59 +10:00
981e2a64cc
Branch was auto-updated.
2022-09-06 14:07:54 -07:00
ae92b16c0a
Merge pull request #2351 from splunk/fixdescriptionpt
...
addedwords
2022-09-06 14:07:21 -07:00
73e84a326d
fixedpathlog
2022-09-06 13:40:08 -07:00
e701306956
Branch was auto-updated.
2022-09-02 19:15:35 -04:00
585f0a407e
Branch was auto-updated.
2022-09-02 19:15:31 -04:00
95e4eb048c
Merge pull request #2359 from splunk/fix_sourcetype_for_linux_kernel_module_detection
...
Update linux_kernel_module_enumeration.test.yml
Since this is such a small and simple fix, I have merged it myself without review.
Note that this was just an update to a test file, not a modification to the detection itself.
2022-09-02 19:15:12 -04:00
5c4d054652
Update linux_kernel_module_enumeration.test.yml
...
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
24c2b5cf82
Adding DCShadow detection
2022-09-02 13:57:00 +10:00
ec35919294
Adding DCShadow detection
2022-09-02 13:45:46 +10:00
e22b274004
Adding DCShadow detection
2022-09-02 13:41:15 +10:00
39083d5a00
Adding DCShadow detection
2022-09-02 13:32:06 +10:00
6ae65351f5
Adding DCShadow detection
2022-09-02 13:01:05 +10:00
537c13d063
addedwords
2022-08-30 11:56:41 -07:00
4457d5d5f1
pushing analytic story
2022-08-29 20:06:06 -04:00
2adb6ca2ff
updating docs and package bits [ci skip]
2022-08-29 17:48:48 +00:00
2dbcc2aa64
Merge pull request #2323 from splunk/eliminate_duplicate_python_requirements_files
...
Eliminate duplicate python requirements files
2022-08-26 16:04:11 -05:00
92e2d97588
Update detection-testing.yml
...
For a quotation mark
2022-08-26 13:52:30 -07:00
8d611bb546
Update detection-testing.yml
...
Updated to use pip cache
2022-08-26 13:50:57 -07:00
baeba5b319
Fixed pathing
...
Fixed pathing to venv and
requirements.txt files.
2022-08-26 13:34:37 -07:00
305a672f51
Delete contentctl_python_platforms_test.yml
...
Removed extra testing workflow. This logic will
be integrated into a separate repo at a later time.
2022-08-26 13:27:01 -07:00
e5962ef678
Update contentctl_python_platforms_test.yml
...
Reduce platforms we are testing
against for now until we can further
improve support.
2022-08-26 12:22:18 -07:00
c1be892bd1
Merge branch 'develop' into eliminate_duplicate_python_requirements_files
2022-08-26 12:09:54 -07:00
9f2fa92efd
Merge pull request #2336 from splunk/hijack
...
HijackThis
2022-08-26 13:42:17 -05:00
bd2d1515cb
Branch was auto-updated.
2022-08-26 10:01:42 -07:00
f9e770eaa5
Update log4shell_cve_2021_44228_exploitation.yml
2022-08-26 11:01:25 -06:00
19b3efc01a
Merge pull request #2321 from splunk/TR_2301
...
Add Linux Living off the land Privilege Escalation Detections
2022-08-26 12:01:19 -05:00
b2941ca736
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
2022-08-26 10:58:35 -06:00
c912c7c939
Update linux_persistence_and_privilege_escalation_risk_behavior.yml
2022-08-26 10:58:17 -06:00
2bfc066411
Branch was auto-updated.
2022-08-26 09:35:15 -07:00
5d8cbb81ca
Branch was auto-updated.
2022-08-26 09:35:15 -07:00
a8097ab665
Merge pull request #2341 from splunk/fix-desc
...
fix-desc
2022-08-26 11:34:56 -05:00
e0f0d48784
minonr text updates
2022-08-26 10:46:51 -05:00
c560685650
Update windows_possible_credential_dumping.yml
2022-08-26 09:18:56 -06:00
346e7000e2
fix-desc
2022-08-26 15:39:48 +02:00
5ddf3c9cf7
Merge branch 'hijack' of https://github.com/splunk/security_content into hijack
2022-08-26 06:01:16 -06:00
c7aba6738e
Update windows_remote_access_software_hunt.yml
2022-08-26 06:01:15 -06:00
dluxtron