Bhavin Patel
|
3d978aebf3
|
Branch was auto-updated.
|
2021-12-01 11:42:55 -08:00 |
|
Michael Haag
|
a5d81f3cd5
|
Merge pull request #1835 from splunk/ssa_minor_update
Ssa minor update
|
2021-12-01 12:42:32 -07:00 |
|
Michael Haag
|
6999693e3b
|
fixed
|
2021-12-01 12:34:20 -07:00 |
|
Michael Haag
|
f0157408a7
|
Updated some words
|
2021-12-01 12:28:38 -07:00 |
|
Michael Haag
|
7300bfe836
|
Update ssa___resize_shadowstorage_volume.yml
|
2021-12-01 11:50:33 -07:00 |
|
Bhavin Patel
|
20317e465f
|
Branch was auto-updated.
|
2021-12-01 10:31:32 -08:00 |
|
Bhavin Patel
|
aab2916b16
|
Branch was auto-updated.
|
2021-12-01 10:31:30 -08:00 |
|
Bhavin Patel
|
f8c2d3a4ba
|
Merge pull request #1852 from splunk/rclone
Rclone Haagrid
|
2021-12-01 10:31:09 -08:00 |
|
d1vious
|
83c9220411
|
adding distinct count
|
2021-11-30 22:08:30 -05:00 |
|
d1vious
|
e77a0db31d
|
major fixes to the detection, include, changing logic to use distinct count, added more objects to the body that make the alert useful, as well as renaming, and overhauling description
|
2021-11-30 20:26:48 -05:00 |
|
Bhavin Patel
|
78be05b638
|
Branch was auto-updated.
|
2021-11-30 16:19:11 -08:00 |
|
Bhavin Patel
|
46b368785a
|
Branch was auto-updated.
|
2021-11-30 16:19:10 -08:00 |
|
pyth0n1c
|
a93687e353
|
Merge pull request #1843 from splunk/issue_1839
Issue 1839 - tested and passed
|
2021-11-30 16:18:49 -08:00 |
|
Bhavin Patel
|
698356d345
|
Branch was auto-updated.
|
2021-11-30 12:02:08 -08:00 |
|
Bhavin Patel
|
78fec6e11e
|
Branch was auto-updated.
|
2021-11-30 12:02:05 -08:00 |
|
Bhavin Patel
|
3bdbba50e0
|
Branch was auto-updated.
|
2021-11-30 12:02:05 -08:00 |
|
Bhavin Patel
|
c5554e4dc8
|
Merge pull request #1850 from splunk/double-fix
Update detect_html_help_renamed.yml
|
2021-11-30 12:01:40 -08:00 |
|
root
|
e1947f155a
|
Added detection testing service results inDetect RClone Command-Line Usage
|
2021-11-30 12:56:06 +00:00 |
|
Michael Haag
|
b87061f794
|
rookie mistake
|
2021-11-30 05:34:29 -07:00 |
|
Michael Haag
|
bae2e35b1c
|
fix
|
2021-11-29 16:19:21 -07:00 |
|
mhaag-spl
|
81e952185e
|
Rclone Haagrid
|
2021-11-29 15:55:38 -07:00 |
|
mhaag-spl
|
fe7817f28a
|
Update detect_html_help_renamed.yml
Fixing issue #1849
|
2021-11-29 13:43:41 -07:00 |
|
Bhavin Patel
|
024a0be7ff
|
Branch was auto-updated.
|
2021-11-25 05:31:55 -08:00 |
|
Bhavin Patel
|
73ddbbfd27
|
Branch was auto-updated.
|
2021-11-25 05:31:53 -08:00 |
|
P4T12ICK
|
49170484ea
|
Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
|
2021-11-25 14:31:31 +01:00 |
|
Bhavin Patel
|
80ba7482e4
|
Branch was auto-updated.
|
2021-11-25 05:07:25 -08:00 |
|
Bhavin Patel
|
c778a2e35c
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
Bhavin Patel
|
b25f7b80c3
|
Branch was auto-updated.
|
2021-11-25 05:07:23 -08:00 |
|
tccontre
|
2451defe2a
|
Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
|
2021-11-25 14:07:03 +01:00 |
|
Detection Testing Service
|
6d8151d915
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:13:52 +00:00 |
|
root
|
1b28033819
|
Added detection testing service results inPowershell Windows Defender Exclusion Commands
|
2021-11-25 12:13:51 +00:00 |
|
Detection Testing Service
|
724101f8ed
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:00:54 +00:00 |
|
root
|
4ed89e21a2
|
Added detection testing service results inWindows Defender Exclusion Registry Entry
|
2021-11-25 12:00:54 +00:00 |
|
root
|
b6bb18d20c
|
Added detection testing service results inAdd or Set Windows Defender Exclusion
|
2021-11-25 11:55:39 +00:00 |
|
tccontre
|
dfd210cf29
|
remcos_evasion
|
2021-11-25 12:27:39 +01:00 |
|
Bhavin Patel
|
49e82e39ff
|
Branch was auto-updated.
|
2021-11-25 01:25:30 -08:00 |
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
Bhavin Patel
|
5addbd5188
|
Branch was auto-updated.
|
2021-11-25 01:25:27 -08:00 |
|
tccontre
|
06b65d7163
|
Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
|
2021-11-25 10:25:05 +01:00 |
|
Bhavin Patel
|
67bbcd8d30
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
Bhavin Patel
|
0a01fb8181
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
Bhavin Patel
|
c753fb67c3
|
Branch was auto-updated.
|
2021-11-25 01:04:15 -08:00 |
|
Bhavin Patel
|
8b9637b86f
|
Branch was auto-updated.
|
2021-11-25 01:04:14 -08:00 |
|
P4T12ICK
|
a14e50ac10
|
Merge pull request #1847 from splunk/improvements
Improvements
|
2021-11-25 10:03:58 +01:00 |
|
tccontre
|
295acf12f0
|
Update ssa___delete_a_net_user.test.yml
|
2021-11-25 09:30:44 +01:00 |
|
P4T12ICK
|
e1844e0333
|
removed devsecops
|
2021-11-25 08:55:22 +01:00 |
|
P4T12ICK
|
2993c66134
|
Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:37:12 +01:00 |
|
P4T12ICK
|
40a80473a2
|
Merge branch 'develop' into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:36:33 +01:00 |
|
Bhavin Patel
|
28ad164d89
|
Branch was auto-updated.
|
2021-11-24 23:36:30 -08:00 |
|
Bhavin Patel
|
a619c9829e
|
Branch was auto-updated.
|
2021-11-24 23:36:29 -08:00 |
|