Commit Graph

12216 Commits

Author SHA1 Message Date
Bhavin Patel 3d978aebf3 Branch was auto-updated. 2021-12-01 11:42:55 -08:00
Michael Haag a5d81f3cd5 Merge pull request #1835 from splunk/ssa_minor_update
Ssa minor update
2021-12-01 12:42:32 -07:00
Michael Haag 6999693e3b fixed 2021-12-01 12:34:20 -07:00
Michael Haag f0157408a7 Updated some words 2021-12-01 12:28:38 -07:00
Michael Haag 7300bfe836 Update ssa___resize_shadowstorage_volume.yml 2021-12-01 11:50:33 -07:00
Bhavin Patel 20317e465f Branch was auto-updated. 2021-12-01 10:31:32 -08:00
Bhavin Patel aab2916b16 Branch was auto-updated. 2021-12-01 10:31:30 -08:00
Bhavin Patel f8c2d3a4ba Merge pull request #1852 from splunk/rclone
Rclone Haagrid
2021-12-01 10:31:09 -08:00
d1vious 83c9220411 adding distinct count 2021-11-30 22:08:30 -05:00
d1vious e77a0db31d major fixes to the detection, include, changing logic to use distinct count, added more objects to the body that make the alert useful, as well as renaming, and overhauling description 2021-11-30 20:26:48 -05:00
Bhavin Patel 78be05b638 Branch was auto-updated. 2021-11-30 16:19:11 -08:00
Bhavin Patel 46b368785a Branch was auto-updated. 2021-11-30 16:19:10 -08:00
pyth0n1c a93687e353 Merge pull request #1843 from splunk/issue_1839
Issue 1839 - tested and passed
2021-11-30 16:18:49 -08:00
Bhavin Patel 698356d345 Branch was auto-updated. 2021-11-30 12:02:08 -08:00
Bhavin Patel 78fec6e11e Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel 3bdbba50e0 Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel c5554e4dc8 Merge pull request #1850 from splunk/double-fix
Update detect_html_help_renamed.yml
2021-11-30 12:01:40 -08:00
root e1947f155a Added detection testing service results inDetect RClone Command-Line Usage 2021-11-30 12:56:06 +00:00
Michael Haag b87061f794 rookie mistake 2021-11-30 05:34:29 -07:00
Michael Haag bae2e35b1c fix 2021-11-29 16:19:21 -07:00
mhaag-spl 81e952185e Rclone Haagrid 2021-11-29 15:55:38 -07:00
mhaag-spl fe7817f28a Update detect_html_help_renamed.yml
Fixing issue #1849
2021-11-29 13:43:41 -07:00
Bhavin Patel 024a0be7ff Branch was auto-updated. 2021-11-25 05:31:55 -08:00
Bhavin Patel 73ddbbfd27 Branch was auto-updated. 2021-11-25 05:31:53 -08:00
P4T12ICK 49170484ea Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
2021-11-25 14:31:31 +01:00
Bhavin Patel 80ba7482e4 Branch was auto-updated. 2021-11-25 05:07:25 -08:00
Bhavin Patel c778a2e35c Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel b25f7b80c3 Branch was auto-updated. 2021-11-25 05:07:23 -08:00
tccontre 2451defe2a Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
2021-11-25 14:07:03 +01:00
Detection Testing Service 6d8151d915 Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:13:52 +00:00
root 1b28033819 Added detection testing service results inPowershell Windows Defender Exclusion Commands 2021-11-25 12:13:51 +00:00
Detection Testing Service 724101f8ed Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:00:54 +00:00
root 4ed89e21a2 Added detection testing service results inWindows Defender Exclusion Registry Entry 2021-11-25 12:00:54 +00:00
root b6bb18d20c Added detection testing service results inAdd or Set Windows Defender Exclusion 2021-11-25 11:55:39 +00:00
tccontre dfd210cf29 remcos_evasion 2021-11-25 12:27:39 +01:00
Bhavin Patel 49e82e39ff Branch was auto-updated. 2021-11-25 01:25:30 -08:00
Bhavin Patel 6d291d2600 Branch was auto-updated. 2021-11-25 01:25:29 -08:00
Bhavin Patel 5addbd5188 Branch was auto-updated. 2021-11-25 01:25:27 -08:00
tccontre 06b65d7163 Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
2021-11-25 10:25:05 +01:00
Bhavin Patel 67bbcd8d30 Branch was auto-updated. 2021-11-25 01:04:17 -08:00
Bhavin Patel 0a01fb8181 Branch was auto-updated. 2021-11-25 01:04:17 -08:00
Bhavin Patel c753fb67c3 Branch was auto-updated. 2021-11-25 01:04:15 -08:00
Bhavin Patel 8b9637b86f Branch was auto-updated. 2021-11-25 01:04:14 -08:00
P4T12ICK a14e50ac10 Merge pull request #1847 from splunk/improvements
Improvements
2021-11-25 10:03:58 +01:00
tccontre 295acf12f0 Update ssa___delete_a_net_user.test.yml 2021-11-25 09:30:44 +01:00
P4T12ICK e1844e0333 removed devsecops 2021-11-25 08:55:22 +01:00
P4T12ICK 2993c66134 Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip 2021-11-25 08:37:12 +01:00
P4T12ICK 40a80473a2 Merge branch 'develop' into ssa_anomalous_usage_of_7zip 2021-11-25 08:36:33 +01:00
Bhavin Patel 28ad164d89 Branch was auto-updated. 2021-11-24 23:36:30 -08:00
Bhavin Patel a619c9829e Branch was auto-updated. 2021-11-24 23:36:29 -08:00