Commit Graph

1958 Commits

Author SHA1 Message Date
pyth0n1c 60c5269a6b Branch was auto-updated. 2022-07-19 11:11:40 -07:00
Bhavin Patel cab180904a Update windows_odbcconf_hunting.test.yml 2022-07-19 11:08:43 -07:00
pyth0n1c ea767f9424 Branch was auto-updated. 2022-07-19 10:46:16 -07:00
pyth0n1c 3e21782a1d Branch was auto-updated. 2022-07-19 10:46:07 -07:00
pyth0n1c 61c4cf73d0 Branch was auto-updated. 2022-07-19 10:38:49 -07:00
pyth0n1c 3fd86b91a4 Branch was auto-updated. 2022-07-19 10:38:37 -07:00
pyth0n1c dfca994e8b Branch was auto-updated. 2022-07-19 10:38:35 -07:00
pyth0n1c ebf1bd0676 Branch was auto-updated. 2022-07-19 09:57:28 -07:00
pyth0n1c 721e09fe19 Branch was auto-updated. 2022-07-19 09:57:24 -07:00
pyth0n1c 4037af03b3 Branch was auto-updated. 2022-07-19 09:57:18 -07:00
pyth0n1c d6319a07d8 Branch was auto-updated. 2022-07-19 09:57:10 -07:00
Lou Stella 2ca7679c84 Fixed missing paren, sourcetype 2022-07-19 09:05:19 -05:00
Lou Stella f52137cb8f new mpcmdrun detection 2022-07-19 08:53:04 -05:00
pyth0n1c 76d95fd83f Branch was auto-updated. 2022-07-07 09:47:26 -07:00
pyth0n1c e8299b4726 Branch was auto-updated. 2022-07-07 09:47:25 -07:00
pyth0n1c ce26abbfb7 Branch was auto-updated. 2022-07-07 09:47:23 -07:00
pyth0n1c c220041d5c Branch was auto-updated. 2022-07-07 09:47:21 -07:00
gowthamarajr 9689073946 Edit windows_powerview_kerberos_service_ticket_request detection
Edit the windows_powerview_kerberos_service_ticket_request detection to support xml logs
2022-07-01 16:24:42 -04:00
mhaag-spl bc08339ed4 Update windows_odbcconf_hunting.test.yml 2022-06-30 12:12:23 -06:00
mhaag-spl bf4c3d8a2a ODBC 2022-06-30 10:30:13 -06:00
mhaag-spl db9c7a6e4c Merge branch '4104allday' of https://github.com/splunk/security_content into 4104allday 2022-06-29 12:58:06 -06:00
mhaag-spl 0468911676 fixes2 2022-06-29 12:57:59 -06:00
pyth0n1c e12aa035ef Branch was auto-updated. 2022-06-29 11:55:57 -07:00
pyth0n1c 09d61774a3 Branch was auto-updated. 2022-06-29 11:55:57 -07:00
pyth0n1c c24b800476 Branch was auto-updated. 2022-06-29 11:55:53 -07:00
d1vious b75b56b81d removing test files 2022-06-29 14:18:47 -04:00
mhaag-spl 2920c25c93 fixes 2022-06-29 11:45:21 -06:00
mhaag-spl 8da41163ae reflection 2022-06-29 10:35:44 -06:00
mhaag-spl 23d89687be win32proc 2022-06-29 10:21:35 -06:00
mhaag-spl ca93df0797 adsi 2022-06-29 10:13:46 -06:00
mhaag-spl 0ae31b8ef1 streamreader 2022-06-29 10:00:23 -06:00
pyth0n1c dcfebdea91 Merging latest develop into 4104allday branch in prep for opening PR. 2022-06-27 17:07:31 -07:00
pyth0n1c 3532991644 Updating other spellings of
XmlWinEventLog to 
xmlwineventlog.  At least in 
data ingest, this is case
sensitive.
2022-06-27 16:27:32 -07:00
pyth0n1c 01a50b9294 Branch was auto-updated. 2022-06-24 10:16:00 -07:00
pyth0n1c 493a87e8ec Branch was auto-updated. 2022-06-24 10:15:59 -07:00
mvelazco 757e6b92b8 updating field name to use ScriptBlockText 2022-06-24 11:18:28 -04:00
mvelazco 2637c12014 updating sourcetype to xmlwineventlog 2022-06-24 11:05:02 -04:00
gowthamarajr fd78ddcb6f Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections 2022-06-24 10:17:56 -04:00
gowthamarajr 0f23640526 Updating test file for PowerView SPN detection 2022-06-24 10:17:52 -04:00
patel-bhavin cb150c258e minor edits for yml validation and test file name update 2022-06-23 15:21:30 -07:00
pyth0n1c 3f7cd8dcc3 Branch was auto-updated. 2022-06-23 13:55:29 -07:00
pyth0n1c 6f30962fd6 Branch was auto-updated. 2022-06-23 13:55:27 -07:00
pyth0n1c 83f52ea26d Branch was auto-updated. 2022-06-23 13:55:25 -07:00
Kumar Sharad 8d568ae416 model to detect risky commands 2022-06-23 22:43:22 +02:00
mhaag-spl 056b07a686 remove detection 2022-06-23 11:09:07 -06:00
tccontre 54a23a2a77 Update and rename windows_modify_registry_suppress_win_defender_notifs.test.yml to windows_modify_registry_suppress_win_defender_notif.test.yml 2022-06-23 15:25:17 +02:00
tccontre 5c85507b8f Update and rename windows_modify_registry_disable_windows_security_center_notifs.test.yml to windows_modify_registry_disable_windows_security_center_notif.test.yml 2022-06-23 15:24:51 +02:00
tccontre 71e4bd8ebf Update windows_modify_registry_disable_toast_notifications.test.yml 2022-06-23 13:57:11 +02:00
tccontre 8321cf9c1d Update and rename windows_modify_registry_disable_windows_security_center_notifications.test.yml to windows_modify_registry_disable_windows_security_center_notifs.test.yml 2022-06-23 13:35:02 +02:00
tccontre 2e4eac9eaa Update windows_modify_registry_suppress_win_defender_notifs.test.yml 2022-06-23 13:28:26 +02:00