Commit Graph

3200 Commits

Author SHA1 Message Date
mvelazco 4de7fe052d Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 13:31:21 -04:00
mvelazco 12a4e2220b adding required fields 2021-09-10 13:17:48 -04:00
Detection Testing Service 97c6190248 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 17:14:51 +00:00
root 2ff8e068bc Added detection testing service results inGetWmiObject Ds Group with PowerShell Script Block 2021-09-10 17:14:50 +00:00
Detection Testing Service c2c6bfd959 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 17:14:09 +00:00
root 56b8a29465 Added detection testing service results inGetDomainGroup with PowerShell Script Block 2021-09-10 17:14:08 +00:00
root 4b038ff4df Added detection testing service results inGetWmiObject Ds Group with PowerShell 2021-09-10 17:14:02 +00:00
Detection Testing Service 1dacb8ca68 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 16:57:12 +00:00
root e6b5c603b8 Added detection testing service results inGetAdGroup with PowerShell 2021-09-10 16:57:11 +00:00
Detection Testing Service 5ad5d39790 Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 16:53:03 +00:00
root ff3b66af53 Added detection testing service results inGetDomainGroup with PowerShell 2021-09-10 16:53:02 +00:00
Detection Testing Service 5a4c89a2cb Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 16:52:08 +00:00
root e9ca2c0a77 Added detection testing service results inElevated Group Discovery With Wmic 2021-09-10 16:52:07 +00:00
root a656d3e187 Added detection testing service results inGetAdGroup with PowerShell Script Block 2021-09-10 16:50:32 +00:00
root cb381af6ba Added detection testing service results inElevated Group Discovery with PowerView 2021-09-10 16:00:25 +00:00
root 20ab50e311 Added detection testing service results inElevated Group Discovery With Net 2021-09-10 15:36:08 +00:00
root 5bddb9ef4e Added detection testing service results inDomain Group Discovery With Wmic 2021-09-10 15:18:41 +00:00
root eebd1ac1cc Added detection testing service results inDomain Group Discovery With Net 2021-09-10 14:53:07 +00:00
root 937fb3ebd3 Added detection testing service results inDomain Group Discovery With Dsquery 2021-09-10 14:30:29 +00:00
mvelazco 0aa0023140 Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6 2021-09-10 09:32:20 -04:00
mvelazco 2d60937410 fixing detection 2021-09-10 09:32:18 -04:00
root 93c7166e8c Added detection testing service results inDomain Group Discovery with Adsisearcher 2021-09-10 00:34:04 +00:00
Bhavin Patel 643d520bcf Branch was auto-updated. 2021-09-09 11:33:18 -07:00
Detection Testing Service dd209addce Merge branch 'Hives' of https://github.com/splunk/security_content into Hives 2021-09-09 18:23:05 +00:00
root 314370ba56 Added detection testing service results inExtraction of Registry Hives 2021-09-09 18:23:05 +00:00
Bhavin Patel 1bbf890c6d Branch was auto-updated. 2021-09-09 11:08:26 -07:00
Bhavin Patel 175892bd60 Branch was auto-updated. 2021-09-09 11:08:20 -07:00
root d86a4debf5 Added detection testing service results inMSHTML Module Load in Office Product 2021-09-09 18:02:13 +00:00
Michael Haag 8a652c31a8 Merge branch 'develop' into Hives 2021-09-09 12:01:38 -06:00
mhaag-spl 431171ec24 Update extraction_of_registry_hives.yml
Forgot quotes and added more slashes.
Fixes for #1634
2021-09-09 11:47:24 -06:00
mhaag-spl 8936651b40 mshtml_module_load_in_office_product 2021-09-09 10:53:47 -06:00
mhaag-spl 317f25ff45 Update office_spawning_control.yml 2021-09-09 10:10:58 -06:00
Bhavin Patel f9fab31d59 Branch was auto-updated. 2021-09-09 00:27:38 -07:00
Bhavin Patel cfdf3ee2f7 Branch was auto-updated. 2021-09-09 00:27:31 -07:00
root 51690c1335 Added detection testing service results inOffice Spawning Control 2021-09-09 02:44:46 +00:00
mhaag-spl 4c927f1513 Merge branch 'Emerging-CVE-2021-40444' of https://github.com/splunk/security_content into Emerging-CVE-2021-40444 2021-09-08 20:21:32 -06:00
Bhavin Patel a0ac9bdb36 Branch was auto-updated. 2021-09-08 18:06:25 -07:00
Bhavin Patel 6ea41bcae2 Branch was auto-updated. 2021-09-08 18:06:22 -07:00
Bhavin Patel dc6cf0e93b Branch was auto-updated. 2021-09-08 18:06:19 -07:00
root 37a2f54c26 Added detection testing service results inRegistry Keys Used For Persistence 2021-09-09 01:00:47 +00:00
Bhavin Patel 6affec77b5 SPL logic was wrong 2021-09-08 17:41:57 -07:00
Bhavin Patel 94526e0ea6 Branch was auto-updated. 2021-09-08 16:38:14 -07:00
Bhavin Patel 306003fb87 Branch was auto-updated. 2021-09-08 16:38:12 -07:00
Bhavin Patel c98d7d9f62 Branch was auto-updated. 2021-09-08 16:38:10 -07:00
Bhavin Patel 76eac8c309 Branch was auto-updated. 2021-09-08 16:38:07 -07:00
root b7be792a06 Added detection testing service results inExtraction of Registry Hives 2021-09-08 23:28:03 +00:00
Bhavin Patel ebf3636b35 Branch was auto-updated. 2021-09-08 15:40:23 -07:00
Bhavin Patel b5d6b91b06 Branch was auto-updated. 2021-09-08 15:40:23 -07:00
Bhavin Patel db6f92bf6b Branch was auto-updated. 2021-09-08 15:40:20 -07:00
Bhavin Patel 09b3747e73 Branch was auto-updated. 2021-09-08 15:40:18 -07:00