mvelazco
|
4de7fe052d
|
Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 13:31:21 -04:00 |
|
mvelazco
|
12a4e2220b
|
adding required fields
|
2021-09-10 13:17:48 -04:00 |
|
Detection Testing Service
|
97c6190248
|
Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 17:14:51 +00:00 |
|
root
|
2ff8e068bc
|
Added detection testing service results inGetWmiObject Ds Group with PowerShell Script Block
|
2021-09-10 17:14:50 +00:00 |
|
Detection Testing Service
|
c2c6bfd959
|
Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 17:14:09 +00:00 |
|
root
|
56b8a29465
|
Added detection testing service results inGetDomainGroup with PowerShell Script Block
|
2021-09-10 17:14:08 +00:00 |
|
root
|
4b038ff4df
|
Added detection testing service results inGetWmiObject Ds Group with PowerShell
|
2021-09-10 17:14:02 +00:00 |
|
Detection Testing Service
|
1dacb8ca68
|
Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 16:57:12 +00:00 |
|
root
|
e6b5c603b8
|
Added detection testing service results inGetAdGroup with PowerShell
|
2021-09-10 16:57:11 +00:00 |
|
Detection Testing Service
|
5ad5d39790
|
Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 16:53:03 +00:00 |
|
root
|
ff3b66af53
|
Added detection testing service results inGetDomainGroup with PowerShell
|
2021-09-10 16:53:02 +00:00 |
|
Detection Testing Service
|
5a4c89a2cb
|
Merge branch 'AD_Discovery_TR-789_6' of https://github.com/splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 16:52:08 +00:00 |
|
root
|
e9ca2c0a77
|
Added detection testing service results inElevated Group Discovery With Wmic
|
2021-09-10 16:52:07 +00:00 |
|
root
|
a656d3e187
|
Added detection testing service results inGetAdGroup with PowerShell Script Block
|
2021-09-10 16:50:32 +00:00 |
|
root
|
cb381af6ba
|
Added detection testing service results inElevated Group Discovery with PowerView
|
2021-09-10 16:00:25 +00:00 |
|
root
|
20ab50e311
|
Added detection testing service results inElevated Group Discovery With Net
|
2021-09-10 15:36:08 +00:00 |
|
root
|
5bddb9ef4e
|
Added detection testing service results inDomain Group Discovery With Wmic
|
2021-09-10 15:18:41 +00:00 |
|
root
|
eebd1ac1cc
|
Added detection testing service results inDomain Group Discovery With Net
|
2021-09-10 14:53:07 +00:00 |
|
root
|
937fb3ebd3
|
Added detection testing service results inDomain Group Discovery With Dsquery
|
2021-09-10 14:30:29 +00:00 |
|
mvelazco
|
0aa0023140
|
Merge branch 'AD_Discovery_TR-789_6' of github.com:splunk/security_content into AD_Discovery_TR-789_6
|
2021-09-10 09:32:20 -04:00 |
|
mvelazco
|
2d60937410
|
fixing detection
|
2021-09-10 09:32:18 -04:00 |
|
root
|
93c7166e8c
|
Added detection testing service results inDomain Group Discovery with Adsisearcher
|
2021-09-10 00:34:04 +00:00 |
|
Bhavin Patel
|
643d520bcf
|
Branch was auto-updated.
|
2021-09-09 11:33:18 -07:00 |
|
Detection Testing Service
|
dd209addce
|
Merge branch 'Hives' of https://github.com/splunk/security_content into Hives
|
2021-09-09 18:23:05 +00:00 |
|
root
|
314370ba56
|
Added detection testing service results inExtraction of Registry Hives
|
2021-09-09 18:23:05 +00:00 |
|
Bhavin Patel
|
1bbf890c6d
|
Branch was auto-updated.
|
2021-09-09 11:08:26 -07:00 |
|
Bhavin Patel
|
175892bd60
|
Branch was auto-updated.
|
2021-09-09 11:08:20 -07:00 |
|
root
|
d86a4debf5
|
Added detection testing service results inMSHTML Module Load in Office Product
|
2021-09-09 18:02:13 +00:00 |
|
Michael Haag
|
8a652c31a8
|
Merge branch 'develop' into Hives
|
2021-09-09 12:01:38 -06:00 |
|
mhaag-spl
|
431171ec24
|
Update extraction_of_registry_hives.yml
Forgot quotes and added more slashes.
Fixes for #1634
|
2021-09-09 11:47:24 -06:00 |
|
mhaag-spl
|
8936651b40
|
mshtml_module_load_in_office_product
|
2021-09-09 10:53:47 -06:00 |
|
mhaag-spl
|
317f25ff45
|
Update office_spawning_control.yml
|
2021-09-09 10:10:58 -06:00 |
|
Bhavin Patel
|
f9fab31d59
|
Branch was auto-updated.
|
2021-09-09 00:27:38 -07:00 |
|
Bhavin Patel
|
cfdf3ee2f7
|
Branch was auto-updated.
|
2021-09-09 00:27:31 -07:00 |
|
root
|
51690c1335
|
Added detection testing service results inOffice Spawning Control
|
2021-09-09 02:44:46 +00:00 |
|
mhaag-spl
|
4c927f1513
|
Merge branch 'Emerging-CVE-2021-40444' of https://github.com/splunk/security_content into Emerging-CVE-2021-40444
|
2021-09-08 20:21:32 -06:00 |
|
Bhavin Patel
|
a0ac9bdb36
|
Branch was auto-updated.
|
2021-09-08 18:06:25 -07:00 |
|
Bhavin Patel
|
6ea41bcae2
|
Branch was auto-updated.
|
2021-09-08 18:06:22 -07:00 |
|
Bhavin Patel
|
dc6cf0e93b
|
Branch was auto-updated.
|
2021-09-08 18:06:19 -07:00 |
|
root
|
37a2f54c26
|
Added detection testing service results inRegistry Keys Used For Persistence
|
2021-09-09 01:00:47 +00:00 |
|
Bhavin Patel
|
6affec77b5
|
SPL logic was wrong
|
2021-09-08 17:41:57 -07:00 |
|
Bhavin Patel
|
94526e0ea6
|
Branch was auto-updated.
|
2021-09-08 16:38:14 -07:00 |
|
Bhavin Patel
|
306003fb87
|
Branch was auto-updated.
|
2021-09-08 16:38:12 -07:00 |
|
Bhavin Patel
|
c98d7d9f62
|
Branch was auto-updated.
|
2021-09-08 16:38:10 -07:00 |
|
Bhavin Patel
|
76eac8c309
|
Branch was auto-updated.
|
2021-09-08 16:38:07 -07:00 |
|
root
|
b7be792a06
|
Added detection testing service results inExtraction of Registry Hives
|
2021-09-08 23:28:03 +00:00 |
|
Bhavin Patel
|
ebf3636b35
|
Branch was auto-updated.
|
2021-09-08 15:40:23 -07:00 |
|
Bhavin Patel
|
b5d6b91b06
|
Branch was auto-updated.
|
2021-09-08 15:40:23 -07:00 |
|
Bhavin Patel
|
db6f92bf6b
|
Branch was auto-updated.
|
2021-09-08 15:40:20 -07:00 |
|
Bhavin Patel
|
09b3747e73
|
Branch was auto-updated.
|
2021-09-08 15:40:18 -07:00 |
|