research bot
|
2c9e7b58a8
|
updating docs and package bits [ci skip]
|
2021-08-18 16:56:31 +00:00 |
|
P4T12ICK
|
76bbbe4609
|
add deployments to baselines
|
2021-07-21 11:31:40 +02:00 |
|
P4T12ICK
|
9568fc7807
|
migrated baselines into detections folder
|
2021-07-20 13:19:22 +02:00 |
|
P4T12ICK
|
65a92a64e1
|
add analytic types to detections
|
2021-07-19 16:49:33 +02:00 |
|
research bot
|
9987d171cc
|
updating docs and package bits [ci skip]
|
2021-07-02 16:06:07 +00:00 |
|
divious1
|
f262360d0a
|
updated CloudTrails to AWS CloudTrails
|
2021-06-25 14:50:50 -04:00 |
|
github-actions[bot]
|
da3ac94544
|
Branch was auto-updated.
|
2021-06-22 14:26:39 +00:00 |
|
peter-cg
|
eeddaf1200
|
Removing old, deprecated version of the parent-child-lolbas detection
|
2021-06-22 09:23:48 -05:00 |
|
mhaag-spl
|
9396034913
|
Remote WMI Command Attempt
|
2021-06-18 10:02:13 -06:00 |
|
mhaag-spl
|
2b5eb6fbc4
|
Masquerading - detections + analytic story
|
2021-04-26 13:38:52 -06:00 |
|
divious1
|
a8a69a97a5
|
renaming product to new name
|
2021-04-21 18:23:09 -04:00 |
|
divious1
|
5c5139cf5a
|
moved detection ssa___rare_parent_process_relationship_lolbas to deprecated
|
2021-04-21 13:17:07 -04:00 |
|
P4T12ICK
|
b597a6f226
|
bug fixes
|
2021-04-13 09:08:34 +02:00 |
|
P4T12ICK
|
edaf9598f2
|
fixed merging issues
|
2021-03-11 19:03:54 +01:00 |
|
P4T12ICK
|
d847a4cdd7
|
add required fields
|
2021-03-11 10:52:53 +01:00 |
|
P4T12ICK
|
6e826b4e68
|
add required fields and check
|
2021-03-11 09:11:48 +01:00 |
|
P4T12ICK
|
7b99551756
|
add required fields and check
|
2021-03-11 09:08:15 +01:00 |
|
mhaag-spl
|
b15aaa55df
|
Moving non-passed to experimental and deprecating some
|
2021-03-10 13:27:00 -07:00 |
|
P4T12ICK
|
c81fd82c03
|
WIP
|
2021-03-10 15:50:26 +01:00 |
|
P4T12ICK
|
7c134dbb5d
|
WIP
|
2021-03-10 14:44:44 +01:00 |
|
divious1
|
e666dd1998
|
moved back to endpoint
|
2021-03-05 11:49:49 -05:00 |
|
mhaag-spl
|
66b650d835
|
Windows DisableAntiSpyware Registry
|
2021-03-02 10:42:08 -07:00 |
|
mhaag-spl
|
9794fd13fb
|
Any PowerShell DownloadString
|
2021-03-01 16:02:36 -07:00 |
|
divious1
|
6094970bb5
|
updated analytics story tag
|
2021-02-12 12:32:25 -05:00 |
|
divious1
|
7615d5ec81
|
fixing merge conflicts
|
2021-02-12 12:27:00 -05:00 |
|
divious1
|
b75d826a2e
|
Merge branch 'develop' into TR-377_add_datamodel_field
|
2021-02-12 12:04:21 -05:00 |
|
divious1
|
b58843ca9f
|
added datamodels as an array
|
2021-02-10 22:35:58 -05:00 |
|
divious1
|
d0c9c92857
|
added datamodel field and made all objects also pretty via new tool called pretty_yaml.py
|
2021-02-10 22:11:24 -05:00 |
|
Bhavin Patel
|
33af6dfb13
|
Merge branch 'develop' into cloudfederationcredentialabuse
|
2021-02-08 11:29:49 -08:00 |
|
divious1
|
1ec15cf044
|
renamed on all detections
|
2021-02-08 10:18:16 -05:00 |
|
divious1
|
b68e05685e
|
modified type for detections
|
2021-02-05 14:35:49 -05:00 |
|
divious1
|
e14fade976
|
adding product tag to all detections
|
2021-02-03 21:42:46 -05:00 |
|
Rod Soto
|
b5befe9b5d
|
tagsonsearchescloudfederated
|
2021-01-28 14:00:36 -05:00 |
|
github-actions[bot]
|
0a8a41d83e
|
Branch was auto-updated.
|
2021-01-21 22:26:19 +00:00 |
|
Bhavin Patel
|
4da2f7e4c4
|
Merge branch 'develop' into lookup_name_duplicate
|
2021-01-19 08:59:30 -08:00 |
|
P4T12ICK
|
442d944890
|
new test file
|
2021-01-19 14:44:01 +01:00 |
|
P4T12ICK
|
fc19205eb1
|
new test file
|
2021-01-19 14:39:44 +01:00 |
|
P4T12ICK
|
477221da99
|
detection testing
|
2021-01-18 15:46:53 +01:00 |
|
P4T12ICK
|
44bf41a678
|
new test file
|
2021-01-18 15:22:05 +01:00 |
|
P4T12ICK
|
27b27a5b59
|
detection testing branch
|
2021-01-18 14:10:47 +01:00 |
|
P4T12ICK
|
c871d6804a
|
improved detections and tests
|
2021-01-14 15:01:16 +01:00 |
|
bpatel
|
c5e6238e20
|
updated lookup name
|
2021-01-13 17:21:27 -08:00 |
|
bpatel
|
24128d4982
|
updating lookup name to avoid duplicates and deprecattion
|
2021-01-13 15:34:24 -08:00 |
|
P4T12ICK
|
843d99f9d9
|
moved detections
|
2021-01-13 17:59:31 +01:00 |
|
P4T12ICK
|
7006049099
|
merged with develop
|
2021-01-13 14:26:00 +01:00 |
|
P4T12ICK
|
4a626c5246
|
merged with develop
|
2021-01-13 14:21:09 +01:00 |
|
P4T12ICK
|
8d40be7a12
|
improved detections and tests
|
2021-01-13 14:05:53 +01:00 |
|
P4T12ICK
|
994989b086
|
improved detections and tests
|
2021-01-12 15:38:32 +01:00 |
|
P4T12ICK
|
d0bea9eecf
|
detection testing cloud
|
2021-01-08 15:51:45 +01:00 |
|
bpatel
|
88feb34271
|
incorrect deprecation
|
2021-01-05 14:53:52 -08:00 |
|