Commit Graph

78 Commits

Author SHA1 Message Date
research bot 2c9e7b58a8 updating docs and package bits [ci skip] 2021-08-18 16:56:31 +00:00
P4T12ICK 76bbbe4609 add deployments to baselines 2021-07-21 11:31:40 +02:00
P4T12ICK 9568fc7807 migrated baselines into detections folder 2021-07-20 13:19:22 +02:00
P4T12ICK 65a92a64e1 add analytic types to detections 2021-07-19 16:49:33 +02:00
research bot 9987d171cc updating docs and package bits [ci skip] 2021-07-02 16:06:07 +00:00
divious1 f262360d0a updated CloudTrails to AWS CloudTrails 2021-06-25 14:50:50 -04:00
github-actions[bot] da3ac94544 Branch was auto-updated. 2021-06-22 14:26:39 +00:00
peter-cg eeddaf1200 Removing old, deprecated version of the parent-child-lolbas detection 2021-06-22 09:23:48 -05:00
mhaag-spl 9396034913 Remote WMI Command Attempt 2021-06-18 10:02:13 -06:00
mhaag-spl 2b5eb6fbc4 Masquerading - detections + analytic story 2021-04-26 13:38:52 -06:00
divious1 a8a69a97a5 renaming product to new name 2021-04-21 18:23:09 -04:00
divious1 5c5139cf5a moved detection ssa___rare_parent_process_relationship_lolbas to deprecated 2021-04-21 13:17:07 -04:00
P4T12ICK b597a6f226 bug fixes 2021-04-13 09:08:34 +02:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
P4T12ICK d847a4cdd7 add required fields 2021-03-11 10:52:53 +01:00
P4T12ICK 6e826b4e68 add required fields and check 2021-03-11 09:11:48 +01:00
P4T12ICK 7b99551756 add required fields and check 2021-03-11 09:08:15 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
P4T12ICK c81fd82c03 WIP 2021-03-10 15:50:26 +01:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
divious1 e666dd1998 moved back to endpoint 2021-03-05 11:49:49 -05:00
mhaag-spl 66b650d835 Windows DisableAntiSpyware Registry 2021-03-02 10:42:08 -07:00
mhaag-spl 9794fd13fb Any PowerShell DownloadString 2021-03-01 16:02:36 -07:00
divious1 6094970bb5 updated analytics story tag 2021-02-12 12:32:25 -05:00
divious1 7615d5ec81 fixing merge conflicts 2021-02-12 12:27:00 -05:00
divious1 b75d826a2e Merge branch 'develop' into TR-377_add_datamodel_field 2021-02-12 12:04:21 -05:00
divious1 b58843ca9f added datamodels as an array 2021-02-10 22:35:58 -05:00
divious1 d0c9c92857 added datamodel field and made all objects also pretty via new tool called pretty_yaml.py 2021-02-10 22:11:24 -05:00
Bhavin Patel 33af6dfb13 Merge branch 'develop' into cloudfederationcredentialabuse 2021-02-08 11:29:49 -08:00
divious1 1ec15cf044 renamed on all detections 2021-02-08 10:18:16 -05:00
divious1 b68e05685e modified type for detections 2021-02-05 14:35:49 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
Rod Soto b5befe9b5d tagsonsearchescloudfederated 2021-01-28 14:00:36 -05:00
github-actions[bot] 0a8a41d83e Branch was auto-updated. 2021-01-21 22:26:19 +00:00
Bhavin Patel 4da2f7e4c4 Merge branch 'develop' into lookup_name_duplicate 2021-01-19 08:59:30 -08:00
P4T12ICK 442d944890 new test file 2021-01-19 14:44:01 +01:00
P4T12ICK fc19205eb1 new test file 2021-01-19 14:39:44 +01:00
P4T12ICK 477221da99 detection testing 2021-01-18 15:46:53 +01:00
P4T12ICK 44bf41a678 new test file 2021-01-18 15:22:05 +01:00
P4T12ICK 27b27a5b59 detection testing branch 2021-01-18 14:10:47 +01:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
bpatel c5e6238e20 updated lookup name 2021-01-13 17:21:27 -08:00
bpatel 24128d4982 updating lookup name to avoid duplicates and deprecattion 2021-01-13 15:34:24 -08:00
P4T12ICK 843d99f9d9 moved detections 2021-01-13 17:59:31 +01:00
P4T12ICK 7006049099 merged with develop 2021-01-13 14:26:00 +01:00
P4T12ICK 4a626c5246 merged with develop 2021-01-13 14:21:09 +01:00
P4T12ICK 8d40be7a12 improved detections and tests 2021-01-13 14:05:53 +01:00
P4T12ICK 994989b086 improved detections and tests 2021-01-12 15:38:32 +01:00
P4T12ICK d0bea9eecf detection testing cloud 2021-01-08 15:51:45 +01:00
bpatel 88feb34271 incorrect deprecation 2021-01-05 14:53:52 -08:00