 mhaag-spl
|
676a51159e
|
Update detect_mshta_inline_hta_execution.yml
|
2021-01-20 12:53:19 -07:00 |
|
|
mhaag-spl
|
dfc9ac84c5
|
Update detect_mshta_inline_hta_execution.yml
|
2021-01-20 12:48:28 -07:00 |
|
|
mhaag-spl
|
5e516b427e
|
Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild
|
2021-01-20 12:44:24 -07:00 |
|
|
mhaag-spl
|
5b0ff63278
|
rename mshta inline hta execution
|
2021-01-20 12:44:21 -07:00 |
|
|
root
|
db1265ad84
|
Added detection testing service results inDetect mshta url in command line
|
2021-01-20 19:24:25 +00:00 |
|
|
mhaag-spl
|
1d11230510
|
MSHTA
Updated story
added mshta url in cmdline analytic
|
2021-01-20 12:00:25 -07:00 |
|
|
mhaag-spl
|
4299138f97
|
Update detect_rundll32_inline_hta_execution.yml
|
2021-01-20 11:43:42 -07:00 |
|
|
root
|
267b33b9b4
|
Added detection testing service results inDetect rundll32 executing hta with inline protocols
|
2021-01-20 18:13:10 +00:00 |
|
|
mhaag-spl
|
ed6e40433c
|
rundll32 inline hta
Rundll32 inline hta execution
|
2021-01-20 10:48:25 -07:00 |
|
|
Michael Haag
|
bf919b37a5
|
Merge branch 'develop' into msbuild
|
2021-01-19 15:36:03 -07:00 |
|
|
Detection Testing Service
|
55d2921458
|
Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild
|
2021-01-19 22:12:28 +00:00 |
|
|
root
|
edd77b709f
|
Added detection testing service results inDetect microsoft.workflow.compiler.exe usage
|
2021-01-19 22:12:26 +00:00 |
|
|
root
|
5a22ce57f6
|
Added detection testing service results inDetect microsoft.workflow.compiler.exe rename
|
2021-01-19 22:11:46 +00:00 |
|
|
mhaag-spl
|
9514ec2d50
|
Update trusted_developer_utilities_proxy_execution.yml
|
2021-01-19 14:48:31 -07:00 |
|
|
mhaag-spl
|
8f5f82cb56
|
Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild
|
2021-01-19 14:45:04 -07:00 |
|
|
mhaag-spl
|
d6a9bf502f
|
Microsoft Workflow Compiler
Adding analytics for microsoft.workflow.compiler.exe.
|
2021-01-19 14:45:02 -07:00 |
|
|
Detection Testing Service
|
778c81b2d1
|
Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild
|
2021-01-19 21:42:58 +00:00 |
|
|
root
|
b355147e2b
|
Added detection testing service results inDetect renamed msbuild execution
|
2021-01-19 21:42:57 +00:00 |
|
|
root
|
f26d176b8c
|
Added detection testing service results inDetect moved msbuild execution
|
2021-01-19 21:37:47 +00:00 |
|
|
root
|
ad1564ceb7
|
Added detection testing service results inDetect wmiprvse spawn msbuild
|
2021-01-19 21:01:30 +00:00 |
|
|
mhaag-spl
|
44a9d0bc8c
|
URL Fixes
Fixing all the URLs
|
2021-01-19 13:43:37 -07:00 |
|
|
mhaag-spl
|
420bc3fc62
|
Update suspicious_msbuild_rename.yml
|
2021-01-19 13:22:44 -07:00 |
|
|
mhaag-spl
|
65b4f2827b
|
Update suspicious_msbuild_rename.yml
|
2021-01-19 13:19:38 -07:00 |
|
|
mhaag-spl
|
cdb6d034c4
|
Removing netconn
|
2021-01-19 12:23:00 -07:00 |
|
|
research bot
|
15c4883ef5
|
updating docs and package bits [ci skip]
|
2021-01-19 18:27:52 +00:00 |
|
|
Jose Enrique Hernandez
|
3a81e29abb
|
Merge pull request #1115 from splunk/add_notables
added notables again
v3.12.0
|
2021-01-19 13:12:29 -05:00 |
|
|
divious1
|
494684ac35
|
added notables again
|
2021-01-19 13:08:54 -05:00 |
|
|
research bot
|
c0fbbfda16
|
updating docs and package bits [ci skip]
|
2021-01-19 16:47:19 +00:00 |
|
|
github-actions[bot]
|
b5655d40b4
|
Branch was auto-updated.
|
2021-01-19 16:26:57 +00:00 |
|
|
Jose Enrique Hernandez
|
c05ee8d29d
|
Merge pull request #1091 from splunk/dependabot/pip/azure-core-1.10.0
Bump azure-core from 1.9.0 to 1.10.0
|
2021-01-19 11:26:31 -05:00 |
|
|
mhaag-spl
|
3fa5c378cc
|
Timestamp
Trying to fix :)
|
2021-01-19 08:21:59 -07:00 |
|
|
Jose Enrique Hernandez
|
4153917caf
|
Merge branch 'develop' into dependabot/pip/azure-core-1.10.0
|
2021-01-18 16:02:31 -05:00 |
|
|
github-actions[bot]
|
d6fa6a6b5d
|
Branch was auto-updated.
|
2021-01-18 15:43:18 +00:00 |
|
|
dependabot[bot]
|
7ee039fed9
|
Merge pull request #1111 from splunk/dependabot/pip/pyjwt-2.0.1
|
2021-01-18 15:42:57 +00:00 |
|
|
github-actions[bot]
|
1862ec83c8
|
Branch was auto-updated.
|
2021-01-18 15:07:03 +00:00 |
|
|
github-actions[bot]
|
e485b54b05
|
Branch was auto-updated.
|
2021-01-18 15:07:01 +00:00 |
|
|
dependabot[bot]
|
943c63ca89
|
Merge pull request #1110 from splunk/dependabot/pip/mysql-connector-python-8.0.23
|
2021-01-18 15:06:40 +00:00 |
|
|
github-actions[bot]
|
93bee4b41d
|
Branch was auto-updated.
|
2021-01-18 15:01:16 +00:00 |
|
|
github-actions[bot]
|
4b4ddd6562
|
Branch was auto-updated.
|
2021-01-18 15:01:15 +00:00 |
|
|
github-actions[bot]
|
3e09d68dfc
|
Branch was auto-updated.
|
2021-01-18 15:01:13 +00:00 |
|
|
dependabot[bot]
|
592ea03f9c
|
Merge pull request #1112 from splunk/dependabot/pip/boto3-1.16.56
|
2021-01-18 15:00:28 +00:00 |
|
|
github-actions[bot]
|
6c3887fbad
|
Branch was auto-updated.
|
2021-01-18 14:54:58 +00:00 |
|
|
github-actions[bot]
|
ee119695ee
|
Branch was auto-updated.
|
2021-01-18 14:54:57 +00:00 |
|
|
github-actions[bot]
|
605db3faa9
|
Branch was auto-updated.
|
2021-01-18 14:54:55 +00:00 |
|
|
github-actions[bot]
|
f3efa92e5e
|
Branch was auto-updated.
|
2021-01-18 14:54:54 +00:00 |
|
|
dependabot[bot]
|
14233ee019
|
Merge pull request #1108 from splunk/dependabot/pip/deprecated-1.2.11
|
2021-01-18 14:54:32 +00:00 |
|
|
github-actions[bot]
|
439e41c56c
|
Branch was auto-updated.
|
2021-01-18 14:49:23 +00:00 |
|
|
github-actions[bot]
|
cff2962651
|
Branch was auto-updated.
|
2021-01-18 14:49:22 +00:00 |
|
|
github-actions[bot]
|
26b1b533cd
|
Branch was auto-updated.
|
2021-01-18 14:49:20 +00:00 |
|
|
github-actions[bot]
|
ea6ed1f13d
|
Branch was auto-updated.
|
2021-01-18 14:49:19 +00:00 |
|