Commit Graph

7718 Commits

Author SHA1 Message Date
patel-bhavin 6db4dbc689 one more time 2023-03-07 14:34:30 -08:00
patel-bhavin 7f8f6fc65d updating yml error 2023-03-07 14:19:27 -08:00
patel-bhavin 749e244270 search formatting errors 2023-03-07 13:48:44 -08:00
srv-rr-gh-researchbt a1a023c28c Branch was auto-updated. 2023-03-06 10:54:19 -08:00
Bhavin Patel 07d1fc4a28 Merge branch 'develop' into TR_2410_Domain_Controller_Attacks 2023-03-06 10:19:45 -08:00
mvelazco 145881799d fixing name 2023-03-03 17:33:42 -05:00
Michael Haag cea7d34435 not datamodel 2023-03-03 14:38:03 -07:00
srv-rr-gh-researchbt d217c5e1d8 Branch was auto-updated. 2023-03-03 13:30:55 -08:00
srv-rr-gh-researchbt d3c54a2fed Branch was auto-updated. 2023-03-03 12:29:23 -08:00
srv-rr-gh-researchbt 8b0134ca68 Branch was auto-updated. 2023-03-03 12:29:07 -08:00
pyth0n1c cdf125520f Updating the date of the detection and
kicking off cicd again
2023-03-03 12:03:45 -08:00
srv-rr-gh-researchbt c5ef4b5639 Branch was auto-updated. 2023-03-03 12:02:58 -08:00
srv-rr-gh-researchbt 9ecd1790eb Branch was auto-updated. 2023-03-03 12:02:52 -08:00
srv-rr-gh-researchbt 18736c7d6a Branch was auto-updated. 2023-03-03 12:02:50 -08:00
srv-rr-gh-researchbt ece215b611 Branch was auto-updated. 2023-03-03 12:02:49 -08:00
patel-bhavin b075c902a1 remove old classic detectionn 2023-03-03 11:49:27 -08:00
patel-bhavin 0ae7ff4b85 adding missing file 2023-03-03 11:41:45 -08:00
patel-bhavin fb81b0af9d merge with develop 2023-03-03 11:17:15 -08:00
Michael Haag f239a658b3 Sliver 2023-03-03 05:59:36 -07:00
patel-bhavin f891a64533 update spl errror 2023-03-02 16:55:23 -08:00
patel-bhavin 0dffcb450f checking 2023-03-02 15:52:15 -08:00
Michael Haag c08564d2d7 Update suspicious_reg_exe_process.yml 2023-03-02 08:24:32 -07:00
Michael Haag cdd7de9ad4 Update suspicious_rundll32_dllregisterserver.yml 2023-03-02 08:21:07 -07:00
Michael Haag 38fc323b98 Update suspicious_rundll32_dllregisterserver.yml 2023-03-02 08:19:01 -07:00
Michael Haag 1099e16cf8 Update suspicious_regsvr32_register_suspicious_path.yml 2023-03-02 07:13:02 -07:00
Michael Haag cef780f011 Update suspicious_regsvr32_register_suspicious_path.yml 2023-03-02 07:08:40 -07:00
srv-rr-gh-researchbt 4fde829b48 Branch was auto-updated. 2023-03-01 14:16:07 -08:00
srv-rr-gh-researchbt fc5424b876 Branch was auto-updated. 2023-03-01 14:16:05 -08:00
srv-rr-gh-researchbt 29fbbecb79 Branch was auto-updated. 2023-03-01 14:16:02 -08:00
patel-bhavin c99fe588ea remove it from 3.61.0 2023-03-01 14:11:36 -08:00
Bhavin Patel ae3ef32e0a Update suspicious_process_file_path.yml 2023-03-01 12:38:01 -08:00
Bhavin Patel e904ff4e1e Update suspicious_process_file_path.yml 2023-03-01 11:08:40 -08:00
Bhavin Patel 4aaa2424c3 Update suspicious_process_file_path.yml 2023-03-01 11:04:11 -08:00
Bhavin Patel bbb9b5a421 Update suspicious_process_file_path.yml 2023-03-01 10:53:03 -08:00
Michael Haag 631c9d4cf0 XML driver load
Updated to XML logs
2023-03-01 09:16:22 -07:00
tccontre 0de5be9030 Update suspicious_process_file_path.yml 2023-03-01 14:05:56 +01:00
tccontre a21deeb7a0 Update suspicious_process_file_path.yml 2023-03-01 14:05:31 +01:00
tccontre 41fb7257cd Update suspicious_process_file_path.yml
minor fix for wrong name in observable fields.
2023-02-28 10:49:16 +01:00
Michael Haag 15150886c9 fixes 2023-02-24 12:24:55 -07:00
mvelazco 9c14295a6b Update windows_ad_same_domain_sid_history_addition.yml 2023-02-22 12:01:18 -05:00
mvelazco 6c6e63feac fixing bucket time in detections 2023-02-22 11:54:54 -05:00
pyth0n1c eec8c7ff7f Fixing improperly named filter macro 2023-02-21 17:26:31 -08:00
pyth0n1c dc80d8ea36 Fixed up some incorrect paths in test and detection files. 2023-02-21 16:25:24 -08:00
srv-rr-gh-researchbt e9c29ff2e3 Branch was auto-updated. 2023-02-21 12:44:19 -08:00
srv-rr-gh-researchbt eb09ffd951 Branch was auto-updated. 2023-02-21 11:07:01 -08:00
srv-rr-gh-researchbt b8d60092c8 Branch was auto-updated. 2023-02-21 11:06:55 -08:00
srv-rr-gh-researchbt 79d5fac050 Branch was auto-updated. 2023-02-21 11:03:58 -08:00
srv-rr-gh-researchbt 5b5d1b09e6 Branch was auto-updated. 2023-02-21 11:03:54 -08:00
srv-rr-gh-researchbt 1943157207 Branch was auto-updated. 2023-02-21 11:03:53 -08:00
Bhavin Patel 2763f2df73 Update linux_unix_shell_enable_all_sysrq_functions.yml 2023-02-21 10:36:34 -08:00