Commit Graph

20499 Commits

Author SHA1 Message Date
Bhavin Patel 71524efcf6 Merge pull request #2691 from splunk/TR-3512
Missing condition in BA detection
2023-05-26 11:28:37 -07:00
srv-rr-gh-researchbt 921e0e6aac Branch was auto-updated. 2023-05-25 17:58:20 -07:00
Bhavin Patel 6c63cee1a1 Merge pull request #2680 from splunk/exfiltration_references
Data exfil update
2023-05-25 17:57:58 -07:00
pyth0n1c caf380edb4 Update data_exfiltration.yml
Just adding a missing space in description field.
2023-05-25 16:17:47 -07:00
srv-rr-gh-researchbt 5312020e0f Branch was auto-updated. 2023-05-25 14:37:13 -07:00
srv-rr-gh-researchbt bd14701488 Branch was auto-updated. 2023-05-25 14:37:09 -07:00
Bhavin Patel 07440777ce Merge pull request #2690 from splunk/TR2850_RBA_PrivEsc
Correlation rule for Priv Esc
2023-05-25 14:36:43 -07:00
srv-rr-gh-researchbt 255083de9f Branch was auto-updated. 2023-05-25 11:14:55 -07:00
srv-rr-gh-researchbt 48b567dd1e Branch was auto-updated. 2023-05-25 11:14:50 -07:00
srv-rr-gh-researchbt 6d5e4a4b14 Branch was auto-updated. 2023-05-25 11:14:49 -07:00
Bhavin Patel 164b94464e Merge pull request #2689 from splunk/iceid_dfir_coverage
iceid_dfir_coverage
2023-05-25 11:14:25 -07:00
Lou Stella 395923d3f8 Generated output 2023-05-24 17:54:15 -05:00
Lou Stella 0db1b8faf4 converted 2023-05-24 13:18:38 -05:00
Lou Stella 8bce0fb358 updated base rule 2023-05-24 13:02:14 -05:00
tccontre 03ad08635e iceid_dfir_coverage 2023-05-24 14:58:17 +02:00
tccontre 97307452a5 Update network_share_discovery_via_dir_command.yml 2023-05-24 10:50:56 +02:00
tccontre 742a34eefb iceid_dfir_coverage 2023-05-24 10:11:41 +02:00
mvelazco 71fcc66c96 Merge branch 'TR2850_RBA_PrivEsc' of github.com:splunk/security_content into TR2850_RBA_PrivEsc 2023-05-23 17:26:30 -04:00
mvelazco 508ca2a051 updates 2023-05-23 17:26:18 -04:00
srv-rr-gh-researchbt b54262aecc Branch was auto-updated. 2023-05-23 14:13:23 -07:00
srv-rr-gh-researchbt 849a0885df Branch was auto-updated. 2023-05-23 14:13:16 -07:00
srv-rr-gh-researchbt ac6b96493b Branch was auto-updated. 2023-05-23 14:13:13 -07:00
Bhavin Patel c65dda5c0a Merge pull request #2673 from splunk/atomic_tag_redline
atomic_tag_redline
2023-05-23 14:12:56 -07:00
mvelazco 62e859ba7b correlation for priv esc 2023-05-23 16:30:18 -04:00
tccontre 1d6a5a5a01 Update chcp_command_execution.yml 2023-05-23 17:09:54 +02:00
tccontre 8f46746362 Update chcp_command_execution.yml 2023-05-23 16:48:01 +02:00
tccontre 3dfc308ff2 Update chcp_command_execution.yml 2023-05-23 16:27:17 +02:00
tccontre 7b97e94895 Update chcp_command_execution.yml 2023-05-23 16:26:44 +02:00
tccontre 82e7c1ef64 iceid_dfir_coverage 2023-05-23 15:49:48 +02:00
tccontre d667a02230 iceid_dfir_coverage 2023-05-23 15:46:58 +02:00
tccontre 566287f6b8 iceid_dfir_coverage 2023-05-23 15:41:47 +02:00
srv-rr-gh-researchbt 6076ffa959 Branch was auto-updated. 2023-05-19 13:41:02 -07:00
srv-rr-gh-researchbt 1d3805704b Branch was auto-updated. 2023-05-19 13:41:01 -07:00
Lou Stella 704967792c Merge pull request #2682 from splunk/rename_cleanup
Fixed names so that website renders
2023-05-19 15:40:30 -05:00
Lou Stella c96b7809ca Fixed names so that website renders 2023-05-19 15:30:42 -05:00
srv-rr-gh-researchbt 2a5d03ba39 Branch was auto-updated. 2023-05-19 07:24:28 -07:00
srv-rr-gh-researchbt 68d4e78fcf Branch was auto-updated. 2023-05-19 07:24:27 -07:00
Lou Stella d378f7b746 Merge pull request #2610 from splunk/TR-2886
Identifier Activity Analysis Dispatch
2023-05-19 09:24:06 -05:00
Lou Stella 66539b1f12 Last style update 2023-05-19 08:58:05 -05:00
patel-bhavin b11c7f7a26 referenfce and test update 2023-05-17 15:05:01 -07:00
srv-rr-gh-researchbt 610b60a614 Branch was auto-updated. 2023-05-16 12:53:25 -07:00
srv-rr-gh-researchbt 1b103beb33 Branch was auto-updated. 2023-05-16 12:53:19 -07:00
research bot b954117257 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-05-16 19:52:55 +00:00
srv-rr-gh-researchbt 5bff54a02e Branch was auto-updated. 2023-05-16 12:30:45 -07:00
srv-rr-gh-researchbt 559db0d682 Branch was auto-updated. 2023-05-16 12:30:40 -07:00
Bhavin Patel d3bc844e76 Merge pull request #2677 from splunk/ai_error
appinspect error
v4.2.0
2023-05-16 12:30:19 -07:00
patel-bhavin 8956784303 appinspect error 2023-05-16 12:25:20 -07:00
srv-rr-gh-researchbt 5acef4a830 Branch was auto-updated. 2023-05-16 11:26:02 -07:00
srv-rr-gh-researchbt e7b18e58cb Branch was auto-updated. 2023-05-16 11:25:57 -07:00
Bhavin Patel baae4ed7aa Merge pull request #2670 from splunk/newness
Guardians of the Haag: A Cosmic Adventure
2023-05-16 11:25:33 -07:00