 tccontre
|
7549ae7c7b
|
Update ssa___hiding_files_and_directories_with_attrib_exe.yml
|
2021-12-22 10:22:49 +01:00 |
|
|
Bhavin Patel
|
5b820c2af9
|
Branch was auto-updated.
|
2021-12-21 11:22:17 -08:00 |
|
|
Jose Enrique Hernandez
|
930a6db140
|
Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278
|
2021-12-21 14:21:54 -05:00 |
|
|
root
|
9243038c09
|
Added detection testing service results inSuspicious Ticket Granting Ticket Request
|
2021-12-21 19:06:04 +00:00 |
|
|
mvelazco
|
bb8ae58f84
|
adding new detection
|
2021-12-21 13:44:17 -05:00 |
|
|
tccontre
|
11dbcdf473
|
Update ssa___hiding_files_and_directories_with_attrib_exe.yml
|
2021-12-21 15:13:54 +01:00 |
|
|
root
|
da634d5c25
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:57:17 +00:00 |
|
|
mvelazco
|
4631c84a60
|
updating logic
|
2021-12-20 22:38:27 -05:00 |
|
|
root
|
122d403d6c
|
Added detection testing service results inSuspicious Kerberos Service Ticket Request
|
2021-12-21 03:34:17 +00:00 |
|
|
mvelazco
|
d5d7e0ce1a
|
Update suspicious_computer_account_name_change.yml
|
2021-12-20 22:11:09 -05:00 |
|
|
mvelazco
|
6fa0f9b30b
|
adding new detection
|
2021-12-20 22:08:19 -05:00 |
|
|
root
|
653a7755e8
|
Added detection testing service results inSuspicious Computer Account Name Change
|
2021-12-20 22:50:20 +00:00 |
|
|
mvelazco
|
af31bdb3ec
|
updating observable
|
2021-12-20 17:20:58 -05:00 |
|
|
mvelazco
|
243e60a3cc
|
minor fix
|
2021-12-20 17:04:58 -05:00 |
|
|
mvelazco
|
82a4a63093
|
creating analytic story and first detection
|
2021-12-20 16:58:34 -05:00 |
|
|
Bhavin Patel
|
2a15f8b170
|
Branch was auto-updated.
|
2021-12-20 12:42:51 -08:00 |
|
|
mvelazco
|
59b9068998
|
Merge pull request #1894 from splunk/Fix_Log4j_detection
Update Log4J Detection to use data models
|
2021-12-20 15:42:26 -05:00 |
|
|
tccontre
|
e1261b36ca
|
Update ssa___hiding_files_and_directories_with_attrib_exe.yml
|
2021-12-20 17:18:44 +01:00 |
|
|
tccontre
|
b61311f72b
|
new_ssa_info_sabotage
|
2021-12-20 13:44:02 +01:00 |
|
|
tccontre
|
f144fc5df3
|
new_ssa_info_sabotage
|
2021-12-20 12:37:12 +01:00 |
|
|
tccontre
|
c53510c42a
|
new_ssa_info_sabotage
|
2021-12-20 12:31:21 +01:00 |
|
|
tccontre
|
9cf834a5f1
|
new_ssa_info_sabotage
|
2021-12-20 12:25:34 +01:00 |
|
|
tccontre
|
d6581e728b
|
new_ssa_info_sabotage
|
2021-12-20 12:21:04 +01:00 |
|
|
tccontre
|
cdab1e8c74
|
new_ssa_ifo_sabotage
|
2021-12-20 12:17:04 +01:00 |
|
|
Bhavin Patel
|
3eb630b220
|
Branch was auto-updated.
|
2021-12-16 12:55:22 -08:00 |
|
|
peter
|
eff3306f89
|
Merge pull request #1897 from splunk/ssa_descriptive_branch_name
SSA descriptive branch name
|
2021-12-16 14:55:05 -06:00 |
|
|
peter-cg
|
55fd63fe2f
|
Caps fix
|
2021-12-16 14:53:54 -06:00 |
|
|
peter-cg
|
3aa223a948
|
Adding sourcetype to sysproc_unexpected_location test
|
2021-12-16 10:44:05 -06:00 |
|
|
peter-cg
|
ba83011191
|
Adding addl humvee runner and fixing macro def
|
2021-12-16 10:42:01 -06:00 |
|
|
Bhavin Patel
|
ab3eb94c83
|
Branch was auto-updated.
|
2021-12-15 15:52:04 -08:00 |
|
|
pyth0n1c
|
7431dabd65
|
Merge pull request #1896 from splunk/doc_updates
Docs Update for playbook changes
|
2021-12-15 15:51:51 -08:00 |
|
|
Lou Stella
|
2f8de77b7c
|
Docs Update for playbook changes
|
2021-12-15 17:42:47 -06:00 |
|
|
Bhavin Patel
|
ae3484780a
|
Branch was auto-updated.
|
2021-12-15 15:20:36 -08:00 |
|
|
Lou Stella
|
9c21e7f869
|
Merge pull request #1895 from splunk/The_Day_After_The_Day_After_log4shell
The Day After The Day After log4shell
|
2021-12-15 17:20:18 -06:00 |
|
|
Lou Stella
|
01bc5757b6
|
removed married parent playbook
|
2021-12-15 17:06:02 -06:00 |
|
|
Lou Stella
|
fbf15c3424
|
Final copy from phantomcyber/playbooks
|
2021-12-15 16:58:31 -06:00 |
|
|
Lou Stella
|
872ea4b55c
|
Standardized type
|
2021-12-15 15:52:40 -06:00 |
|
|
root
|
496f97a0ee
|
Added detection testing service results inOutbound Network Connection from Java Using Default Ports
|
2021-12-15 21:19:25 +00:00 |
|
|
Lou Stella
|
ca0aaa46c5
|
divorced parent playbook
|
2021-12-15 15:03:21 -06:00 |
|
|
mvelazco
|
3bb9712286
|
updating detection to use data models
|
2021-12-15 15:53:06 -05:00 |
|
|
Lou Stella
|
337e077224
|
Merge pull request #1892 from splunk/bug_with_playbook_detection
bug with playbooks detection page
|
2021-12-15 14:16:09 -06:00 |
|
|
d1vious
|
0df62338c9
|
bug with playbooks detection page
|
2021-12-15 15:01:27 -05:00 |
|
|
Jose Enrique Hernandez
|
8566c56a0e
|
Merge pull request #1889 from splunk/minor_api_gen_bug
fixes a logic bug with the api that caused ci to fail
|
2021-12-15 14:56:09 -05:00 |
|
|
Bhavin Patel
|
974d1bfc40
|
Branch was auto-updated.
|
2021-12-15 11:47:08 -08:00 |
|
|
Jose Enrique Hernandez
|
589aa6e233
|
Merge pull request #1891 from splunk/bug_with_playbook_detections
fixing bug with dead links
|
2021-12-15 14:46:51 -05:00 |
|
|
d1vious
|
2862f68474
|
fixing bug with dead links
|
2021-12-15 14:35:04 -05:00 |
|
|
Lou Stella
|
b341343435
|
Updated friendly name
|
2021-12-15 11:30:26 -06:00 |
|
|
d1vious
|
c8cc65bf3d
|
updated api
|
2021-12-15 11:18:17 -05:00 |
|
|
Lou Stella
|
028863eea9
|
Updated screenshot
|
2021-12-15 10:15:39 -06:00 |
|
|
d1vious
|
6f2a298788
|
fixes a logic bug with the api that caused ci to fail
|
2021-12-14 22:52:18 -05:00 |
|