 mvelazco
|
83ab04fcdb
|
adding required fields
|
2021-09-10 13:04:57 -04:00 |
|
|
Detection Testing Service
|
c26daab0d6
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 16:13:20 +00:00 |
|
|
root
|
25c0f57426
|
Added detection testing service results inRemote System Discovery with Wmic
|
2021-09-10 16:13:19 +00:00 |
|
|
Detection Testing Service
|
4e9b83a8f9
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 16:02:00 +00:00 |
|
|
root
|
34401f6cc6
|
Added detection testing service results inRemote System Discovery with Dsquery
|
2021-09-10 16:02:00 +00:00 |
|
|
Detection Testing Service
|
a84ab61e40
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 15:48:41 +00:00 |
|
|
root
|
7a8f12432e
|
Added detection testing service results inRemote System Discovery with Net
|
2021-09-10 15:48:41 +00:00 |
|
|
Detection Testing Service
|
63ece3023a
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 15:44:05 +00:00 |
|
|
root
|
49ed36b358
|
Added detection testing service results inRemote System Discovery with Dsquery
|
2021-09-10 15:44:04 +00:00 |
|
|
root
|
9eab9a64ba
|
Added detection testing service results inRemote System Discovery with Adsisearcher
|
2021-09-10 15:42:05 +00:00 |
|
|
Detection Testing Service
|
2ee7ef47cc
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 15:24:22 +00:00 |
|
|
root
|
fc5afe8ab9
|
Added detection testing service results inGetWmiObject Ds Computer with PowerShell Script Block
|
2021-09-10 15:24:21 +00:00 |
|
|
Detection Testing Service
|
813bd7b72e
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 15:20:16 +00:00 |
|
|
root
|
1916597f39
|
Added detection testing service results inGetWmiObject Ds Computer with PowerShell
|
2021-09-10 15:20:15 +00:00 |
|
|
root
|
2eabac8fae
|
Added detection testing service results inGetDomainController with PowerShell Script Block
|
2021-09-10 15:07:08 +00:00 |
|
|
root
|
d756fae0ef
|
Added detection testing service results inGetDomainController with PowerShell
|
2021-09-10 14:31:15 +00:00 |
|
|
root
|
d9bb492da9
|
Added detection testing service results inGetDomainComputer with PowerShell
|
2021-09-10 01:38:10 +00:00 |
|
|
Detection Testing Service
|
00ccb9b107
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-10 00:52:16 +00:00 |
|
|
root
|
d200431336
|
Added detection testing service results inGetAdComputer with PowerShell Script Block
|
2021-09-10 00:52:15 +00:00 |
|
|
root
|
d929d478d8
|
Added detection testing service results inGetAdComputer with PowerShell
|
2021-09-10 00:49:15 +00:00 |
|
|
Detection Testing Service
|
c029ae5a5a
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-09 21:50:04 +00:00 |
|
|
root
|
3af6b4451f
|
Added detection testing service results inDomain Controller Discovery with Wmic
|
2021-09-09 21:50:02 +00:00 |
|
|
Detection Testing Service
|
73c10ecc37
|
Merge branch 'AD_Discovery_TR-789_7' of https://github.com/splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-09 21:43:52 +00:00 |
|
|
root
|
a304fdd421
|
Added detection testing service results inDomain Controller Discovery with Nltest
|
2021-09-09 21:43:51 +00:00 |
|
|
root
|
5875cf6123
|
Added detection testing service results inGetDomainComputer with PowerShell Script Block
|
2021-09-09 21:34:16 +00:00 |
|
|
mvelazco
|
c02bea0a2f
|
Merge branch 'AD_Discovery_TR-789_7' of github.com:splunk/security_content into AD_Discovery_TR-789_7
|
2021-09-09 15:50:41 -04:00 |
|
|
mvelazco
|
a8db145e7c
|
fixing fetection issues
|
2021-09-09 15:50:39 -04:00 |
|
|
Bhavin Patel
|
82199e6593
|
Branch was auto-updated.
|
2021-09-09 11:33:21 -07:00 |
|
|
Bhavin Patel
|
42907bc6ad
|
Merge pull request #1656 from splunk/Hives
Update extraction_of_registry_hives.yml
|
2021-09-09 11:32:56 -07:00 |
|
|
Detection Testing Service
|
dd209addce
|
Merge branch 'Hives' of https://github.com/splunk/security_content into Hives
|
2021-09-09 18:23:05 +00:00 |
|
|
root
|
314370ba56
|
Added detection testing service results inExtraction of Registry Hives
|
2021-09-09 18:23:05 +00:00 |
|
|
Bhavin Patel
|
1782898d93
|
Branch was auto-updated.
|
2021-09-09 11:08:23 -07:00 |
|
|
Bhavin Patel
|
175892bd60
|
Branch was auto-updated.
|
2021-09-09 11:08:20 -07:00 |
|
|
Bhavin Patel
|
9d4e758fa3
|
Merge pull request #1647 from splunk/Emerging-CVE-2021-40444
HaagRunner
|
2021-09-09 11:08:01 -07:00 |
|
|
root
|
d86a4debf5
|
Added detection testing service results inMSHTML Module Load in Office Product
|
2021-09-09 18:02:13 +00:00 |
|
|
Michael Haag
|
8a652c31a8
|
Merge branch 'develop' into Hives
|
2021-09-09 12:01:38 -06:00 |
|
|
mhaag-spl
|
431171ec24
|
Update extraction_of_registry_hives.yml
Forgot quotes and added more slashes.
Fixes for #1634
|
2021-09-09 11:47:24 -06:00 |
|
|
mhaag-spl
|
8936651b40
|
mshtml_module_load_in_office_product
|
2021-09-09 10:53:47 -06:00 |
|
|
mhaag-spl
|
317f25ff45
|
Update office_spawning_control.yml
|
2021-09-09 10:10:58 -06:00 |
|
|
mvelazco
|
be1c6a4737
|
adding 4 extra detections
|
2021-09-09 11:34:07 -04:00 |
|
|
Bhavin Patel
|
af9de97928
|
Branch was auto-updated.
|
2021-09-09 00:27:40 -07:00 |
|
|
Bhavin Patel
|
cfdf3ee2f7
|
Branch was auto-updated.
|
2021-09-09 00:27:31 -07:00 |
|
|
tccontre
|
5d9213ae59
|
Merge pull request #1633 from splunk/blackMatter_ransomware
blackmatter_ransomware
|
2021-09-09 09:27:12 +02:00 |
|
|
root
|
51690c1335
|
Added detection testing service results inOffice Spawning Control
|
2021-09-09 02:44:46 +00:00 |
|
|
mhaag-spl
|
4c927f1513
|
Merge branch 'Emerging-CVE-2021-40444' of https://github.com/splunk/security_content into Emerging-CVE-2021-40444
|
2021-09-08 20:21:32 -06:00 |
|
|
Bhavin Patel
|
a0ac9bdb36
|
Branch was auto-updated.
|
2021-09-08 18:06:25 -07:00 |
|
|
Bhavin Patel
|
ed4278a0c5
|
Branch was auto-updated.
|
2021-09-08 18:06:20 -07:00 |
|
|
Bhavin Patel
|
dc6cf0e93b
|
Branch was auto-updated.
|
2021-09-08 18:06:19 -07:00 |
|
|
Bhavin Patel
|
16ec613454
|
Merge pull request #1642 from splunk/issue_1528_registry_key_used_for_persistance_is_part_of_the_resistance
updating base on suggestions from mschilt in issue 1528
|
2021-09-08 18:05:58 -07:00 |
|
|
root
|
37a2f54c26
|
Added detection testing service results inRegistry Keys Used For Persistence
|
2021-09-09 01:00:47 +00:00 |
|