Commit Graph

12248 Commits

Author SHA1 Message Date
David Dorsey 87f62f2177 Fixed data model 2021-11-30 22:23:31 -06:00
Bhavin Patel dd2475c402 Branch was auto-updated. 2021-11-30 16:19:10 -08:00
pyth0n1c a93687e353 Merge pull request #1843 from splunk/issue_1839
Issue 1839 - tested and passed
2021-11-30 16:18:49 -08:00
Bhavin Patel 698356d345 Branch was auto-updated. 2021-11-30 12:02:08 -08:00
Bhavin Patel 991d5ab905 Branch was auto-updated. 2021-11-30 12:02:06 -08:00
Bhavin Patel c5554e4dc8 Merge pull request #1850 from splunk/double-fix
Update detect_html_help_renamed.yml
2021-11-30 12:01:40 -08:00
mhaag-spl fe7817f28a Update detect_html_help_renamed.yml
Fixing issue #1849
2021-11-29 13:43:41 -07:00
Bhavin Patel bac32282a4 Branch was auto-updated. 2021-11-25 05:31:54 -08:00
Bhavin Patel 73ddbbfd27 Branch was auto-updated. 2021-11-25 05:31:53 -08:00
P4T12ICK 49170484ea Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
2021-11-25 14:31:31 +01:00
Bhavin Patel 80ba7482e4 Branch was auto-updated. 2021-11-25 05:07:25 -08:00
Bhavin Patel 0bd09d6126 Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel c778a2e35c Branch was auto-updated. 2021-11-25 05:07:24 -08:00
tccontre 2451defe2a Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
2021-11-25 14:07:03 +01:00
Detection Testing Service 6d8151d915 Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:13:52 +00:00
root 1b28033819 Added detection testing service results inPowershell Windows Defender Exclusion Commands 2021-11-25 12:13:51 +00:00
Detection Testing Service 724101f8ed Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:00:54 +00:00
root 4ed89e21a2 Added detection testing service results inWindows Defender Exclusion Registry Entry 2021-11-25 12:00:54 +00:00
root b6bb18d20c Added detection testing service results inAdd or Set Windows Defender Exclusion 2021-11-25 11:55:39 +00:00
tccontre dfd210cf29 remcos_evasion 2021-11-25 12:27:39 +01:00
Bhavin Patel 6d291d2600 Branch was auto-updated. 2021-11-25 01:25:29 -08:00
Bhavin Patel 469f9ab43f Branch was auto-updated. 2021-11-25 01:25:28 -08:00
Bhavin Patel 5addbd5188 Branch was auto-updated. 2021-11-25 01:25:27 -08:00
tccontre 06b65d7163 Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
2021-11-25 10:25:05 +01:00
Bhavin Patel 67bbcd8d30 Branch was auto-updated. 2021-11-25 01:04:17 -08:00
Bhavin Patel 0a01fb8181 Branch was auto-updated. 2021-11-25 01:04:17 -08:00
Bhavin Patel c681fb48b4 Branch was auto-updated. 2021-11-25 01:04:16 -08:00
Bhavin Patel c753fb67c3 Branch was auto-updated. 2021-11-25 01:04:15 -08:00
P4T12ICK a14e50ac10 Merge pull request #1847 from splunk/improvements
Improvements
2021-11-25 10:03:58 +01:00
P4T12ICK e1844e0333 removed devsecops 2021-11-25 08:55:22 +01:00
P4T12ICK 2993c66134 Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip 2021-11-25 08:37:12 +01:00
P4T12ICK 40a80473a2 Merge branch 'develop' into ssa_anomalous_usage_of_7zip 2021-11-25 08:36:33 +01:00
Bhavin Patel 28ad164d89 Branch was auto-updated. 2021-11-24 23:36:30 -08:00
Bhavin Patel a619c9829e Branch was auto-updated. 2021-11-24 23:36:29 -08:00
Bhavin Patel d9525ef7e3 Branch was auto-updated. 2021-11-24 23:36:28 -08:00
Bhavin Patel 86fd20b169 Branch was auto-updated. 2021-11-24 23:36:28 -08:00
P4T12ICK 2eda496ddd Merge pull request #1845 from splunk/ssa_test_ci_cd_pipeline
Ssa test ci cd pipeline
2021-11-25 08:36:00 +01:00
Bhavin Patel 9fd5ba2d7b Branch was auto-updated. 2021-11-24 09:13:37 -08:00
Bhavin Patel 945377a3cc Branch was auto-updated. 2021-11-24 09:13:36 -08:00
Bhavin Patel c57f06c3a9 Branch was auto-updated. 2021-11-24 09:13:35 -08:00
Bhavin Patel 61b717f51d Branch was auto-updated. 2021-11-24 09:13:34 -08:00
Bhavin Patel fd77109f22 Branch was auto-updated. 2021-11-24 09:13:34 -08:00
Michael Haag 694e5ef724 Merge pull request #1844 from splunk/TR-1085_LateralMovement_3
Lateral Movement Content Update #3
2021-11-24 10:13:14 -07:00
Michael Haag 144b6971d2 Update wsmprovhost_exe_lolbas_execution_process_spawn.yml 2021-11-24 10:08:13 -07:00
Michael Haag 097683ffbb Update wmiprsve_exe_lolbas_execution_process_spawn.yml 2021-11-24 10:07:35 -07:00
root ba111107f8 Added detection testing service results inWindows Service Created Within Public Path 2021-11-24 15:24:21 +00:00
root 9f122d542c Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn 2021-11-24 14:58:42 +00:00
mvelazco 42913444c4 update dataset location 2021-11-24 09:37:47 -05:00
P4T12ICK 1fa6e25756 ssa test ci cd 2021-11-24 15:14:31 +01:00
P4T12ICK 704e469362 ssa test ci cd 2021-11-24 14:38:08 +01:00