 P4T12ICK
|
cdcf271eae
|
bug fix detection testing
|
2021-07-06 13:27:11 +02:00 |
|
|
github-actions[bot]
|
aa6519c490
|
Branch was auto-updated.
|
2021-07-05 15:05:21 +00:00 |
|
|
Detection Testing Service
|
c8eae0d7ca
|
Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2
|
2021-07-05 14:52:28 +00:00 |
|
|
root
|
2fbeb9c005
|
Added detection testing service results inMsmpeng Application DLL Side Loading
|
2021-07-05 14:52:27 +00:00 |
|
|
tccontre
|
808eba05e4
|
Update powershell_disable_security_monitoring.yml
|
2021-07-05 16:46:58 +02:00 |
|
|
tccontre
|
3e63f7325a
|
Update msmpeng_application_dll_side_loading.yml
|
2021-07-05 16:46:45 +02:00 |
|
|
tccontre
|
bcda9adb56
|
Update disable_windows_behavior_monitoring.yml
|
2021-07-05 16:46:12 +02:00 |
|
|
tccontre
|
e88845c1c5
|
Update allow_network_discovery_in_firewall.yml
|
2021-07-05 16:45:45 +02:00 |
|
|
tccontre
|
f3097ae838
|
Update allow_file_and_printing_sharing_in_firewall.yml
|
2021-07-05 16:45:31 +02:00 |
|
|
tccontre
|
8757c002fc
|
Update allow_file_and_printing_sharing_in_firewall.yml
|
2021-07-05 16:45:13 +02:00 |
|
|
Detection Testing Service
|
2bbfca5fc9
|
Merge branch 'ransom_ttp2' of https://github.com/splunk/security_content into ransom_ttp2
|
2021-07-05 14:34:26 +00:00 |
|
|
root
|
f8e36f1f13
|
Added detection testing service results inPowershell Disable Security Monitoring
|
2021-07-05 14:34:26 +00:00 |
|
|
tccontre
|
86f18d1e33
|
side loading
|
2021-07-05 16:27:36 +02:00 |
|
|
tccontre
|
46e6caac0a
|
update revil reg
|
2021-07-05 15:56:48 +02:00 |
|
|
tccontre
|
c8284a3bb8
|
pwh disable
|
2021-07-05 15:49:41 +02:00 |
|
|
tccontre
|
c4befb2012
|
mod disable defender
|
2021-07-05 15:01:10 +02:00 |
|
|
tccontre
|
0da7fdd61f
|
add ttp3
|
2021-07-05 14:46:16 +02:00 |
|
|
tccontre
|
19ac15a485
|
add ttp
|
2021-07-05 14:44:35 +02:00 |
|
|
github-actions[bot]
|
63c06559cf
|
Branch was auto-updated.
|
2021-07-05 07:55:22 +00:00 |
|
|
github-actions[bot]
|
3dda10f596
|
Branch was auto-updated.
|
2021-07-05 07:55:04 +00:00 |
|
|
tccontre
|
bf0571d738
|
Update allow_network_discovery_in_firewall.yml
|
2021-07-05 09:21:11 +02:00 |
|
|
research bot
|
9987d171cc
|
updating docs and package bits [ci skip]
|
2021-07-02 16:06:07 +00:00 |
|
|
github-actions[bot]
|
8be6c4469e
|
Branch was auto-updated.
|
2021-07-02 15:07:01 +00:00 |
|
|
github-actions[bot]
|
abc99240eb
|
Branch was auto-updated.
|
2021-07-02 15:07:00 +00:00 |
|
|
Jose Enrique Hernandez
|
7ce88879d6
|
fixing type
yep yep
|
2021-07-02 11:03:08 -04:00 |
|
|
tccontre
|
dc0eac261d
|
minor update3
|
2021-07-02 14:38:44 +02:00 |
|
|
tccontre
|
2c948c9967
|
minor update2
|
2021-07-02 14:09:14 +02:00 |
|
|
tccontre
|
2f74506fc0
|
minor update
|
2021-07-02 14:02:31 +02:00 |
|
|
patel-bhavin
|
6f29b8877a
|
adding process_id to spl
|
2021-07-01 16:26:42 -05:00 |
|
|
patel-bhavin
|
ad74856496
|
Merge branch 'printnightmare' of github.com:splunk/security_content into printnightmare
|
2021-07-01 16:22:59 -05:00 |
|
|
patel-bhavin
|
237803358b
|
updated spl and rba tags
|
2021-07-01 16:22:54 -05:00 |
|
|
mhaag-spl
|
2029cf855f
|
Update spoolsv_spawning_rundll32.yml
|
2021-07-01 15:00:26 -06:00 |
|
|
mhaag-spl
|
3c1be9b42f
|
Update print_spooler_failed_to_load_a_plug_in.yml
|
2021-07-01 14:08:34 -06:00 |
|
|
Detection Testing Service
|
e9fb78882d
|
Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare
|
2021-07-01 20:01:15 +00:00 |
|
|
root
|
20d19f74a5
|
Added detection testing service results inSpoolsv Writing a DLL - Sysmon
|
2021-07-01 20:01:15 +00:00 |
|
|
Detection Testing Service
|
1651bab022
|
Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare
|
2021-07-01 19:51:10 +00:00 |
|
|
root
|
19e28a12ff
|
Added detection testing service results inSpoolsv Writing a DLL
|
2021-07-01 19:51:09 +00:00 |
|
|
root
|
6c226fb4be
|
Added detection testing service results inSpoolsv Suspicious Process Access
|
2021-07-01 19:50:04 +00:00 |
|
|
Detection Testing Service
|
69a5df0d8f
|
Merge branch 'printnightmare' of https://github.com/splunk/security_content into printnightmare
|
2021-07-01 19:22:42 +00:00 |
|
|
root
|
34e0b36bb8
|
Added detection testing service results inSpoolsv Spawning Rundll32
|
2021-07-01 19:22:42 +00:00 |
|
|
root
|
917958cb79
|
Added detection testing service results inSpoolsv Suspicious Loaded Modules
|
2021-07-01 19:22:08 +00:00 |
|
|
root
|
e5d0c5789d
|
Added detection testing service results inPrint Spooler Adding A Printer Driver
|
2021-07-01 18:56:49 +00:00 |
|
|
mhaag-spl
|
0c86774b15
|
Added a Macro
|
2021-07-01 12:11:49 -06:00 |
|
|
mhaag-spl
|
e86a988621
|
Printing All your Nightmares
|
2021-07-01 12:01:45 -06:00 |
|
|
github-actions[bot]
|
d96bf8b30a
|
Branch was auto-updated.
|
2021-06-30 20:23:42 +00:00 |
|
|
github-actions[bot]
|
edb29f3874
|
Branch was auto-updated.
|
2021-06-30 20:23:40 +00:00 |
|
|
divious1
|
63d2581343
|
Merge branch 'develop' into rba_poc
|
2021-06-30 16:10:23 -04:00 |
|
|
Michael Haag
|
743ca45fbd
|
Update access_lsass_memory_for_dump_creation.yml
|
2021-06-30 08:56:38 -06:00 |
|
|
github-actions[bot]
|
90d62f8358
|
Branch was auto-updated.
|
2021-06-29 18:31:00 +00:00 |
|
|
github-actions[bot]
|
5a7f37ffbf
|
Branch was auto-updated.
|
2021-06-29 18:30:58 +00:00 |
|