662 Commits

Author	SHA1	Message	Date
mhaag-spl	86a0a2e117	Winword spawning powershell	2021-04-21 10:52:23 -06:00
github-actions[bot]	7b5c265ff4	Branch was auto-updated.	2021-04-21 08:48:41 +00:00
mvelazco	629928024f	minor - fixing filename	2021-04-20 18:43:30 -04:00
mvelazco	8380603e54	Update multiple_disabled_users_failing_to_authenticate_from_one_source_using_kerberos.test.yml ... adding missing test metadata	2021-04-20 18:38:59 -04:00
github-actions[bot]	365f35b1b7	Branch was auto-updated.	2021-04-20 22:28:59 +00:00
github-actions[bot]	9b3dd8fbd4	Branch was auto-updated.	2021-04-20 22:28:58 +00:00
mvelazco	c0169b76ee	adding dataset metadata	2021-04-20 17:41:57 -04:00
mhaag-spl	310bbc8884	Update dllhost_with_no_command_line_arguments_with_network.test.yml	2021-04-20 15:16:14 -06:00
bpatel	c0e9a5dc1d	search name and file renames	2021-04-20 13:10:00 -07:00
mhaag-spl	0a55bf791f	updated queries	2021-04-20 13:05:11 -06:00
mhaag-spl	64288e39c7	searchprotocolhost	2021-04-19 13:41:41 -06:00
mhaag-spl	962aa311d2	Update dllhost_with_no_command_line_arguments_with_network.test.yml	2021-04-19 13:10:15 -06:00
mhaag-spl	1d6c20d587	dllhost and gpupdate fix	2021-04-19 13:08:04 -06:00
mhaag-spl	5daf227b3f	gpupdate	2021-04-19 12:58:24 -06:00
mhaag-spl	c143c99ad8	Update winevent_scheduled_task_created_to_spawn_shell.test.yml	2021-04-19 12:37:35 -06:00
mhaag-spl	9579f2d708	Update rundll32_with_no_command_line_arguments_with_network.test.yml	2021-04-19 11:57:51 -06:00
mhaag-spl	b2dc244920	rundll32	2021-04-19 11:21:05 -06:00
tcontreras	a5cf51e9d5	task_sched	2021-04-19 18:58:16 +02:00
mhaag-spl	ac370189ee	winevent fix	2021-04-19 10:39:42 -06:00
tcontreras	0e3bf4835f	spear2	2021-04-19 16:45:03 +02:00
tcontreras	8f80520df7	spear	2021-04-19 16:40:53 +02:00
mhaag-spl	18586f6bb0	winevents task registered	2021-04-15 14:54:22 -06:00
mhaag-spl	a74171d7e3	removals	2021-04-15 14:25:15 -06:00
mvelazco	c84656c87b	adding one extra detection, NTLM spray with invalid users	2021-04-15 10:45:10 -04:00
mvelazco	e0cbf01590	adding 2 extra detections	2021-04-15 09:42:36 -04:00
tccontre	0fa575ad4a	Delete office_application_spawned_cmd_shell.test.yml	2021-04-15 09:46:20 +02:00
mhaag-spl	8a81aee71b	AWS Detections	2021-04-14 21:10:46 -06:00
mvelazco	271bb6d85a	updaing password spraying detection names	2021-04-14 15:40:17 -04:00
github-actions[bot]	beb49969cf	Branch was auto-updated.	2021-04-14 19:27:09 +00:00
mvelazco	4fa6bd1c72	pushing initial password spraying content ... adding password spraying analytic story and the first detections	2021-04-14 14:00:05 -04:00
tcontreras	71b663937e	spear_detections	2021-04-14 16:00:16 +02:00
github-actions[bot]	15dae52e30	Branch was auto-updated.	2021-04-14 11:30:46 +00:00
github-actions[bot]	d59baf9915	Branch was auto-updated.	2021-04-14 11:06:20 +00:00
github-actions[bot]	646828f597	Branch was auto-updated.	2021-04-14 11:06:12 +00:00
bpatel	0e50d0379f	testing	2021-04-13 10:23:35 -07:00
P4T12ICK	1ab072c735	New AWS detection	2021-04-13 16:29:09 +02:00
Michael Haag	505d37f0e0	Merge branch 'develop' into cloudywithachanceofhaags	2021-04-08 15:00:56 -06:00
mhaag-spl	2f5c84460a	TaskService Usage	2021-04-08 14:57:43 -06:00
mhaag-spl	b5d3de10f2	AWS	2021-04-06 14:39:27 -06:00
github-actions[bot]	9833a15fd3	Branch was auto-updated.	2021-04-02 18:24:52 +00:00
mhaag-spl	5b2c3a2bd5	Possible DSQuery fix	2021-03-31 14:09:38 -06:00
mhaag-spl	1ab256593f	Domain Trust Discovery	2021-03-31 13:24:32 -06:00
tcontreras	fa58ca006b	def_evasion_detections	2021-03-31 15:00:36 +02:00
tcontreras	c214e8dc53	def_evasion_detections	2021-03-31 14:42:47 +02:00
Michael Haag	602c51bae9	Merge branch 'develop' into mhaag	2021-03-30 14:58:52 -06:00
mhaag-spl	da4bc60750	T1197 BITS Jobs	2021-03-30 14:49:44 -06:00
P4T12ICK	ae86d614eb	updated test file	2021-03-29 18:23:30 +02:00
P4T12ICK	eb5e776fc8	updated test file	2021-03-29 18:14:07 +02:00
P4T12ICK	139bd101d6	new dataset	2021-03-29 17:32:49 +02:00
P4T12ICK	c38768e3f5	updated test file	2021-03-29 17:17:58 +02:00