 mhaag-spl
|
a169f1b226
|
Name fix
|
2021-06-15 13:26:01 -06:00 |
|
|
mhaag-spl
|
a4d3947ee3
|
System.Reflection.Assembly
System.Reflection.Assembly
|
2021-06-15 13:16:17 -06:00 |
|
|
Detection Testing Service
|
ba31f2035d
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-15 18:08:49 +00:00 |
|
|
root
|
67f8c9e0f2
|
Added detection testing service results inPowershell Fileless Script Contains Base64 Encoded Content
|
2021-06-15 18:08:49 +00:00 |
|
|
Detection Testing Service
|
2a50ee7941
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-15 18:00:41 +00:00 |
|
|
root
|
c9ee862dfb
|
Added detection testing service results inPowershell Fileless Process Injection via GetProcAddress
|
2021-06-15 18:00:40 +00:00 |
|
|
Detection Testing Service
|
05a3ee8d23
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-15 18:00:00 +00:00 |
|
|
root
|
ea30e047cf
|
Added detection testing service results inUnloading AMSI via Reflection
|
2021-06-15 17:59:59 +00:00 |
|
|
Detection Testing Service
|
c4d68238e2
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-15 17:59:41 +00:00 |
|
|
root
|
dc8fef0ae2
|
Added detection testing service results inDetect Mimikatz With PowerShell Script Block Logging
|
2021-06-15 17:59:41 +00:00 |
|
|
root
|
112dddf43c
|
Added detection testing service results inDetect Empire with PowerShell Script Block Logging
|
2021-06-15 17:53:06 +00:00 |
|
|
mhaag-spl
|
f57f0f22d6
|
Fixed queries
|
2021-06-15 11:29:24 -06:00 |
|
|
P4T12ICK
|
1deb552054
|
new detection testing
|
2021-06-15 17:50:53 +02:00 |
|
|
Detection Testing Service
|
3381ce7205
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:50:48 +00:00 |
|
|
root
|
76023baae1
|
Added detection testing service results inWMI Recon Running Process Or Services
|
2021-06-15 15:50:47 +00:00 |
|
|
Detection Testing Service
|
b073d80bcf
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:43:44 +00:00 |
|
|
root
|
aa4fc9ddfa
|
Added detection testing service results inRecon Using WMI Class
|
2021-06-15 15:43:44 +00:00 |
|
|
Detection Testing Service
|
1f65e24932
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:40:49 +00:00 |
|
|
root
|
0ca1e7f708
|
Added detection testing service results inRecon AVProduct Through Pwh or WMI
|
2021-06-15 15:40:48 +00:00 |
|
|
Detection Testing Service
|
58fd2b6756
|
Merge branch 'hpot_ttp' of https://github.com/splunk/security_content into hpot_ttp
|
2021-06-15 15:25:51 +00:00 |
|
|
root
|
9c821aa984
|
Added detection testing service results inPowershell Using memory As Backing Store
|
2021-06-15 15:25:51 +00:00 |
|
|
root
|
c8ad2a7428
|
Added detection testing service results inPowershell Processing Stream Of Data
|
2021-06-15 15:20:44 +00:00 |
|
|
root
|
f581f7a93e
|
Added detection testing service results inPowershell Creating Thread Mutex
|
2021-06-15 15:04:14 +00:00 |
|
|
P4T12ICK
|
dc3083731c
|
new detection testing
|
2021-06-15 16:50:42 +02:00 |
|
|
tccontre
|
261182ca93
|
Merge branch 'hpot_ttp' of github.com:splunk/security_content into hpot_ttp
|
2021-06-15 16:43:50 +02:00 |
|
|
tccontre
|
bed3227224
|
wild_check
|
2021-06-15 16:43:23 +02:00 |
|
|
P4T12ICK
|
aee6c5a38f
|
Merge branch 'automated_detections_testing_2' of github.com:splunk/security_content into automated_detections_testing_2
|
2021-06-15 16:34:21 +02:00 |
|
|
P4T12ICK
|
73e51ce108
|
new detection testing
|
2021-06-15 16:28:59 +02:00 |
|
|
github-actions[bot]
|
efe8d51365
|
Branch was auto-updated.
|
2021-06-15 14:23:42 +00:00 |
|
|
github-actions[bot]
|
6cd22b9b89
|
Branch was auto-updated.
|
2021-06-15 14:23:42 +00:00 |
|
|
github-actions[bot]
|
3c93eb4555
|
Branch was auto-updated.
|
2021-06-15 14:23:40 +00:00 |
|
|
github-actions[bot]
|
b147603932
|
Branch was auto-updated.
|
2021-06-15 14:23:36 +00:00 |
|
|
github-actions[bot]
|
4292b82e6c
|
Branch was auto-updated.
|
2021-06-15 14:23:36 +00:00 |
|
|
github-actions[bot]
|
6b3b3c5a26
|
Branch was auto-updated.
|
2021-06-15 14:23:35 +00:00 |
|
|
github-actions[bot]
|
3b39911a2d
|
Branch was auto-updated.
|
2021-06-15 14:23:34 +00:00 |
|
|
P4T12ICK
|
ec1a205bb5
|
Merge pull request #1442 from splunk/data_exfil
data_exfil
|
2021-06-15 16:23:17 +02:00 |
|
|
P4T12ICK
|
94636cb2c2
|
new detection testing
|
2021-06-15 16:22:34 +02:00 |
|
|
P4T12ICK
|
62ce70ce18
|
Merge branch 'develop' into data_exfil
|
2021-06-15 16:18:22 +02:00 |
|
|
root
|
61a105ade8
|
Added detection testing service results inDisable Logs Using WevtUtil
|
2021-06-15 14:14:45 +00:00 |
|
|
P4T12ICK
|
20ad04aee4
|
new detection testing
|
2021-06-15 16:05:10 +02:00 |
|
|
tccontre
|
c4c35025de
|
Merge branch 'ransom_ttps' of github.com:splunk/security_content into ransom_ttps
|
2021-06-15 15:54:26 +02:00 |
|
|
tccontre
|
5fe7b16036
|
sl
|
2021-06-15 15:54:02 +02:00 |
|
|
tccontre
|
197e73cd61
|
de
|
2021-06-15 15:51:08 +02:00 |
|
|
P4T12ICK
|
cffd071964
|
Merge branch 'automated_detections_testing_2' of github.com:splunk/security_content into automated_detections_testing_2
|
2021-06-15 15:47:46 +02:00 |
|
|
P4T12ICK
|
9f8dc333b7
|
new detection testing
|
2021-06-15 15:47:24 +02:00 |
|
|
github-actions[bot]
|
375416e0a4
|
Branch was auto-updated.
|
2021-06-15 13:44:14 +00:00 |
|
|
github-actions[bot]
|
85ecf75bb9
|
Branch was auto-updated.
|
2021-06-15 13:44:09 +00:00 |
|
|
github-actions[bot]
|
b9adec82fb
|
Branch was auto-updated.
|
2021-06-15 13:44:08 +00:00 |
|
|
github-actions[bot]
|
90f9bfabcc
|
Branch was auto-updated.
|
2021-06-15 13:44:07 +00:00 |
|
|
github-actions[bot]
|
9efbd25a69
|
Branch was auto-updated.
|
2021-06-15 13:44:05 +00:00 |
|