 github-actions[bot]
|
95c4e70787
|
Branch was auto-updated.
|
2021-05-13 17:54:31 +00:00 |
|
|
Jose Enrique Hernandez
|
a0b9c4290d
|
Merge pull request #1342 from splunk/password_spraying_TR-515
Password spraying TR-515
|
2021-05-13 13:54:04 -04:00 |
|
|
bpatel
|
571781fc8e
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 10:50:36 -07:00 |
|
|
bpatel
|
fdb96e514a
|
mapping existing dettections
|
2021-05-13 10:50:29 -07:00 |
|
|
Michael Haag
|
b600c1283b
|
Update cmlua_or_cmstplua_uac_bypass.yml
|
2021-05-13 11:49:30 -06:00 |
|
|
root
|
71b3e135df
|
Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass
|
2021-05-13 17:21:20 +00:00 |
|
|
tcontreras
|
c24f154dce
|
com_obj
|
2021-05-13 18:58:14 +02:00 |
|
|
mhaag-spl
|
5ff8c6372c
|
SLUI
|
2021-05-13 06:52:59 -06:00 |
|
|
bpatel
|
4f9b8a2b1b
|
test time
|
2021-05-12 14:53:27 -07:00 |
|
|
bpatel
|
1b5bf2a065
|
story namne
|
2021-05-12 14:52:06 -07:00 |
|
|
bpatel
|
545951b315
|
narrative
|
2021-05-12 14:06:53 -07:00 |
|
|
bpatel
|
743bbaf051
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-12 13:50:15 -07:00 |
|
|
bpatel
|
03444a29e9
|
test file
|
2021-05-12 13:50:03 -07:00 |
|
|
mhaag-spl
|
1992d8fe8b
|
Update extract_sam_from_registry.yml
|
2021-05-12 14:49:44 -06:00 |
|
|
mhaag-spl
|
f4f519f6aa
|
Extract SAM from registry
|
2021-05-12 14:45:55 -06:00 |
|
|
mhaag-spl
|
09e6d43e52
|
Added Cobalt Named pIpe
|
2021-05-12 14:22:01 -06:00 |
|
|
bpatel
|
4a840d4184
|
ericks detections from xmrig
|
2021-05-12 12:58:00 -07:00 |
|
|
bpatel
|
542f229457
|
story_file
|
2021-05-12 12:37:33 -07:00 |
|
|
tcontreras
|
d984670146
|
shadow1
|
2021-05-12 18:49:24 +02:00 |
|
|
tcontreras
|
7bb8eb506c
|
shadow
|
2021-05-12 18:35:13 +02:00 |
|
|
Michael Haag
|
ed333d33a8
|
Update multiple_users_failing_to_authenticate_from_host_using_kerberos.yml
|
2021-05-11 14:17:38 -06:00 |
|
|
root
|
b18224b2bb
|
Added detection testing service results inRansomware Notes bulk creation
|
2021-05-11 14:13:15 +00:00 |
|
|
tcontreras
|
8f98a15064
|
minor_mod_ransomnotes
|
2021-05-11 15:04:40 +02:00 |
|
|
Detection Testing Service
|
9f9dfd6a35
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 10:25:29 +00:00 |
|
|
root
|
8b67211aa1
|
Added detection testing service results inSuspicious Process File Path
|
2021-05-11 10:25:28 +00:00 |
|
|
Detection Testing Service
|
1110edc03c
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 10:25:24 +00:00 |
|
|
root
|
00c5f5556e
|
Added detection testing service results inXMRIG Driver Loaded
|
2021-05-11 10:25:23 +00:00 |
|
|
root
|
4a4dfb8031
|
Added detection testing service results inSuspicious Driver Loaded Path
|
2021-05-11 10:23:26 +00:00 |
|
|
Detection Testing Service
|
aaeda750a1
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 10:01:05 +00:00 |
|
|
root
|
e10788eaee
|
Added detection testing service results inProcess Kill Base On File Path
|
2021-05-11 10:01:04 +00:00 |
|
|
root
|
9c519fef56
|
Added detection testing service results inSchtasks Run Task On Demand
|
2021-05-11 10:00:32 +00:00 |
|
|
Detection Testing Service
|
6c1e16d952
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 09:31:02 +00:00 |
|
|
root
|
4dec3deb52
|
Added detection testing service results inModify ACL permission To Files Or Folder
|
2021-05-11 09:31:01 +00:00 |
|
|
root
|
d9de782e9e
|
Added detection testing service results inICACLS Grant Command
|
2021-05-11 09:28:38 +00:00 |
|
|
Detection Testing Service
|
85f4a2c7a4
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 09:06:31 +00:00 |
|
|
root
|
453b943eec
|
Added detection testing service results inIcacls Deny Command
|
2021-05-11 09:06:30 +00:00 |
|
|
root
|
db89ba0646
|
Added detection testing service results inHide User Account From Sign-In Screen
|
2021-05-11 09:04:36 +00:00 |
|
|
Detection Testing Service
|
7091e56f50
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 08:44:14 +00:00 |
|
|
root
|
4820d8875f
|
Added detection testing service results inExcessive Usage Of Taskkill
|
2021-05-11 08:44:13 +00:00 |
|
|
root
|
4af21b2624
|
Added detection testing service results inExecutables Or Script Creation In Suspicious Path
|
2021-05-11 08:43:47 +00:00 |
|
|
Detection Testing Service
|
dc5aa6142f
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 08:20:21 +00:00 |
|
|
root
|
f2291b4896
|
Added detection testing service results inExcessive Usage Of Net App
|
2021-05-11 08:20:20 +00:00 |
|
|
root
|
e9130822f3
|
Added detection testing service results inExcessive Usage Of Cacls App
|
2021-05-11 08:14:34 +00:00 |
|
|
Detection Testing Service
|
6518d905a5
|
Merge branch 'xmrig' of https://github.com/splunk/security_content into xmrig
|
2021-05-11 07:46:47 +00:00 |
|
|
root
|
8f89820cfb
|
Added detection testing service results inExcessive Service Stop Attempt
|
2021-05-11 07:46:47 +00:00 |
|
|
root
|
d3611ef16d
|
Added detection testing service results inExcessive Attempt To Disable Services
|
2021-05-11 07:37:38 +00:00 |
|
|
root
|
f31f51731e
|
Added detection testing service results inEnumerate Users Local Group Using Telegram
|
2021-05-11 07:19:08 +00:00 |
|
|
mvelazco
|
bf1b409919
|
removing newline
|
2021-05-07 16:48:03 -04:00 |
|
|
mvelazco
|
768cd4c3e6
|
single quote fun
|
2021-05-07 16:34:49 -04:00 |
|
|
mvelazco
|
56f241a8c4
|
Merge branch 'password_spraying_TR-515' of github.com:splunk/security_content into password_spraying_TR-515
|
2021-05-07 16:27:56 -04:00 |
|