 tcontreras
|
0e3bf4835f
|
spear2
|
2021-04-19 16:45:03 +02:00 |
|
|
tcontreras
|
3d390bc1d6
|
Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach
|
2021-04-19 16:41:30 +02:00 |
|
|
tcontreras
|
8f80520df7
|
spear
|
2021-04-19 16:40:53 +02:00 |
|
|
mvelazco
|
4cb46fcd21
|
Update active_directory_password_spraying.yml
description update
|
2021-04-16 10:48:18 -04:00 |
|
|
Stanislav Miskovic
|
6139a30ce7
|
Adding a more deterministic matching of command line options.
|
2021-04-15 15:49:59 -07:00 |
|
|
mhaag-spl
|
5d81ce6926
|
winevent public path
|
2021-04-15 15:14:50 -06:00 |
|
|
Michael Haag
|
5361b73924
|
Merge branch 'develop' into cloudywithachanceofhaags
|
2021-04-15 15:05:15 -06:00 |
|
|
mhaag-spl
|
18586f6bb0
|
winevents task registered
|
2021-04-15 14:54:22 -06:00 |
|
|
mhaag-spl
|
a74171d7e3
|
removals
|
2021-04-15 14:25:15 -06:00 |
|
|
root
|
cc38063d6f
|
Added detection testing service results inAWS IAM Successful Group Deletion
|
2021-04-15 20:16:33 +00:00 |
|
|
root
|
10d6fccda7
|
Added detection testing service results inAWS IAM Failure Group Deletion
|
2021-04-15 19:53:19 +00:00 |
|
|
research bot
|
a40dc12832
|
updating docs and package bits [ci skip]
|
2021-04-15 19:40:20 +00:00 |
|
|
Detection Testing Service
|
7c192a8e44
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-15 19:21:10 +00:00 |
|
|
root
|
7f30daf301
|
Added detection testing service results inAWS IAM Delete Policy
|
2021-04-15 19:21:10 +00:00 |
|
|
Detection Testing Service
|
7b0e2bbf68
|
Merge branch 'cloudywithachanceofhaags' of https://github.com/splunk/security_content into cloudywithachanceofhaags
|
2021-04-15 19:17:21 +00:00 |
|
|
root
|
f07a6cd445
|
Added detection testing service results inAWS IAM Assume Role Policy Brute Force
|
2021-04-15 19:17:21 +00:00 |
|
|
github-actions[bot]
|
2e6fab0dc0
|
Branch was auto-updated.
|
2021-04-15 19:10:19 +00:00 |
|
|
github-actions[bot]
|
436906b79f
|
Branch was auto-updated.
|
2021-04-15 19:10:18 +00:00 |
|
|
github-actions[bot]
|
26ada2e1f7
|
Branch was auto-updated.
|
2021-04-15 19:10:17 +00:00 |
|
|
github-actions[bot]
|
456e4e3722
|
Branch was auto-updated.
|
2021-04-15 19:10:15 +00:00 |
|
|
github-actions[bot]
|
4e9f4a8175
|
Branch was auto-updated.
|
2021-04-15 19:10:14 +00:00 |
|
|
github-actions[bot]
|
7ada42b190
|
Branch was auto-updated.
|
2021-04-15 19:10:13 +00:00 |
|
|
github-actions[bot]
|
31f285a4b0
|
Branch was auto-updated.
|
2021-04-15 19:10:11 +00:00 |
|
|
github-actions[bot]
|
5373b817bc
|
Branch was auto-updated.
|
2021-04-15 19:10:10 +00:00 |
|
|
Jose Enrique Hernandez
|
85220f56bf
|
Merge pull request #1335 from splunk/saaws_appinspect
remove configs that are not needed by saaws
|
2021-04-15 15:09:53 -04:00 |
|
|
bpatel
|
cc3d3cd7e2
|
remove configs that are not needed by saaws
|
2021-04-15 12:00:29 -07:00 |
|
|
root
|
d6a32d4bd5
|
Added detection testing service results inAWS IAM AccessDenied Discovery Events
|
2021-04-15 18:47:13 +00:00 |
|
|
root
|
453b0accec
|
Added detection testing service results inAWS Excessive List Command Usage
|
2021-04-15 18:13:33 +00:00 |
|
|
tcontreras
|
07e5528918
|
Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach
|
2021-04-15 19:40:46 +02:00 |
|
|
tcontreras
|
7a0d9be5a5
|
spear_update
|
2021-04-15 19:39:21 +02:00 |
|
|
mvelazco
|
c84656c87b
|
adding one extra detection, NTLM spray with invalid users
|
2021-04-15 10:45:10 -04:00 |
|
|
mvelazco
|
e0cbf01590
|
adding 2 extra detections
|
2021-04-15 09:42:36 -04:00 |
|
|
root
|
8cd49a3f7a
|
Added detection testing service results inOffice Document Executing Macro Code
|
2021-04-15 08:25:53 +00:00 |
|
|
tccontre
|
0fa575ad4a
|
Delete office_application_spawned_cmd_shell.test.yml
|
2021-04-15 09:46:20 +02:00 |
|
|
tccontre
|
e85860be6c
|
Delete office_application_spawned_cmd_shell.yml
|
2021-04-15 09:46:00 +02:00 |
|
|
github-actions[bot]
|
81fad1383b
|
Branch was auto-updated.
|
2021-04-15 07:31:13 +00:00 |
|
|
github-actions[bot]
|
897c19c0ec
|
Branch was auto-updated.
|
2021-04-15 07:31:13 +00:00 |
|
|
github-actions[bot]
|
6dff266bb3
|
Branch was auto-updated.
|
2021-04-15 07:31:11 +00:00 |
|
|
github-actions[bot]
|
cf0ea3ca61
|
Branch was auto-updated.
|
2021-04-15 07:31:09 +00:00 |
|
|
github-actions[bot]
|
632bae41ca
|
Branch was auto-updated.
|
2021-04-15 07:31:08 +00:00 |
|
|
github-actions[bot]
|
788b1b9550
|
Branch was auto-updated.
|
2021-04-15 07:31:07 +00:00 |
|
|
github-actions[bot]
|
995bae1d0e
|
Branch was auto-updated.
|
2021-04-15 07:31:06 +00:00 |
|
|
github-actions[bot]
|
63af5b09a7
|
Branch was auto-updated.
|
2021-04-15 07:31:01 +00:00 |
|
|
P4T12ICK
|
274e5f1b43
|
Merge pull request #1334 from splunk/fix_malicious_ps_as_service
Added various ways to execute powershell, ...
|
2021-04-15 09:30:41 +02:00 |
|
|
root
|
a0914ddcdd
|
Added detection testing service results inMalicious Powershell Executed As A Service
|
2021-04-15 07:23:08 +00:00 |
|
|
Stanislav Miskovic
|
62ed90ccbd
|
Added various ways to execute powershell, made match of the powershell executable mandatory, added that execution must be followed by one of the hidding or no-exit options.
|
2021-04-14 22:46:38 -07:00 |
|
|
mhaag-spl
|
94eccb2565
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:28:49 -06:00 |
|
|
mhaag-spl
|
79bff151de
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:25:26 -06:00 |
|
|
mhaag-spl
|
f18542b214
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:23:30 -06:00 |
|
|
mhaag-spl
|
537be8ede4
|
Update winevent_scheduled_task_created_within_public_path.yml
|
2021-04-14 21:17:59 -06:00 |
|