 patel-bhavin
|
e7b854b7e6
|
validate risk score
|
2021-06-29 13:15:56 -05:00 |
|
|
Michael Hart
|
04c4263b56
|
Adding edits
|
2021-06-29 09:47:37 -04:00 |
|
|
Michael Hart
|
4dbc42c86c
|
Initial commit
|
2021-06-28 22:10:15 -04:00 |
|
|
github-actions[bot]
|
868a3fe2a1
|
Branch was auto-updated.
|
2021-06-28 18:29:50 +00:00 |
|
|
github-actions[bot]
|
dc67fbd644
|
Branch was auto-updated.
|
2021-06-28 18:29:49 +00:00 |
|
|
github-actions[bot]
|
e4a7b5a75d
|
Branch was auto-updated.
|
2021-06-28 18:29:47 +00:00 |
|
|
github-actions[bot]
|
52aaa53e40
|
Branch was auto-updated.
|
2021-06-28 18:29:47 +00:00 |
|
|
Michael Haag
|
40278784b2
|
Merge pull request #1465 from splunk/excessive_sc_start_disable
Excessive number of sc.exe start as disabled calls
|
2021-06-28 12:29:30 -06:00 |
|
|
Michael Hart
|
d9c8e10920
|
Slight correction. Process contains cmd line arguments for finding distinct number of sc invocations. Removing this and process id from BY clause
|
2021-06-28 14:14:42 -04:00 |
|
|
Michael Haag
|
f10bdb4742
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 11:34:18 -06:00 |
|
|
Michael Haag
|
bfa5d036ae
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 10:35:29 -06:00 |
|
|
Michael Haag
|
ae269feb4b
|
Update excessive_number_of_service_control_start_as_disabled.yml
|
2021-06-28 10:35:01 -06:00 |
|
|
github-actions[bot]
|
d57b067af1
|
Branch was auto-updated.
|
2021-06-28 16:09:43 +00:00 |
|
|
github-actions[bot]
|
f17961abd1
|
Branch was auto-updated.
|
2021-06-28 16:09:41 +00:00 |
|
|
github-actions[bot]
|
6c514d738e
|
Branch was auto-updated.
|
2021-06-28 16:09:40 +00:00 |
|
|
github-actions[bot]
|
46d89a16e5
|
Branch was auto-updated.
|
2021-06-28 16:09:39 +00:00 |
|
|
github-actions[bot]
|
ac009d421e
|
Branch was auto-updated.
|
2021-06-28 16:09:37 +00:00 |
|
|
Jose Enrique Hernandez
|
c5919dee1f
|
Merge pull request #1467 from splunk/doc_gen_bug
doc gen bug
|
2021-06-28 12:09:20 -04:00 |
|
|
divious1
|
8ae54e8e1e
|
this was brough up by doc team, it was causing docs to not be updated
|
2021-06-25 15:54:57 -04:00 |
|
|
github-actions[bot]
|
d644883579
|
Branch was auto-updated.
|
2021-06-25 19:51:27 +00:00 |
|
|
github-actions[bot]
|
ab932a64f9
|
Branch was auto-updated.
|
2021-06-25 19:51:26 +00:00 |
|
|
github-actions[bot]
|
d67e5ced6a
|
Branch was auto-updated.
|
2021-06-25 19:51:24 +00:00 |
|
|
github-actions[bot]
|
1796f6cc2b
|
Branch was auto-updated.
|
2021-06-25 19:51:24 +00:00 |
|
|
github-actions[bot]
|
874a906d4b
|
Branch was auto-updated.
|
2021-06-25 19:51:21 +00:00 |
|
|
Jose Enrique Hernandez
|
8ab5325de6
|
Merge pull request #1466 from splunk/mustang_fixing_names
Mustang fixing names
|
2021-06-25 15:51:05 -04:00 |
|
|
root
|
d184ff8b1e
|
Added detection testing service results inExcessive number of service control start as disabled
|
2021-06-25 19:29:17 +00:00 |
|
|
divious1
|
30b6ec1eed
|
Revert "changing O365 to Office 365"
This reverts commit b05af9f100.
|
2021-06-25 15:05:19 -04:00 |
|
|
divious1
|
022c5be43e
|
Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming"
This reverts commit 45c138d518.
|
2021-06-25 15:03:55 -04:00 |
|
|
Michael Hart
|
1a26fc38e3
|
contentctl puts relative link to detection file in wrong place
|
2021-06-25 15:00:46 -04:00 |
|
|
Michael Hart
|
98a7b4e3ff
|
Adding references
|
2021-06-25 14:56:08 -04:00 |
|
|
divious1
|
b05af9f100
|
changing O365 to Office 365
|
2021-06-25 14:52:58 -04:00 |
|
|
divious1
|
f262360d0a
|
updated CloudTrails to AWS CloudTrails
|
2021-06-25 14:50:50 -04:00 |
|
|
Michael Hart
|
518d03b1a1
|
Detection looks for excessive number of sc.exe start as disabled calls
|
2021-06-25 14:48:48 -04:00 |
|
|
divious1
|
45c138d518
|
updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming
|
2021-06-25 14:44:02 -04:00 |
|
|
github-actions[bot]
|
5c1431addd
|
Branch was auto-updated.
|
2021-06-25 13:14:26 +00:00 |
|
|
github-actions[bot]
|
0405921d39
|
Branch was auto-updated.
|
2021-06-25 13:14:25 +00:00 |
|
|
github-actions[bot]
|
23861ef01a
|
Branch was auto-updated.
|
2021-06-25 13:14:23 +00:00 |
|
|
github-actions[bot]
|
402a871763
|
Branch was auto-updated.
|
2021-06-25 13:14:21 +00:00 |
|
|
Jose Enrique Hernandez
|
9011c52d9c
|
Merge pull request #1463 from splunk/fixing_reporting_bugs
Coverage reporting 101% .. mathematically incorrect.
|
2021-06-25 09:14:04 -04:00 |
|
|
divious1
|
b29a96d222
|
Merge branch 'fixing_reporting_bugs' of github.com:splunk/security_content into fixing_reporting_bugs
|
2021-06-25 08:41:54 -04:00 |
|
|
divious1
|
3c39aa59ae
|
with the change of the default image pip is treated slightly different
|
2021-06-25 08:41:48 -04:00 |
|
|
tccontre
|
5523d3e296
|
Merge branch 'ransom_ttp2' of github.com:splunk/security_content into ransom_ttp2
|
2021-06-25 10:21:38 +02:00 |
|
|
tccontre
|
69b11d3471
|
rttp4
|
2021-06-25 10:21:04 +02:00 |
|
|
github-actions[bot]
|
5a9d1122f4
|
Branch was auto-updated.
|
2021-06-25 07:49:35 +00:00 |
|
|
github-actions[bot]
|
58fbe35161
|
Branch was auto-updated.
|
2021-06-25 07:49:31 +00:00 |
|
|
github-actions[bot]
|
7fc55957df
|
Branch was auto-updated.
|
2021-06-25 07:49:28 +00:00 |
|
|
github-actions[bot]
|
ab143dd3ab
|
Branch was auto-updated.
|
2021-06-25 07:49:27 +00:00 |
|
|
github-actions[bot]
|
93c7997b49
|
Branch was auto-updated.
|
2021-06-25 07:49:24 +00:00 |
|
|
tccontre
|
e72f6c6cea
|
Merge pull request #1464 from splunk/fixing_doc_gen_ci_issue
doc_gen.py issues with pyattck
|
2021-06-25 09:49:10 +02:00 |
|
|
divious1
|
3acbb20716
|
Merge branch 'fixing_doc_gen_ci_issue' into fixing_reporting_bugs
|
2021-06-24 23:31:36 -04:00 |
|