Commit Graph

8347 Commits

Author SHA1 Message Date
mhaag-spl d5cdffe5fa Update fodhelper_uac_bypass.test.yml 2021-03-02 12:52:07 -07:00
root de916f2e60 Added detection testing service results inSuspicious SearchProtocolHost no Command Line Arguments 2021-03-02 19:26:38 +00:00
github-actions[bot] 00cb86916c Branch was auto-updated. 2021-03-02 19:02:26 +00:00
github-actions[bot] 30f63d8d0f Branch was auto-updated. 2021-03-02 19:02:26 +00:00
github-actions[bot] ab7a3a4d15 Branch was auto-updated. 2021-03-02 19:02:25 +00:00
github-actions[bot] 9e10364a4e Branch was auto-updated. 2021-03-02 19:02:24 +00:00
github-actions[bot] 115df4d76f Branch was auto-updated. 2021-03-02 19:02:23 +00:00
github-actions[bot] 7b09668c35 Branch was auto-updated. 2021-03-02 19:02:22 +00:00
github-actions[bot] e10ca2c91b Branch was auto-updated. 2021-03-02 19:02:22 +00:00
github-actions[bot] 1cb815451d Branch was auto-updated. 2021-03-02 19:02:21 +00:00
github-actions[bot] f869ff7107 Branch was auto-updated. 2021-03-02 19:02:19 +00:00
github-actions[bot] 81575f390e Branch was auto-updated. 2021-03-02 19:02:18 +00:00
github-actions[bot] 93f42f247a Branch was auto-updated. 2021-03-02 19:02:18 +00:00
github-actions[bot] fb39062072 Branch was auto-updated. 2021-03-02 19:02:16 +00:00
mhart-splunk 3c074e2665 Merge pull request #1218 from splunk/TR-495_misspelling
Fixed misspelling in ransomware
2021-03-02 14:01:50 -05:00
root 9c1bcaf16d Added detection testing service results inSuspicious DLLHost no Command Line Arguments 2021-03-02 18:36:41 +00:00
Michael Hart e37aa006db Fixed misspelling in ransomware 2021-03-02 13:31:55 -05:00
mhaag-spl 1efa4bcf5f Update ryuk_wake_on_lan_command.yml 2021-03-02 11:19:04 -07:00
Detection Testing Service 66d9b7de7b Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3 2021-03-02 17:58:45 +00:00
root eb16361776 Added detection testing service results inSuspicious GPUpdate no Command Line Arguments 2021-03-02 17:58:44 +00:00
mhaag-spl 6952b99ea4 Update windows_disableantispyware_reg.yml 2021-03-02 10:53:49 -07:00
mhaag-spl 66b650d835 Windows DisableAntiSpyware Registry 2021-03-02 10:42:08 -07:00
Ignacio Bermudez Corrales 16b9deabf8 cant read from user repos 2021-03-02 09:37:23 -08:00
P4T12ICK c43f7c8878 WIP 2021-03-02 18:06:15 +01:00
mhaag-spl 0e18f64414 powershell 2021-03-02 09:43:31 -07:00
P4T12ICK 34f64d972c required_fields for detections 2021-03-02 10:32:55 +01:00
P4T12ICK bc31f18450 Merge branch 'ssa_end_to_end_testing' of github.com:splunk/security-content into ssa_end_to_end_testing 2021-03-02 09:13:46 +01:00
P4T12ICK fa561db694 wip 2021-03-02 09:13:27 +01:00
Ignacio Bermudez Corrales 1b0a0a4338 missing docker credentials 2021-03-02 00:02:35 -08:00
Ignacio Bermudez Corrales 742198d5e5 v0 of deployer 2021-03-01 23:52:22 -08:00
root ef7af97e8e Added detection testing service results inAWS Create Policy Version to allow all resources 2021-03-02 03:56:03 +00:00
divious1 3fc7550cdc working hyper links 2021-03-01 22:04:55 -05:00
divious1 239745b2d6 added organized by kind for detections 2021-03-01 21:36:26 -05:00
mhaag-spl 16627bf207 update url 2021-03-01 18:28:25 -07:00
bpatel 46b623f7a0 tested on docker 2021-03-01 16:54:17 -08:00
bpatel 29a101da97 update local generator 2021-03-01 15:27:25 -08:00
root 17c68a56f0 Added detection testing service results inAWS Create Policy Version to allow all resources 2021-03-01 23:12:11 +00:00
mhaag-spl 9794fd13fb Any PowerShell DownloadString 2021-03-01 16:02:36 -07:00
mhaag-spl bd2c69ec28 Eventvwr UAC Bypass 2021-03-01 15:18:27 -07:00
bpatel ea7ccd21bb itworksss 2021-03-01 13:30:02 -08:00
bpatel 57871e4886 testing 2021-03-01 13:12:18 -08:00
mhaag-spl bcbd2ebb19 Fodhelper uac bypass 2021-03-01 13:38:06 -07:00
mhaag-spl 5a09edf797 Suspicious Scheduled Task from Public Directory 2021-03-01 12:45:22 -07:00
bpatel 47dec9d123 test file 2021-03-01 11:27:29 -08:00
divious1 75c24a9f34 added markup 2021-03-01 13:49:16 -05:00
mhaag-spl a576744f88 Ryuk Wake on LAN 2021-03-01 10:07:12 -07:00
P4T12ICK 05d3fad633 new test 2021-03-01 16:51:09 +01:00
P4T12ICK a888b771c4 new test 2021-03-01 16:51:05 +01:00
P4T12ICK edaf53ff1c test 2021-03-01 16:44:26 +01:00
P4T12ICK 84984b453b wip 2021-03-01 16:42:22 +01:00