mvelazco
|
e4f5a3894d
|
fixing errors
fixing filter name
|
2021-06-21 17:10:54 -04:00 |
|
mvelazco
|
8d0b0caa91
|
Update suspicious_event_log_service_behavior.yml
updating filter name
|
2021-06-21 16:45:52 -04:00 |
|
mvelazco
|
1b7f966a84
|
re-factoring windows event log cleared detections
|
2021-06-21 16:40:59 -04:00 |
|
Bhavin Patel
|
fe8d16e4a5
|
Merge branch 'develop' into rba_poc
|
2021-06-21 12:06:38 -07:00 |
|
patel-bhavin
|
400d591059
|
minor
|
2021-06-21 14:06:25 -05:00 |
|
David Dorsey
|
812cc46e65
|
Fix for TR-763
|
2021-06-21 13:21:30 -05:00 |
|
P4T12ICK
|
d6a3edaa38
|
small change
|
2021-06-21 08:53:48 +02:00 |
|
divious1
|
ba2fa59b5e
|
adding 3 rba examples
|
2021-06-19 22:15:49 -04:00 |
|
mhaag-spl
|
ad85879e89
|
Fixing descriptions
|
2021-06-18 13:41:54 -06:00 |
|
root
|
f612fd6d3e
|
Added detection testing service results inRemote WMI Command Attempt
|
2021-06-18 17:22:24 +00:00 |
|
mhaag-spl
|
35492c75fb
|
wrong data
|
2021-06-18 11:00:34 -06:00 |
|
mhaag-spl
|
a7b838d473
|
Update script_execution_via_wmi.yml
|
2021-06-18 10:58:38 -06:00 |
|
mhaag-spl
|
f39a270c0e
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-18 10:55:03 -06:00 |
|
mhaag-spl
|
2b9f393585
|
Update script_execution_via_wmi.yml
|
2021-06-18 10:54:52 -06:00 |
|
Detection Testing Service
|
ca4ad15654
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-18 16:53:51 +00:00 |
|
root
|
7d543761b6
|
Added detection testing service results inDetect WMI Event Subscription Persistence
|
2021-06-18 16:53:50 +00:00 |
|
mhaag-spl
|
1d95339bbd
|
Update script_execution_via_wmi.yml
|
2021-06-18 10:52:51 -06:00 |
|
mhaag-spl
|
8e9ad3a42b
|
Update script_execution_via_wmi.yml
|
2021-06-18 10:49:34 -06:00 |
|
mhaag-spl
|
37bd2897bb
|
Update wmi_permanent_event_subscription___sysmon.yml
|
2021-06-18 10:37:47 -06:00 |
|
mhaag-spl
|
2e9b99ecf1
|
Updates
|
2021-06-18 10:34:25 -06:00 |
|
mhaag-spl
|
9396034913
|
Remote WMI Command Attempt
|
2021-06-18 10:02:13 -06:00 |
|
mhaag-spl
|
f1abd7b538
|
Update detect_wmi_event_subscription_persistence.yml
|
2021-06-18 08:59:35 -06:00 |
|
mhaag-spl
|
b51f291810
|
Update detect_wmi_event_subscription_persistence.test.yml
|
2021-06-18 08:22:36 -06:00 |
|
tccontre
|
4f55be64a0
|
ssa6
|
2021-06-18 15:28:08 +02:00 |
|
P4T12ICK
|
68a3ee162d
|
increased timeout
|
2021-06-18 14:52:53 +02:00 |
|
P4T12ICK
|
865a488f45
|
wip
|
2021-06-18 14:43:34 +02:00 |
|
P4T12ICK
|
4a1d53b749
|
wip
|
2021-06-18 14:13:07 +02:00 |
|
P4T12ICK
|
f474be39f6
|
Merge branch 'develop' into labeled_data_for_ml
|
2021-06-18 14:12:44 +02:00 |
|
tccontre
|
0106cc56be
|
ssa5
|
2021-06-18 13:46:01 +02:00 |
|
P4T12ICK
|
dfe21c1da8
|
wip labeled data
|
2021-06-18 13:24:50 +02:00 |
|
tccontre
|
57a3dbc5a3
|
ssa4
|
2021-06-18 13:10:16 +02:00 |
|
tccontre
|
2492795204
|
ssa3
|
2021-06-18 13:04:26 +02:00 |
|
github-actions[bot]
|
5185dd40b6
|
Branch was auto-updated.
|
2021-06-18 07:45:43 +00:00 |
|
github-actions[bot]
|
6d77362dff
|
Branch was auto-updated.
|
2021-06-18 07:45:42 +00:00 |
|
github-actions[bot]
|
193089f6c5
|
Branch was auto-updated.
|
2021-06-18 07:45:41 +00:00 |
|
github-actions[bot]
|
4fd7970e19
|
Branch was auto-updated.
|
2021-06-18 07:45:40 +00:00 |
|
github-actions[bot]
|
65cc768c3a
|
Branch was auto-updated.
|
2021-06-18 07:45:39 +00:00 |
|
github-actions[bot]
|
4debdfb17e
|
Branch was auto-updated.
|
2021-06-18 07:45:39 +00:00 |
|
github-actions[bot]
|
30011967a1
|
Branch was auto-updated.
|
2021-06-18 07:45:38 +00:00 |
|
github-actions[bot]
|
1a8410d76f
|
Branch was auto-updated.
|
2021-06-18 07:45:37 +00:00 |
|
P4T12ICK
|
68ee41c11e
|
Merge pull request #1423 from splunk/ssa_gitlabci_clear_old_pipelines
Clear out old CI pipelines
|
2021-06-18 09:45:23 +02:00 |
|
P4T12ICK
|
be3519aeac
|
small change to triiger ci
|
2021-06-18 09:19:02 +02:00 |
|
P4T12ICK
|
c90b2093ce
|
wip
|
2021-06-18 09:17:36 +02:00 |
|
divious1
|
6c518294ed
|
minor update
|
2021-06-17 21:44:20 -04:00 |
|
divious1
|
c1f4cae5b6
|
working example of risk object as well as threat object with ses annotations
|
2021-06-17 21:43:50 -04:00 |
|
github-actions[bot]
|
758cd6fad0
|
Branch was auto-updated.
|
2021-06-17 13:27:10 +00:00 |
|
github-actions[bot]
|
2f325f074e
|
Branch was auto-updated.
|
2021-06-17 13:27:09 +00:00 |
|
github-actions[bot]
|
4b1578a547
|
Branch was auto-updated.
|
2021-06-17 13:27:08 +00:00 |
|
github-actions[bot]
|
3a80c7e260
|
Branch was auto-updated.
|
2021-06-17 13:27:07 +00:00 |
|
github-actions[bot]
|
7e83e6fd14
|
Branch was auto-updated.
|
2021-06-17 13:27:07 +00:00 |
|