Commit Graph

8347 Commits

Author SHA1 Message Date
mvelazco e4f5a3894d fixing errors
fixing filter name
2021-06-21 17:10:54 -04:00
mvelazco 8d0b0caa91 Update suspicious_event_log_service_behavior.yml
updating filter name
2021-06-21 16:45:52 -04:00
mvelazco 1b7f966a84 re-factoring windows event log cleared detections 2021-06-21 16:40:59 -04:00
Bhavin Patel fe8d16e4a5 Merge branch 'develop' into rba_poc 2021-06-21 12:06:38 -07:00
patel-bhavin 400d591059 minor 2021-06-21 14:06:25 -05:00
David Dorsey 812cc46e65 Fix for TR-763 2021-06-21 13:21:30 -05:00
P4T12ICK d6a3edaa38 small change 2021-06-21 08:53:48 +02:00
divious1 ba2fa59b5e adding 3 rba examples 2021-06-19 22:15:49 -04:00
mhaag-spl ad85879e89 Fixing descriptions 2021-06-18 13:41:54 -06:00
root f612fd6d3e Added detection testing service results inRemote WMI Command Attempt 2021-06-18 17:22:24 +00:00
mhaag-spl 35492c75fb wrong data 2021-06-18 11:00:34 -06:00
mhaag-spl a7b838d473 Update script_execution_via_wmi.yml 2021-06-18 10:58:38 -06:00
mhaag-spl f39a270c0e Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 10:55:03 -06:00
mhaag-spl 2b9f393585 Update script_execution_via_wmi.yml 2021-06-18 10:54:52 -06:00
Detection Testing Service ca4ad15654 Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag 2021-06-18 16:53:51 +00:00
root 7d543761b6 Added detection testing service results inDetect WMI Event Subscription Persistence 2021-06-18 16:53:50 +00:00
mhaag-spl 1d95339bbd Update script_execution_via_wmi.yml 2021-06-18 10:52:51 -06:00
mhaag-spl 8e9ad3a42b Update script_execution_via_wmi.yml 2021-06-18 10:49:34 -06:00
mhaag-spl 37bd2897bb Update wmi_permanent_event_subscription___sysmon.yml 2021-06-18 10:37:47 -06:00
mhaag-spl 2e9b99ecf1 Updates 2021-06-18 10:34:25 -06:00
mhaag-spl 9396034913 Remote WMI Command Attempt 2021-06-18 10:02:13 -06:00
mhaag-spl f1abd7b538 Update detect_wmi_event_subscription_persistence.yml 2021-06-18 08:59:35 -06:00
mhaag-spl b51f291810 Update detect_wmi_event_subscription_persistence.test.yml 2021-06-18 08:22:36 -06:00
tccontre 4f55be64a0 ssa6 2021-06-18 15:28:08 +02:00
P4T12ICK 68a3ee162d increased timeout 2021-06-18 14:52:53 +02:00
P4T12ICK 865a488f45 wip 2021-06-18 14:43:34 +02:00
P4T12ICK 4a1d53b749 wip 2021-06-18 14:13:07 +02:00
P4T12ICK f474be39f6 Merge branch 'develop' into labeled_data_for_ml 2021-06-18 14:12:44 +02:00
tccontre 0106cc56be ssa5 2021-06-18 13:46:01 +02:00
P4T12ICK dfe21c1da8 wip labeled data 2021-06-18 13:24:50 +02:00
tccontre 57a3dbc5a3 ssa4 2021-06-18 13:10:16 +02:00
tccontre 2492795204 ssa3 2021-06-18 13:04:26 +02:00
github-actions[bot] 5185dd40b6 Branch was auto-updated. 2021-06-18 07:45:43 +00:00
github-actions[bot] 6d77362dff Branch was auto-updated. 2021-06-18 07:45:42 +00:00
github-actions[bot] 193089f6c5 Branch was auto-updated. 2021-06-18 07:45:41 +00:00
github-actions[bot] 4fd7970e19 Branch was auto-updated. 2021-06-18 07:45:40 +00:00
github-actions[bot] 65cc768c3a Branch was auto-updated. 2021-06-18 07:45:39 +00:00
github-actions[bot] 4debdfb17e Branch was auto-updated. 2021-06-18 07:45:39 +00:00
github-actions[bot] 30011967a1 Branch was auto-updated. 2021-06-18 07:45:38 +00:00
github-actions[bot] 1a8410d76f Branch was auto-updated. 2021-06-18 07:45:37 +00:00
P4T12ICK 68ee41c11e Merge pull request #1423 from splunk/ssa_gitlabci_clear_old_pipelines
Clear out old CI pipelines
2021-06-18 09:45:23 +02:00
P4T12ICK be3519aeac small change to triiger ci 2021-06-18 09:19:02 +02:00
P4T12ICK c90b2093ce wip 2021-06-18 09:17:36 +02:00
divious1 6c518294ed minor update 2021-06-17 21:44:20 -04:00
divious1 c1f4cae5b6 working example of risk object as well as threat object with ses annotations 2021-06-17 21:43:50 -04:00
github-actions[bot] 758cd6fad0 Branch was auto-updated. 2021-06-17 13:27:10 +00:00
github-actions[bot] 2f325f074e Branch was auto-updated. 2021-06-17 13:27:09 +00:00
github-actions[bot] 4b1578a547 Branch was auto-updated. 2021-06-17 13:27:08 +00:00
github-actions[bot] 3a80c7e260 Branch was auto-updated. 2021-06-17 13:27:07 +00:00
github-actions[bot] 7e83e6fd14 Branch was auto-updated. 2021-06-17 13:27:07 +00:00