 github-actions[bot]
|
2d7679a2b5
|
Branch was auto-updated.
|
2021-06-17 13:27:06 +00:00 |
|
|
github-actions[bot]
|
e3d65e92b3
|
Branch was auto-updated.
|
2021-06-17 13:27:04 +00:00 |
|
|
github-actions[bot]
|
9e9f583691
|
Branch was auto-updated.
|
2021-06-17 13:27:03 +00:00 |
|
|
github-actions[bot]
|
817bee6359
|
Branch was auto-updated.
|
2021-06-17 13:27:01 +00:00 |
|
|
tccontre
|
d67359635f
|
Merge pull request #1440 from splunk/hpot_ttp
Hpot ttp
|
2021-06-17 15:26:40 +02:00 |
|
|
github-actions[bot]
|
8c3061f290
|
Branch was auto-updated.
|
2021-06-17 13:22:24 +00:00 |
|
|
github-actions[bot]
|
ca3025f0f2
|
Branch was auto-updated.
|
2021-06-17 13:22:22 +00:00 |
|
|
github-actions[bot]
|
ab0e043823
|
Branch was auto-updated.
|
2021-06-17 13:22:21 +00:00 |
|
|
github-actions[bot]
|
204fdaf31e
|
Branch was auto-updated.
|
2021-06-17 13:22:20 +00:00 |
|
|
github-actions[bot]
|
1a788a30b0
|
Branch was auto-updated.
|
2021-06-17 13:22:19 +00:00 |
|
|
github-actions[bot]
|
f62a56a03a
|
Branch was auto-updated.
|
2021-06-17 13:22:18 +00:00 |
|
|
github-actions[bot]
|
4bb5b1c8ad
|
Branch was auto-updated.
|
2021-06-17 13:22:18 +00:00 |
|
|
github-actions[bot]
|
6ee17226c5
|
Branch was auto-updated.
|
2021-06-17 13:22:17 +00:00 |
|
|
github-actions[bot]
|
8f58b91da6
|
Branch was auto-updated.
|
2021-06-17 13:22:15 +00:00 |
|
|
github-actions[bot]
|
83bcadf468
|
Branch was auto-updated.
|
2021-06-17 13:22:14 +00:00 |
|
|
tccontre
|
882f1eafd0
|
Merge pull request #1436 from splunk/ransom_ttps
ransomware common TTPs
|
2021-06-17 15:21:56 +02:00 |
|
|
tccontre
|
1199c7f423
|
ssa3
|
2021-06-17 14:17:36 +02:00 |
|
|
divious1
|
8144275f34
|
making it a correct yml
|
2021-06-16 18:06:36 -04:00 |
|
|
divious1
|
1b076b9809
|
observables
|
2021-06-16 18:02:29 -04:00 |
|
|
mhaag-spl
|
90bf8bb996
|
Update detect_wmi_event_subscription_persistence.yml
|
2021-06-16 15:55:58 -06:00 |
|
|
Jose Enrique Hernandez
|
56e77dccfb
|
Update ssa___detect_kerberoasting.yml
|
2021-06-16 16:15:33 -04:00 |
|
|
Jose Enrique Hernandez
|
bfa0daabd4
|
fixe dv
|
2021-06-16 15:50:19 -04:00 |
|
|
mhaag-spl
|
99e3af8d10
|
wmi event subscription
|
2021-06-16 13:48:07 -06:00 |
|
|
divious1
|
e0446a8ebf
|
adding risk score
|
2021-06-16 13:52:16 -04:00 |
|
|
divious1
|
66c4215805
|
first test
|
2021-06-16 13:46:22 -04:00 |
|
|
mhaag-spl
|
c85fc0e1c2
|
Update malicious_powershell.yml
|
2021-06-16 10:41:49 -06:00 |
|
|
divious1
|
d35abc5689
|
moved around location of label
|
2021-06-16 12:06:49 -04:00 |
|
|
divious1
|
3134df2380
|
added deprecated label as well as description annotation
|
2021-06-16 11:59:31 -04:00 |
|
|
tccontre
|
b6ab35397a
|
ssa2
|
2021-06-16 17:11:08 +02:00 |
|
|
tccontre
|
fb1ce4133b
|
ssa2
|
2021-06-16 17:01:00 +02:00 |
|
|
divious1
|
06fbc3c476
|
Merge branch 'develop' into deprecation_of_detections
|
2021-06-16 10:42:00 -04:00 |
|
|
divious1
|
59ffaf8c25
|
adding deprecation to generate
|
2021-06-16 10:31:30 -04:00 |
|
|
tccontre
|
79c86ce0fd
|
ssa
|
2021-06-16 16:19:55 +02:00 |
|
|
tccontre
|
a1b27f125f
|
Delete allow_operation_with_consent_admin.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:22:00 +02:00 |
|
|
tccontre
|
9a25b289c3
|
Delete clear_unallocated_sector_using_cipher_app.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:41 +02:00 |
|
|
tccontre
|
de20af3ac5
|
Delete permission_modification_using_takeown_app.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:28 +02:00 |
|
|
tccontre
|
150d8c9f34
|
Delete prevent_automatic_repair_mode_using_bcdedit.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:21:05 +02:00 |
|
|
tccontre
|
32defb377a
|
Delete start_up_during_safe_mode_boot.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:20:51 +02:00 |
|
|
tccontre
|
b198eb9a22
|
Delete start_up_during_safe_mode_boot.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:20:32 +02:00 |
|
|
tccontre
|
6a92e68a08
|
Delete prevent_automatic_repair_mode_using_bcdedit.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:20:17 +02:00 |
|
|
tccontre
|
75189e2b1d
|
Delete permission_modification_using_takeown_app.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:19:57 +02:00 |
|
|
tccontre
|
e9e5c446f4
|
Delete clear_unallocated_sector_using_cipher_app.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:19:39 +02:00 |
|
|
tccontre
|
c7c2b94d37
|
Delete allow_operation_with_consent_admin.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:19:27 +02:00 |
|
|
tccontre
|
878bf692fa
|
Delete disable_logs_using_wevtutil.test.yml
un-intended files. this is already in rttp PR
|
2021-06-16 10:13:51 +02:00 |
|
|
tccontre
|
ff8878ce3d
|
Delete disable_logs_using_wevtutil.yml
un-intended files to be included in this PR. this file is in rttp PR
|
2021-06-16 10:12:14 +02:00 |
|
|
patel-bhavin
|
667396b4ce
|
updated rba spec
|
2021-06-15 17:04:51 -07:00 |
|
|
root
|
1cf181772d
|
Added detection testing service results inPowerShell Domain Enumeration
|
2021-06-15 20:53:39 +00:00 |
|
|
mhaag-spl
|
25b1087abc
|
Domain enumeration
|
2021-06-15 14:02:45 -06:00 |
|
|
root
|
b83ab2b8b5
|
Added detection testing service results inPowerShell Loading DotNET into Memory via System Reflection Assembly
|
2021-06-15 19:53:56 +00:00 |
|
|
mhaag-spl
|
4476dc1705
|
spec chars
|
2021-06-15 13:28:27 -06:00 |
|