Commit Graph

1663 Commits

Author SHA1 Message Date
github-actions[bot] 9833a15fd3 Branch was auto-updated. 2021-04-02 18:24:52 +00:00
Michael Haag 3aeec206e9 Update powershell_start_bitstransfer.yml 2021-04-02 11:50:42 -06:00
root fa1c0e2c62 Added detection testing service results inDisabling Task Manager 2021-04-01 12:20:50 +00:00
root b0173344e3 Added detection testing service results inDisabling NoRun Windows App 2021-04-01 11:58:27 +00:00
root 5ef2916636 Added detection testing service results inDisabling SystemRestore In Registry 2021-04-01 11:25:29 +00:00
root 031a8a9945 Added detection testing service results inDisabling FolderOptions Windows Feature 2021-04-01 10:06:43 +00:00
root d294ac965c Added detection testing service results inDisabling Firewall with Netsh 2021-04-01 09:11:18 +00:00
root e0cdb5bb1c Added detection testing service results inDisabling ControlPanel 2021-04-01 08:46:08 +00:00
root 7e29850f48 Added detection testing service results inDisabling CMD Application 2021-04-01 08:27:41 +00:00
root d35bf6fdab Added detection testing service results inDisable Windows SmartScreen Protection 2021-04-01 07:59:18 +00:00
mhaag-spl 6d17629359 Text updates 2021-03-31 15:01:44 -06:00
root 9140952d06 Added detection testing service results inDSQuery Domain Discovery 2021-03-31 20:51:45 +00:00
mhaag-spl 77d618a37b Found error - typo 2021-03-31 14:18:05 -06:00
mhaag-spl 5b2c3a2bd5 Possible DSQuery fix 2021-03-31 14:09:38 -06:00
mhaag-spl 501a979aef Update dsquery_domain_discovery.yml 2021-03-31 13:43:51 -06:00
mhaag-spl f2c6e23be6 Update dsquery_domain_discovery.yml 2021-03-31 13:41:56 -06:00
mhaag-spl 1ab256593f Domain Trust Discovery 2021-03-31 13:24:32 -06:00
mhaag-spl 2db2f77d69 Ingress Tool Transfer Story Adds 2021-03-31 11:32:45 -06:00
root 71139506d7 Added detection testing service results inDisable Windows Behavior Monitoring 2021-03-31 17:23:30 +00:00
root ae45f7a3ae Added detection testing service results inDisable Show Hidden Files 2021-03-31 16:05:22 +00:00
root 10b51469c3 Added detection testing service results inDisable Registry Tool 2021-03-31 15:47:04 +00:00
tcontreras c214e8dc53 def_evasion_detections 2021-03-31 14:42:47 +02:00
Detection Testing Service 6fc1292813 Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-30 21:49:25 +00:00
root 9598116f92 Added detection testing service results inPowerShell Start-BitsTransfer 2021-03-30 21:49:24 +00:00
Detection Testing Service 54d96b9820 Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-30 21:48:06 +00:00
root 412ece7dbc Added detection testing service results inBITS Job Persistence 2021-03-30 21:48:05 +00:00
root 86c0940069 Added detection testing service results inBITSAdmin Download File 2021-03-30 21:48:03 +00:00
Michael Haag 602c51bae9 Merge branch 'develop' into mhaag 2021-03-30 14:58:52 -06:00
mhaag-spl da4bc60750 T1197 BITS Jobs 2021-03-30 14:49:44 -06:00
root e82523e7fa Added detection testing service results inClop Common Exec Parameter 2021-03-30 14:42:45 +00:00
tcontreras e538e8138b minor_modificatio_add_process_check 2021-03-30 16:10:51 +02:00
research bot 55582c4e2f updating docs and package bits [ci skip] 2021-03-29 18:48:37 +00:00
bpatel d658fec539 fix from drew's PR 2021-03-29 09:42:44 -07:00
P4T12ICK c38768e3f5 updated test file 2021-03-29 17:17:58 +02:00
P4T12ICK c5ab64e872 updated test file 2021-03-29 16:53:20 +02:00
P4T12ICK f12d9a90bb updated test file 2021-03-29 16:49:13 +02:00
P4T12ICK bf1c11e5b5 test file updated 2021-03-29 16:03:06 +02:00
P4T12ICK 1c4908d6a8 merged 2021-03-26 16:26:13 +01:00
P4T12ICK 243121ce04 merged 2021-03-26 16:23:30 +01:00
P4T12ICK da86a0b7cf updated test files 2021-03-26 12:04:51 +01:00
research bot 6212932c35 updating docs and package bits [ci skip] 2021-03-25 19:35:07 +00:00
Detection Testing Service f2abe0bf4e Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-25 17:49:42 +00:00
root 41eb40bed8 Added detection testing service results inCertUtil With Decode Argument 2021-03-25 17:49:42 +00:00
github-actions[bot] e6d57ecba1 Branch was auto-updated. 2021-03-25 17:34:18 +00:00
mhaag-spl 1c3d7a3350 Create certutil_with_decode_argument.yml
CertUtil Decode
2021-03-25 11:18:36 -06:00
mhaag-spl a2fdff88e0 Added required fields 2021-03-25 11:17:53 -06:00
Detection Testing Service dcf55d15e3 Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag 2021-03-25 14:05:22 +00:00
root e2f266ab05 Added detection testing service results inCertUtil Download With VerifyCtl and Split Arguments 2021-03-25 14:05:21 +00:00
root e18f11f424 Added detection testing service results inCertUtil Download With URLCache and Split Arguments 2021-03-25 14:04:46 +00:00
mhaag-spl 106fc29c15 fix again 2021-03-25 07:08:05 -06:00