github-actions[bot]
|
9833a15fd3
|
Branch was auto-updated.
|
2021-04-02 18:24:52 +00:00 |
|
Michael Haag
|
3aeec206e9
|
Update powershell_start_bitstransfer.yml
|
2021-04-02 11:50:42 -06:00 |
|
root
|
fa1c0e2c62
|
Added detection testing service results inDisabling Task Manager
|
2021-04-01 12:20:50 +00:00 |
|
root
|
b0173344e3
|
Added detection testing service results inDisabling NoRun Windows App
|
2021-04-01 11:58:27 +00:00 |
|
root
|
5ef2916636
|
Added detection testing service results inDisabling SystemRestore In Registry
|
2021-04-01 11:25:29 +00:00 |
|
root
|
031a8a9945
|
Added detection testing service results inDisabling FolderOptions Windows Feature
|
2021-04-01 10:06:43 +00:00 |
|
root
|
d294ac965c
|
Added detection testing service results inDisabling Firewall with Netsh
|
2021-04-01 09:11:18 +00:00 |
|
root
|
e0cdb5bb1c
|
Added detection testing service results inDisabling ControlPanel
|
2021-04-01 08:46:08 +00:00 |
|
root
|
7e29850f48
|
Added detection testing service results inDisabling CMD Application
|
2021-04-01 08:27:41 +00:00 |
|
root
|
d35bf6fdab
|
Added detection testing service results inDisable Windows SmartScreen Protection
|
2021-04-01 07:59:18 +00:00 |
|
mhaag-spl
|
6d17629359
|
Text updates
|
2021-03-31 15:01:44 -06:00 |
|
root
|
9140952d06
|
Added detection testing service results inDSQuery Domain Discovery
|
2021-03-31 20:51:45 +00:00 |
|
mhaag-spl
|
77d618a37b
|
Found error - typo
|
2021-03-31 14:18:05 -06:00 |
|
mhaag-spl
|
5b2c3a2bd5
|
Possible DSQuery fix
|
2021-03-31 14:09:38 -06:00 |
|
mhaag-spl
|
501a979aef
|
Update dsquery_domain_discovery.yml
|
2021-03-31 13:43:51 -06:00 |
|
mhaag-spl
|
f2c6e23be6
|
Update dsquery_domain_discovery.yml
|
2021-03-31 13:41:56 -06:00 |
|
mhaag-spl
|
1ab256593f
|
Domain Trust Discovery
|
2021-03-31 13:24:32 -06:00 |
|
mhaag-spl
|
2db2f77d69
|
Ingress Tool Transfer Story Adds
|
2021-03-31 11:32:45 -06:00 |
|
root
|
71139506d7
|
Added detection testing service results inDisable Windows Behavior Monitoring
|
2021-03-31 17:23:30 +00:00 |
|
root
|
ae45f7a3ae
|
Added detection testing service results inDisable Show Hidden Files
|
2021-03-31 16:05:22 +00:00 |
|
root
|
10b51469c3
|
Added detection testing service results inDisable Registry Tool
|
2021-03-31 15:47:04 +00:00 |
|
tcontreras
|
c214e8dc53
|
def_evasion_detections
|
2021-03-31 14:42:47 +02:00 |
|
Detection Testing Service
|
6fc1292813
|
Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag
|
2021-03-30 21:49:25 +00:00 |
|
root
|
9598116f92
|
Added detection testing service results inPowerShell Start-BitsTransfer
|
2021-03-30 21:49:24 +00:00 |
|
Detection Testing Service
|
54d96b9820
|
Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag
|
2021-03-30 21:48:06 +00:00 |
|
root
|
412ece7dbc
|
Added detection testing service results inBITS Job Persistence
|
2021-03-30 21:48:05 +00:00 |
|
root
|
86c0940069
|
Added detection testing service results inBITSAdmin Download File
|
2021-03-30 21:48:03 +00:00 |
|
Michael Haag
|
602c51bae9
|
Merge branch 'develop' into mhaag
|
2021-03-30 14:58:52 -06:00 |
|
mhaag-spl
|
da4bc60750
|
T1197 BITS Jobs
|
2021-03-30 14:49:44 -06:00 |
|
root
|
e82523e7fa
|
Added detection testing service results inClop Common Exec Parameter
|
2021-03-30 14:42:45 +00:00 |
|
tcontreras
|
e538e8138b
|
minor_modificatio_add_process_check
|
2021-03-30 16:10:51 +02:00 |
|
research bot
|
55582c4e2f
|
updating docs and package bits [ci skip]
|
2021-03-29 18:48:37 +00:00 |
|
bpatel
|
d658fec539
|
fix from drew's PR
|
2021-03-29 09:42:44 -07:00 |
|
P4T12ICK
|
c38768e3f5
|
updated test file
|
2021-03-29 17:17:58 +02:00 |
|
P4T12ICK
|
c5ab64e872
|
updated test file
|
2021-03-29 16:53:20 +02:00 |
|
P4T12ICK
|
f12d9a90bb
|
updated test file
|
2021-03-29 16:49:13 +02:00 |
|
P4T12ICK
|
bf1c11e5b5
|
test file updated
|
2021-03-29 16:03:06 +02:00 |
|
P4T12ICK
|
1c4908d6a8
|
merged
|
2021-03-26 16:26:13 +01:00 |
|
P4T12ICK
|
243121ce04
|
merged
|
2021-03-26 16:23:30 +01:00 |
|
P4T12ICK
|
da86a0b7cf
|
updated test files
|
2021-03-26 12:04:51 +01:00 |
|
research bot
|
6212932c35
|
updating docs and package bits [ci skip]
|
2021-03-25 19:35:07 +00:00 |
|
Detection Testing Service
|
f2abe0bf4e
|
Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag
|
2021-03-25 17:49:42 +00:00 |
|
root
|
41eb40bed8
|
Added detection testing service results inCertUtil With Decode Argument
|
2021-03-25 17:49:42 +00:00 |
|
github-actions[bot]
|
e6d57ecba1
|
Branch was auto-updated.
|
2021-03-25 17:34:18 +00:00 |
|
mhaag-spl
|
1c3d7a3350
|
Create certutil_with_decode_argument.yml
CertUtil Decode
|
2021-03-25 11:18:36 -06:00 |
|
mhaag-spl
|
a2fdff88e0
|
Added required fields
|
2021-03-25 11:17:53 -06:00 |
|
Detection Testing Service
|
dcf55d15e3
|
Merge branch 'mhaag' of https://github.com/splunk/security_content into mhaag
|
2021-03-25 14:05:22 +00:00 |
|
root
|
e2f266ab05
|
Added detection testing service results inCertUtil Download With VerifyCtl and Split Arguments
|
2021-03-25 14:05:21 +00:00 |
|
root
|
e18f11f424
|
Added detection testing service results inCertUtil Download With URLCache and Split Arguments
|
2021-03-25 14:04:46 +00:00 |
|
mhaag-spl
|
106fc29c15
|
fix again
|
2021-03-25 07:08:05 -06:00 |
|