252 Commits

Author	SHA1	Message	Date
github-actions[bot]	1f58996231	Branch was auto-updated.	2021-03-08 17:41:44 +00:00
mhaag-spl	e6ce96e5a1	Detect Mimikatz Using Loaded Images	2021-03-05 13:10:59 -07:00
Michael Hart	de81557e83	Adding in a newline	2021-03-05 13:33:16 -05:00
mhaag-spl	51823d81d3	Sunburst malware renamed NOBELIUM Group ... Renaming Sunburst Malware to NOBELIUM Group	2021-03-05 10:30:34 -07:00
Michael Hart	f4a04f55ff	Adding a new story (Windows Discovery Techniques) and tagging streaming detections with that story	2021-03-04 22:02:25 -05:00
mhaag-spl	66514f0b6c	formatting updates	2021-03-04 06:05:17 -07:00
mhaag-spl	ac49f9ab9e	HAFNIUM and more updates	2021-03-03 14:10:11 -07:00
mhaag-spl	ecb82ec8ca	Fixes	2021-03-01 06:52:02 -07:00
mhaag-spl	2c996886e3	Update cobalt_strike.yml	2021-02-25 15:13:32 -07:00
mhaag-spl	4cae9952d5	Update cobalt_strike.yml	2021-02-25 15:06:29 -07:00
mhaag-spl	1af1421263	Update silver_sparrow.yml	2021-02-25 12:17:10 -07:00
mhaag-spl	dcc4060a87	Update silver_sparrow.yml	2021-02-25 12:09:28 -07:00
mhaag-spl	7fc33f259e	Update silver_sparrow.yml	2021-02-25 12:03:56 -07:00
mhaag-spl	9d96fc34e6	silver sparrow	2021-02-25 11:59:21 -07:00
mhaag-spl	814aeaee3e	Update silver_sparrow.yml	2021-02-24 05:42:43 -07:00
mhaag-spl	10e028c9fa	Silver Sparrow	2021-02-24 05:38:44 -07:00
mhaag-spl	bbfeb8c427	Cobalt Strike Profile adds and updates	2021-02-22 16:09:19 -07:00
mhaag-spl	7e8fe65bd2	Stories and analytics	2021-02-17 13:41:32 -07:00
mhaag-spl	7a2f135a63	Cobalt Strike Analytic Story	2021-02-16 14:06:47 -07:00
mhaag-spl	970d7e9031	accidental story	2021-02-12 12:12:37 -07:00
mhaag-spl	fd3910ae5b	test files	2021-02-12 12:10:53 -07:00
mhaag-spl	467d8382dc	removing old story	2021-02-12 12:08:13 -07:00
github-actions[bot]	4bce20faab	Branch was auto-updated.	2021-02-12 17:58:45 +00:00
divious1	7615d5ec81	fixing merge conflicts	2021-02-12 12:27:00 -05:00
divious1	b75d826a2e	Merge branch 'develop' into TR-377_add_datamodel_field	2021-02-12 12:04:21 -05:00
mhaag-spl	432bd41c8b	Update suspicious_regsvcs_regasm_activity.yml	2021-02-12 07:33:19 -07:00
mhaag-spl	7555d7f7ce	Updated Story name for CHM	2021-02-12 07:20:02 -07:00
github-actions[bot]	3d43ef0516	Branch was auto-updated.	2021-02-11 18:45:29 +00:00
divious1	1e812855fe	added stories	2021-02-11 11:52:31 -05:00
Michael Haag	b163bc375e	Merge branch 'develop' into 02rel1	2021-02-10 12:47:54 -07:00
mhaag-spl	b6840c14f8	Update suspicious_rundll32_activity.yml	2021-02-09 15:30:10 -07:00
mhaag-spl	c2c8d9c320	Update suspicious_regsvr32_activity.yml	2021-02-09 15:27:37 -07:00
mhaag-spl	03a48cd47d	formatting	2021-02-09 14:24:39 -07:00
mhaag-spl	c99b478d72	format fixing	2021-02-09 14:18:56 -07:00
mhaag-spl	9db73e43c8	Create suspicious_rundll32_activity.yml	2021-02-09 14:11:38 -07:00
mhaag-spl	2ce3a6adcb	Update suspicious_regsvr32_activity.yml	2021-02-09 14:01:59 -07:00
Bhavin Patel	33af6dfb13	Merge branch 'develop' into cloudfederationcredentialabuse	2021-02-08 11:29:49 -08:00
divious1	eef01502f3	renamed stories	2021-02-08 10:18:57 -05:00
divious1	acaf6e2501	added type batch to story	2021-02-05 15:41:56 -05:00
divious1	7c0a849eda	updated stories with product tags	2021-02-04 10:54:26 -05:00
github-actions[bot]	238511aa44	Branch was auto-updated.	2021-02-02 18:09:29 +00:00
github-actions[bot]	3fbc3d2102	Branch was auto-updated.	2021-02-02 18:09:23 +00:00
mhaag-spl	ef829b6f9a	Regsvr32 rename fix ... Fixes	2021-01-29 14:57:05 -07:00
mhaag-spl	a0c2a1bcd6	Update suspicious_mshta_activity.yml	2021-01-29 14:23:02 -07:00
mhaag-spl	4fc95b6dd2	regsvr32	2021-01-29 11:15:35 -07:00
mhaag-spl	26e9acd0b8	Update suspicious_regsvr32_activity.yml	2021-01-29 11:07:33 -07:00
mhaag-spl	921bd3aec6	Update suspicious_regsvr32_activity.yml	2021-01-29 11:03:01 -07:00
mhaag-spl	3d5d188dd7	Regsvr32 Story and Analytics ... First batch of Regsvr32	2021-01-29 10:58:53 -07:00
bpatel	4fb0488ac6	duplicating files and experimental	2021-01-28 17:35:25 -08:00
github-actions[bot]	2926de3856	Branch was auto-updated.	2021-01-27 19:53:07 +00:00