 root
|
affae55ecf
|
Added detection testing service results inEnable RDP In Other Port Number
|
2021-05-26 15:07:28 +00:00 |
|
|
root
|
e824025040
|
Added detection testing service results inAllow Inbound Traffic By Firewall Rule Registry
|
2021-05-26 14:15:44 +00:00 |
|
|
tccontre
|
91978e5c10
|
Update enable_rdp_in_other_port_number.test.yml
|
2021-05-26 13:37:03 +02:00 |
|
|
tccontre
|
80210ef7d8
|
casper1
|
2021-05-26 13:33:47 +02:00 |
|
|
github-actions[bot]
|
04227fd8ee
|
Branch was auto-updated.
|
2021-05-21 17:57:32 +00:00 |
|
|
Bhavin Patel
|
efa3db50c5
|
Merge pull request #1413 from splunk/den-haag
The Haag Is Not Enough
|
2021-05-21 10:57:16 -07:00 |
|
|
Bhavin Patel
|
45d45a345e
|
Merge branch 'develop' into den-haag
|
2021-05-21 10:53:33 -07:00 |
|
|
root
|
40a7a4494d
|
Added detection testing service results inServices Escalate Exe
|
2021-05-21 17:50:02 +00:00 |
|
|
mhaag-spl
|
b411f2b1fc
|
CVE-2021-31166
|
2021-05-21 11:25:37 -06:00 |
|
|
github-actions[bot]
|
5ad14e5dbd
|
Branch was auto-updated.
|
2021-05-21 00:33:35 +00:00 |
|
|
Rod Soto
|
9a2a30ae97
|
Merge pull request #1412 from splunk/tr-662_risk_scores
Adding risk tags for all Mustang searches
|
2021-05-20 17:33:21 -07:00 |
|
|
github-actions[bot]
|
1a3df7445e
|
Branch was auto-updated.
|
2021-05-20 23:01:11 +00:00 |
|
|
github-actions[bot]
|
9155a244a3
|
Branch was auto-updated.
|
2021-05-20 23:01:08 +00:00 |
|
|
Bhavin Patel
|
618a06fda1
|
Merge pull request #1381 from splunk/xmrig
xmrig_ir
|
2021-05-20 16:00:47 -07:00 |
|
|
bpatel
|
a5b0e785ae
|
adding risk tags
|
2021-05-20 13:00:47 -07:00 |
|
|
Bhavin Patel
|
ece4317cc9
|
Merge branch 'develop' into xmrig
|
2021-05-20 11:15:23 -07:00 |
|
|
tccontre
|
e0e8d2b322
|
xmr_str
|
2021-05-20 10:56:00 +02:00 |
|
|
bpatel
|
7f4d032edd
|
updating story name
|
2021-05-19 15:21:25 -07:00 |
|
|
Bhavin Patel
|
92485f1f2c
|
Merge pull request #1411 from splunk/updating_darkside_date
date of story is wrong
|
2021-05-19 13:31:33 -07:00 |
|
|
Jose Enrique Hernandez
|
7dce7ba174
|
date of story is wrong
|
2021-05-19 16:26:40 -04:00 |
|
|
Bhavin Patel
|
5a5ea37b5d
|
Merge pull request #1294 from splunk/TR-532_escu_remove_ui
TR-532 ESCU remove jquery and update UI
|
2021-05-19 12:38:33 -07:00 |
|
|
Jose Enrique Hernandez
|
8ce5e748d2
|
Merge branch 'develop' into TR-532_escu_remove_ui
|
2021-05-19 14:42:25 -04:00 |
|
|
Jose Enrique Hernandez
|
193f6ae9d3
|
Merge pull request #1345 from splunk/allow_skew
allow skew setting for mustang detections
|
2021-05-19 14:41:59 -04:00 |
|
|
Jose Enrique Hernandez
|
54210d1cf6
|
Merge branch 'develop' into allow_skew
|
2021-05-19 14:37:35 -04:00 |
|
|
Michael Haag
|
9ace8fb3fd
|
Update xmrig.yml
|
2021-05-19 10:05:12 -06:00 |
|
|
Michael Haag
|
5f7f6fb7cd
|
Update xmrig_driver_loaded.yml
|
2021-05-19 09:36:10 -06:00 |
|
|
Michael Haag
|
66c567ef4f
|
Update suspicious_process_file_path.yml
|
2021-05-19 08:49:51 -06:00 |
|
|
Michael Haag
|
5109ed792c
|
Update suspicious_driver_loaded_path.yml
|
2021-05-19 08:29:34 -06:00 |
|
|
Michael Haag
|
b3d12aaf91
|
Update schtasks_run_task_on_demand.yml
|
2021-05-19 08:24:01 -06:00 |
|
|
Michael Haag
|
e6df825b27
|
Update process_kill_base_on_file_path.yml
|
2021-05-19 08:21:30 -06:00 |
|
|
Michael Haag
|
134db53975
|
Update modify_acl_permission_to_files_or_folder.yml
|
2021-05-19 08:11:59 -06:00 |
|
|
Michael Haag
|
8e0c29a6a7
|
Update icacls_grant_command.yml
|
2021-05-19 08:08:39 -06:00 |
|
|
tccontre
|
99681d7f46
|
lndn1
|
2021-05-19 16:06:45 +02:00 |
|
|
Michael Haag
|
b592b27f8d
|
Update icacls_deny_command.yml
|
2021-05-19 07:19:26 -06:00 |
|
|
Michael Haag
|
53451f407d
|
Update hide_user_account_from_sign_in_screen.yml
|
2021-05-19 07:17:18 -06:00 |
|
|
Michael Haag
|
14b838e094
|
Update executables_or_script_creation_in_suspicious_path.yml
|
2021-05-19 07:13:11 -06:00 |
|
|
Michael Haag
|
2473db53a1
|
Update excessive_usage_of_taskkill.yml
|
2021-05-19 07:06:39 -06:00 |
|
|
Michael Haag
|
1b65498b30
|
Update excessive_usage_of_net_app.yml
|
2021-05-19 07:04:54 -06:00 |
|
|
Michael Haag
|
cf576cc1ab
|
Update excessive_usage_of_cacls_app.yml
|
2021-05-19 07:01:09 -06:00 |
|
|
Michael Haag
|
84b8fd6732
|
Update excessive_service_stop_attempt.yml
|
2021-05-19 06:59:04 -06:00 |
|
|
Michael Haag
|
fb5dc80beb
|
Update excessive_attempt_to_disable_services.yml
|
2021-05-19 06:55:09 -06:00 |
|
|
Michael Haag
|
5e2516e854
|
Update enumerate_users_local_group_using_telegram.yml
|
2021-05-19 06:53:27 -06:00 |
|
|
Michael Haag
|
92f3aeb596
|
Update download_files_using_telegram.yml
|
2021-05-19 06:47:30 -06:00 |
|
|
Michael Haag
|
8b52654a5c
|
Update disabling_net_user_account.yml
|
2021-05-19 06:44:15 -06:00 |
|
|
Michael Haag
|
e1cb6fec1b
|
Update disable_windows_app_hotkeys.yml
|
2021-05-19 06:42:55 -06:00 |
|
|
Michael Haag
|
289a6861eb
|
Update deleting_of_net_users.yml
|
2021-05-19 06:31:22 -06:00 |
|
|
tccontre
|
816ec1f905
|
Merge branch 'develop' of github.com:splunk/security_content into develop
|
2021-05-19 09:01:03 +02:00 |
|
|
Jose Enrique Hernandez
|
f1f2f8370c
|
Merge pull request #1409 from splunk/rbec_mitre_issue
mitre coverage map issues
|
2021-05-18 18:54:33 -04:00 |
|
|
divious1
|
8b996d27b8
|
updating correct layer version
|
2021-05-18 18:50:31 -04:00 |
|
|
bpatel
|
97bd024e8c
|
update version and testing
|
2021-05-18 14:41:08 -07:00 |
|