 pyth0n1c
|
b8ab5ffe80
|
Branch was auto-updated.
|
2022-06-28 15:13:54 -07:00 |
|
|
Bhavin Patel
|
1d036b3af5
|
Merge pull request #2265 from splunk/DM_updates
Added Datamodel values
|
2022-06-28 15:13:30 -07:00 |
|
|
Lou Stella
|
8a79086933
|
Missed one
|
2022-06-28 16:01:51 -05:00 |
|
|
Lou Stella
|
9290c8c03d
|
Updated DM and fields
|
2022-06-28 14:59:51 -05:00 |
|
|
Lou Stella
|
12b174f7d7
|
Changed to Network_Traffic, joining on process_id
|
2022-06-28 14:53:32 -05:00 |
|
|
pyth0n1c
|
bcee720ef9
|
Branch was auto-updated.
|
2022-06-28 11:33:28 -07:00 |
|
|
pyth0n1c
|
ce7b96b31c
|
Branch was auto-updated.
|
2022-06-28 11:33:23 -07:00 |
|
|
Jose Enrique Hernandez
|
c29b61b0d7
|
Merge pull request #2266 from splunk/TR-2160_deprecated_complex
moving complex pipelines to deprecated
|
2022-06-28 14:33:01 -04:00 |
|
|
d1vious
|
3bd6477ec7
|
moving complex pipelines to deprecated
|
2022-06-28 14:13:38 -04:00 |
|
|
Lou Stella
|
cf86f899b6
|
Added Datamodel values
|
2022-06-28 12:03:12 -05:00 |
|
|
pyth0n1c
|
bbeef84375
|
Branch was auto-updated.
|
2022-06-24 10:15:57 -07:00 |
|
|
mvelazco
|
73a76ac59a
|
Merge pull request #2262 from splunk/TR-2113_New_Kerberoasting_detections
Adding new kerberoasting detections
|
2022-06-24 13:13:52 -04:00 |
|
|
mvelazco
|
0df3dc5e51
|
updating fields
|
2022-06-24 12:50:43 -04:00 |
|
|
mvelazco
|
757e6b92b8
|
updating field name to use ScriptBlockText
|
2022-06-24 11:18:28 -04:00 |
|
|
mvelazco
|
2637c12014
|
updating sourcetype to xmlwineventlog
|
2022-06-24 11:05:02 -04:00 |
|
|
gowthamarajr
|
fd78ddcb6f
|
Merge branch 'TR-2113_New_Kerberoasting_detections' of https://github.com/splunk/security_content into TR-2113_New_Kerberoasting_detections
|
2022-06-24 10:17:56 -04:00 |
|
|
gowthamarajr
|
0f23640526
|
Updating test file for PowerView SPN detection
|
2022-06-24 10:17:52 -04:00 |
|
|
pyth0n1c
|
09364401cf
|
Branch was auto-updated.
|
2022-06-23 13:55:32 -07:00 |
|
|
pyth0n1c
|
6f30962fd6
|
Branch was auto-updated.
|
2022-06-23 13:55:27 -07:00 |
|
|
Bhavin Patel
|
1272dc827a
|
Merge pull request #2251 from splunk/exec-the-msi
T1218.007 - MSIExec
|
2022-06-23 13:55:03 -07:00 |
|
|
mhaag-spl
|
056b07a686
|
remove detection
|
2022-06-23 11:09:07 -06:00 |
|
|
gowthamarajr
|
28eefb325d
|
adding 2 new detections for kerberoasting
|
2022-06-22 17:35:37 -04:00 |
|
|
research bot
|
7ef25a98ec
|
updating docs and package bits [ci skip]
|
2022-06-22 17:56:19 +00:00 |
|
|
pyth0n1c
|
e53e9cf232
|
Branch was auto-updated.
|
2022-06-22 10:19:36 -07:00 |
|
|
pyth0n1c
|
1033ae41ae
|
Branch was auto-updated.
|
2022-06-22 10:19:34 -07:00 |
|
|
Jose Enrique Hernandez
|
cda681eb8b
|
Merge pull request #2260 from splunk/DetectionFixes
Detection fixes
v3.43.1
|
2022-06-22 13:19:16 -04:00 |
|
|
tccontre
|
6fa400f4f9
|
Update azorult.yml
|
2022-06-22 18:50:08 +02:00 |
|
|
tccontre
|
4ace852c0b
|
azorult-sfx-package
|
2022-06-22 16:55:51 +02:00 |
|
|
pyth0n1c
|
0de66753a1
|
Branch was auto-updated.
|
2022-06-22 07:17:51 -07:00 |
|
|
pyth0n1c
|
afc1e9afeb
|
Branch was auto-updated.
|
2022-06-22 07:17:49 -07:00 |
|
|
Lou Stella
|
52fa6467a9
|
Updated per customer feedback
|
2022-06-22 09:17:14 -05:00 |
|
|
tccontre
|
a7868fc25e
|
Merge branch 'azorult-sfx-package' of github.com:splunk/security_content into azorult-sfx-package
|
2022-06-22 15:04:35 +02:00 |
|
|
tccontre
|
07ef9a215e
|
azorult-sfx-package
|
2022-06-22 15:04:13 +02:00 |
|
|
pyth0n1c
|
54203d6858
|
Fixing detection to conform to new sysmon
behavior.
|
2022-06-21 17:21:30 -07:00 |
|
|
pyth0n1c
|
b73ea9e5ae
|
Added another custom_index to a test
file that was failing because it did not
have one.
|
2022-06-21 16:59:44 -07:00 |
|
|
pyth0n1c
|
ff0a57e526
|
Branch was auto-updated.
|
2022-06-21 16:45:18 -07:00 |
|
|
pyth0n1c
|
70e9066273
|
Branch was auto-updated.
|
2022-06-21 16:45:17 -07:00 |
|
|
Bhavin Patel
|
07a13ca16b
|
Merge pull request #2240 from splunk/more-defense-evasion
more-defense-evasion
|
2022-06-21 16:44:59 -07:00 |
|
|
Bhavin Patel
|
8d04037125
|
Update windows_impair_defenses_disable_win_defender_auto_logging.yml
|
2022-06-21 16:28:05 -07:00 |
|
|
pyth0n1c
|
35908f5a30
|
Removed user from the stats call of this search
since it does not exist and the field userName
does exist. And it is likely to have captured
the same data.
|
2022-06-21 16:25:20 -07:00 |
|
|
pyth0n1c
|
0634828d94
|
Branch was auto-updated.
|
2022-06-21 16:07:18 -07:00 |
|
|
pyth0n1c
|
cc03d129c3
|
Branch was auto-updated.
|
2022-06-21 16:07:17 -07:00 |
|
|
pyth0n1c
|
62ed8fe817
|
Branch was auto-updated.
|
2022-06-21 16:07:16 -07:00 |
|
|
Jose Enrique Hernandez
|
471ee2b8a5
|
Merge pull request #2220 from splunk/inspired_2194
Dupliate: PR 2194
|
2022-06-21 19:06:53 -04:00 |
|
|
pyth0n1c
|
b5c79b6db8
|
Added a custom index for a detection test
that was created when custom_index
support did not yet exist.
|
2022-06-21 15:53:26 -07:00 |
|
|
pyth0n1c
|
88ce513e8e
|
Branch was auto-updated.
|
2022-06-21 15:47:24 -07:00 |
|
|
pyth0n1c
|
6e989d1e07
|
Branch was auto-updated.
|
2022-06-21 15:47:23 -07:00 |
|
|
pyth0n1c
|
d231e4e7fd
|
Branch was auto-updated.
|
2022-06-21 15:47:22 -07:00 |
|
|
pyth0n1c
|
349551a98f
|
Branch was auto-updated.
|
2022-06-21 15:47:21 -07:00 |
|
|
Bhavin Patel
|
7f38d4e78e
|
Merge pull request #2252 from splunk/fixing_incorrect_story
fixing incorrect story pointer
|
2022-06-21 15:47:05 -07:00 |
|