Commit Graph

16898 Commits

Author SHA1 Message Date
pyth0n1c bfafa24522 Branch was auto-updated. 2022-08-09 16:57:21 -07:00
Bhavin Patel a47086080b Merge pull request #2314 from splunk/faking_appcert
doing a fix to pass appcert
2022-08-09 16:57:00 -07:00
pyth0n1c 5bc4cb46b4 Branch was auto-updated. 2022-08-09 16:46:22 -07:00
pyth0n1c 697c14b151 Branch was auto-updated. 2022-08-09 16:46:20 -07:00
Bhavin Patel a656928371 Merge pull request #2320 from splunk/fix-clean-obj-name
fix-clean-obj-name
2022-08-09 16:45:55 -07:00
tccontre fe394aa85c fix-clean-obj-name 2022-08-09 13:03:53 +02:00
pyth0n1c 8d32deae1e Branch was auto-updated. 2022-08-04 00:42:14 -07:00
pyth0n1c 8e8871603f Branch was auto-updated. 2022-08-04 00:42:10 -07:00
P4T12ICK 5355b4f2f1 Merge pull request #2297 from splunk/attack_data_helper
attack_data_helper
2022-08-04 09:41:41 +02:00
P4T12ICK 0fb17dd617 bug fix 2022-08-04 09:28:56 +02:00
pyth0n1c ddee50f930 Branch was auto-updated. 2022-08-03 08:28:29 -07:00
pyth0n1c c0d5fd80e0 Branch was auto-updated. 2022-08-03 08:28:28 -07:00
pyth0n1c 3d16da7d47 Branch was auto-updated. 2022-08-03 08:28:25 -07:00
pyth0n1c 0ded2877dd Merge pull request #2261 from splunk/security_content_automation
Enrich detections with supported TAs
2022-08-03 08:28:02 -07:00
d1vious 66a679471c Merge branch 'develop' into faking_appcert 2022-08-02 11:36:23 -04:00
d1vious c9099e8a41 doing a fix to pass appcert 2022-08-02 11:28:58 -04:00
root c71b04a866 Updated detection files with recommended TA list. 2022-08-01 18:43:39 +00:00
P4T12ICK 9dac698c46 solve merge conflicts 2022-08-01 11:39:02 +02:00
P4T12ICK bcb943d150 fix tests 2022-08-01 11:31:23 +02:00
pyth0n1c f9771fa90e Branch was auto-updated. 2022-07-29 15:44:09 -07:00
Jose Enrique Hernandez 014ea9855d Merge pull request #2311 from splunk/0729_playbooks
Adding hunting playbook
2022-07-29 18:43:40 -04:00
Lou Stella d1f890a4e9 Adding hunting playbook 2022-07-29 17:12:35 -05:00
research bot b622c65def updating docs and package bits [ci skip] 2022-07-28 22:52:59 +00:00
pyth0n1c 32cbdc3c88 Branch was auto-updated. 2022-07-28 14:33:09 -07:00
Bhavin Patel 7bf7bfe134 Merge pull request #2278 from splunk/TR-2219_AzureAD_Password_Srapying
Azure Active Directory Account Takeover Analytic Story
v3.46.0
2022-07-28 14:32:50 -07:00
patel-bhavin 114df09d78 meta updates 2022-07-28 14:18:45 -07:00
Bhavin Patel 1b645a499c Update azure_ad_successful_single_factor_authentication.yml 2022-07-28 14:12:18 -07:00
Bhavin Patel 95e47b7fd4 Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml 2022-07-28 14:11:40 -07:00
Bhavin Patel 22f3d9bfee Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:09:17 -07:00
Bhavin Patel 07290ffeb7 Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:08:32 -07:00
Bhavin Patel 42241b1b2e Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml 2022-07-28 14:07:47 -07:00
Bhavin Patel 72d0a37a12 Update azure_ad_authentication_failed_during_mfa_challenge.yml 2022-07-28 14:05:57 -07:00
Bhavin Patel f22813da22 Update azure_active_directory_high_risk_sign_in.yml 2022-07-28 14:05:14 -07:00
pyth0n1c 280d6aed18 Branch was auto-updated. 2022-07-28 13:50:33 -07:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
Bhavin Patel 21278f8d68 Merge pull request #2305 from splunk/dcrat-analytics2
dcrat-analytics2
2022-07-28 13:50:05 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c 7262660bd6 Branch was auto-updated. 2022-07-28 13:47:22 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Bhavin Patel 19dfced28f Merge pull request #2301 from splunk/haagonymous
Haagnux
2022-07-28 13:47:00 -07:00
Bhavin Patel f2731454b1 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 13:30:37 -07:00
Bhavin Patel 979dd80466 Update windows_system_shutdown_commandline.yml 2022-07-28 13:28:00 -07:00
Bhavin Patel d71ddb7e26 Update windows_system_reboot_commandline.yml 2022-07-28 13:26:54 -07:00
Bhavin Patel c0427508a9 Update windows_command_shell_dcrat_forkbomb_payload.yml 2022-07-28 13:25:36 -07:00
Bhavin Patel 8f78e18334 Update windows_system_logoff_commandline.yml 2022-07-28 13:24:39 -07:00
Bhavin Patel 1498d090fe Update windows_system_reboot_commandline.yml 2022-07-28 13:23:33 -07:00
Bhavin Patel b2d1bdb62e Update windows_system_shutdown_commandline.yml 2022-07-28 13:23:07 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 5977a676f3 Branch was auto-updated. 2022-07-28 13:11:03 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00