root
|
bfec79252f
|
Added detection testing service results inDetect Renamed rundll32.exe Rename
|
2021-02-04 22:03:42 +00:00 |
|
mhaag-spl
|
b2aed2b816
|
rundll32 advpack and rename
|
2021-02-04 14:38:54 -07:00 |
|
github-actions[bot]
|
ff3918ca17
|
Branch was auto-updated.
|
2021-02-04 16:36:16 +00:00 |
|
Bhavin Patel
|
91931235d8
|
Merge pull request #1136 from splunk/sh_test
Automated Detection Testing PR: Security Hub searches
|
2021-02-04 08:35:43 -08:00 |
|
github-actions[bot]
|
4b40451171
|
Branch was auto-updated.
|
2021-02-04 01:21:01 +00:00 |
|
github-actions[bot]
|
147624dc32
|
Branch was auto-updated.
|
2021-02-04 01:21:00 +00:00 |
|
Bhavin Patel
|
50e4a1d24a
|
Merge pull request #1164 from splunk/TR-406
Fixed SSA with cmd line norm
|
2021-02-03 17:20:40 -08:00 |
|
Bhavin Patel
|
18ab3d672a
|
Merge branch 'develop' into TR-406
|
2021-02-03 16:28:10 -08:00 |
|
mhaag-spl
|
a376f6da27
|
Merge branch 'develop' into 02rel1
|
2021-02-03 15:37:32 -07:00 |
|
mhaag-spl
|
fc8ee105c4
|
Update creation_of_lsass_dump_with_taskmgr.yml
|
2021-02-03 15:37:08 -07:00 |
|
Bhavin Patel
|
3aa6adebd6
|
Merge branch 'develop' into sh_test
|
2021-02-03 14:24:50 -08:00 |
|
root
|
1890a84406
|
Added detection testing service results inCreation of lsass dump with taskmgr
|
2021-02-03 22:20:35 +00:00 |
|
Bhavin Patel
|
85b01e872f
|
Merge pull request #1170 from splunk/dependabot/pip/azure-mgmt-compute-18.2.0
Bump azure-mgmt-compute from 18.1.0 to 18.2.0
|
2021-02-03 14:11:17 -08:00 |
|
bpatel
|
df2cd41959
|
remove security hub for user test file since there is not data yet
|
2021-02-03 14:10:14 -08:00 |
|
mhaag-spl
|
dd6286bd04
|
Creation of lsass dump with taskmgr
|
2021-02-03 14:57:59 -07:00 |
|
root
|
be729ae9bb
|
Added detection testing service results inDump lsass via procdump rename
|
2021-02-03 17:29:33 +00:00 |
|
mhaag-spl
|
d138f4ea8c
|
procdump rename
renamed procdump query using sysmon
|
2021-02-03 09:58:51 -07:00 |
|
github-actions[bot]
|
b6b333d756
|
Branch was auto-updated.
|
2021-02-03 16:35:51 +00:00 |
|
github-actions[bot]
|
15c742eb46
|
Branch was auto-updated.
|
2021-02-03 16:35:46 +00:00 |
|
github-actions[bot]
|
71ce6a8cc5
|
Branch was auto-updated.
|
2021-02-03 16:35:42 +00:00 |
|
P4T12ICK
|
fa3e36363f
|
Merge pull request #1171 from splunk/Tr-408_bug_fix
bug fix detection First Time Seen Running Windows Service
|
2021-02-03 17:35:22 +01:00 |
|
P4T12ICK
|
623c8fee33
|
moved to experimental
|
2021-02-03 17:03:19 +01:00 |
|
P4T12ICK
|
7f8652b85b
|
bug fix
|
2021-02-03 15:44:56 +01:00 |
|
dependabot[bot]
|
9712b4b0d0
|
Bump azure-mgmt-compute from 18.1.0 to 18.2.0
Bumps [azure-mgmt-compute](https://github.com/Azure/azure-sdk-for-python) from 18.1.0 to 18.2.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-mgmt-compute_18.1.0...azure-mgmt-compute_18.2.0)
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-02-03 14:03:03 +00:00 |
|
Ignacio Bermudez Corrales
|
5ae82a2490
|
added comments to regexes
|
2021-02-02 22:15:43 -08:00 |
|
Ignacio Bermudez Corrales
|
497714f09b
|
added more test corner cases
|
2021-02-02 22:13:05 -08:00 |
|
Ignacio Bermudez Corrales
|
61615abcc6
|
regex to handle path corner case
|
2021-02-02 17:50:38 -08:00 |
|
Ignacio Bermudez Corrales
|
dcee4c5615
|
handling GUIDS
|
2021-02-02 16:07:04 -08:00 |
|
Ignacio Bermudez Corrales
|
63ec24ad56
|
Improved regex to handle paths
- changed regex for paths
- updated unit test & data
|
2021-02-02 15:02:36 -08:00 |
|
github-actions[bot]
|
4a1a93a9c4
|
Branch was auto-updated.
|
2021-02-02 18:09:26 +00:00 |
|
github-actions[bot]
|
3fbc3d2102
|
Branch was auto-updated.
|
2021-02-02 18:09:23 +00:00 |
|
Michael Haag
|
98d6837604
|
Merge pull request #1153 from splunk/shannon_1141
Baron Samedit Detection, Story, Macros - duplicating files and experimental
|
2021-02-02 11:09:03 -07:00 |
|
github-actions[bot]
|
bf53edc953
|
Branch was auto-updated.
|
2021-02-02 15:33:29 +00:00 |
|
github-actions[bot]
|
c5f6dfce46
|
Branch was auto-updated.
|
2021-02-02 15:33:26 +00:00 |
|
github-actions[bot]
|
e6c3608c7b
|
Branch was auto-updated.
|
2021-02-02 15:33:25 +00:00 |
|
Jose Enrique Hernandez
|
95cfe079dc
|
Merge pull request #1166 from splunk/banner_fix
banner fix
|
2021-02-02 10:33:01 -05:00 |
|
github-actions[bot]
|
beec5717d9
|
Branch was auto-updated.
|
2021-02-02 13:49:56 +00:00 |
|
github-actions[bot]
|
371d1ff7e4
|
Branch was auto-updated.
|
2021-02-02 13:49:55 +00:00 |
|
github-actions[bot]
|
742bc4ab3d
|
Branch was auto-updated.
|
2021-02-02 13:49:53 +00:00 |
|
github-actions[bot]
|
cc03fbb707
|
Branch was auto-updated.
|
2021-02-02 13:49:50 +00:00 |
|
P4T12ICK
|
0b6ce6caed
|
Merge pull request #1159 from splunk/dependabot/pip/packaging-20.9
Bump packaging from 20.8 to 20.9
|
2021-02-02 14:49:25 +01:00 |
|
github-actions[bot]
|
dd92abb134
|
Branch was auto-updated.
|
2021-02-02 13:34:04 +00:00 |
|
github-actions[bot]
|
d037cb3338
|
Branch was auto-updated.
|
2021-02-02 13:34:00 +00:00 |
|
github-actions[bot]
|
8353a71e89
|
Branch was auto-updated.
|
2021-02-02 13:33:58 +00:00 |
|
github-actions[bot]
|
e3020cf3bd
|
Branch was auto-updated.
|
2021-02-02 13:33:57 +00:00 |
|
github-actions[bot]
|
5d9b547e48
|
Branch was auto-updated.
|
2021-02-02 13:33:56 +00:00 |
|
P4T12ICK
|
73b637b05b
|
Merge pull request #1162 from splunk/dependabot/pip/pytz-2021.1
Bump pytz from 2020.5 to 2021.1
|
2021-02-02 14:33:36 +01:00 |
|
P4T12ICK
|
12d6cd9774
|
banner fix
|
2021-02-02 13:35:38 +01:00 |
|
Ignacio Bermudez Corrales
|
16c0021d56
|
updated testing data file and made test assertion more tight
|
2021-02-01 13:45:07 -08:00 |
|
github-actions[bot]
|
f5ffbae686
|
Branch was auto-updated.
|
2021-02-01 20:24:29 +00:00 |
|