 research bot
|
67de895441
|
updating docs and package bits [ci skip]
|
2021-06-10 18:46:43 +00:00 |
|
|
root
|
56a065240b
|
Added detection testing service results inExcessive number of taskhost processes
|
2021-06-09 20:58:34 +00:00 |
|
|
Michael Hart
|
7236281a42
|
Merge branch 'develop' of github.com:splunk/security_content into excessive_taskhost_process_detection
|
2021-06-09 14:24:41 -04:00 |
|
|
Michael Hart
|
144bcaff80
|
Adding in test file
|
2021-06-09 14:20:03 -04:00 |
|
|
Bhavin Patel
|
44b134251f
|
Update known_services_killed_by_ransomware.yml
|
2021-06-09 10:32:15 -07:00 |
|
|
Bhavin Patel
|
8eb50cb27c
|
Update conti_common_exec_parameter.yml
|
2021-06-09 10:28:51 -07:00 |
|
|
github-actions[bot]
|
e547ad7395
|
Branch was auto-updated.
|
2021-06-08 19:00:26 +00:00 |
|
|
Michael Hart
|
69c1de8e5e
|
Initial import of the detection and story for support
|
2021-06-08 10:01:32 -04:00 |
|
|
root
|
54657e9d13
|
Added detection testing service results inConti Common Exec parameter
|
2021-06-07 10:18:21 +00:00 |
|
|
root
|
d92b713497
|
Added detection testing service results inKnown Services Killed by Ransomware
|
2021-06-07 09:56:10 +00:00 |
|
|
root
|
3023439042
|
Added detection testing service results inWbemprox COM Object Execution
|
2021-06-07 09:34:11 +00:00 |
|
|
root
|
ddc74bece1
|
Added detection testing service results inModification Of Wallpaper
|
2021-06-07 09:14:09 +00:00 |
|
|
root
|
254f233475
|
Added detection testing service results inRevil Common Exec Parameter
|
2021-06-07 08:41:48 +00:00 |
|
|
root
|
eef40d3a65
|
Added detection testing service results inRevil Registry Entry
|
2021-06-07 08:24:20 +00:00 |
|
|
root
|
89a202914c
|
Added detection testing service results inDelete ShadowCopy With PowerShell
|
2021-06-07 08:01:37 +00:00 |
|
|
tccontre
|
20cf0f4110
|
Update conti_common_exec_parameter.yml
conti param
|
2021-06-04 16:46:18 +02:00 |
|
|
tccontre
|
2af2c59337
|
revil2
|
2021-06-04 16:41:23 +02:00 |
|
|
tccontre
|
09796e3f67
|
revil
|
2021-06-04 16:07:02 +02:00 |
|
|
mhaag-spl
|
4bfa6d0831
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 14:22:12 -06:00 |
|
|
mhaag-spl
|
facc823255
|
Updated Analytic Stories
|
2021-06-03 14:20:59 -06:00 |
|
|
github-actions[bot]
|
2525072da8
|
Branch was auto-updated.
|
2021-06-03 19:19:26 +00:00 |
|
|
Bhavin Patel
|
3cc121b736
|
Merge branch 'develop' into hpot-lon
|
2021-06-03 11:36:41 -07:00 |
|
|
root
|
31738b1855
|
Added detection testing service results inDetect AzureHound Command-Line Arguments
|
2021-06-03 17:01:51 +00:00 |
|
|
mhaag-spl
|
2af2dbdd0e
|
AzureHound
|
2021-06-03 10:40:41 -06:00 |
|
|
Detection Testing Service
|
e2c44fd793
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 16:07:17 +00:00 |
|
|
root
|
17a7c53100
|
Added detection testing service results inDetect Renamed WinRAR
|
2021-06-03 16:07:16 +00:00 |
|
|
Detection Testing Service
|
93075047d0
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 16:06:25 +00:00 |
|
|
root
|
12caaec7ed
|
Added detection testing service results inDetect Renamed 7-Zip
|
2021-06-03 16:06:24 +00:00 |
|
|
root
|
70bb5ebcde
|
Added detection testing service results inDetect Renamed PSExec
|
2021-06-03 16:03:05 +00:00 |
|
|
mhaag-spl
|
e12182ea9d
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 09:41:46 -06:00 |
|
|
mhaag-spl
|
f269268b5a
|
7zip and rar
|
2021-06-03 09:41:39 -06:00 |
|
|
Detection Testing Service
|
ce4a444198
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 15:25:33 +00:00 |
|
|
root
|
88a3daef8b
|
Added detection testing service results inDetect SharpHound Command-Line Arguments
|
2021-06-03 15:25:32 +00:00 |
|
|
Detection Testing Service
|
98e2bbeb46
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 15:25:21 +00:00 |
|
|
root
|
07a5c51b3b
|
Added detection testing service results inDetect SharpHound Usage
|
2021-06-03 15:25:21 +00:00 |
|
|
Detection Testing Service
|
94a884ca90
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 15:24:00 +00:00 |
|
|
root
|
5b00a4c89d
|
Added detection testing service results inDetect SharpHound File Modifications
|
2021-06-03 15:24:00 +00:00 |
|
|
Detection Testing Service
|
e91a955727
|
Merge branch 'den-haag' of https://github.com/splunk/security_content into den-haag
|
2021-06-03 15:22:51 +00:00 |
|
|
root
|
316d57e156
|
Added detection testing service results inDetect AzureHound File Modifications
|
2021-06-03 15:22:51 +00:00 |
|
|
mhaag-spl
|
487c1c861e
|
psexec renamed
|
2021-06-03 09:17:31 -06:00 |
|
|
mhaag-spl
|
cc40bf658c
|
SharpHound
|
2021-06-03 08:48:19 -06:00 |
|
|
github-actions[bot]
|
273ca11251
|
Branch was auto-updated.
|
2021-06-02 07:13:16 +00:00 |
|
|
github-actions[bot]
|
37afdb6e11
|
Branch was auto-updated.
|
2021-06-01 17:26:54 +00:00 |
|
|
github-actions[bot]
|
827d4a17c1
|
Branch was auto-updated.
|
2021-06-01 17:26:53 +00:00 |
|
|
Jose Enrique Hernandez
|
1ee26a7172
|
bumping version of detection since it should have been done in previous change.
|
2021-06-01 13:22:43 -04:00 |
|
|
root
|
cac94b27e7
|
Added detection testing service results inExcessive Usage of NSLOOKUP App
|
2021-05-28 07:50:13 +00:00 |
|
|
tccontre
|
9df9309087
|
nslookup
|
2021-05-28 09:17:34 +02:00 |
|
|
root
|
b7e82d565d
|
Added detection testing service results inCMD Echo Pipe - Escalation
|
2021-05-27 14:55:40 +00:00 |
|
|
mhaag-spl
|
95c1b4408c
|
Cobalt Jump
|
2021-05-27 08:22:53 -06:00 |
|
|
root
|
259842d958
|
Added detection testing service results inMailsniper Invoke functions
|
2021-05-26 16:41:52 +00:00 |
|