Commit Graph

2092 Commits

Author SHA1 Message Date
pyth0n1c 80c9e04de8 Branch was auto-updated. 2022-08-23 12:49:55 -07:00
d1vious 19f3a3b982 fixing on all places 2022-08-16 15:01:56 -04:00
mvelazco b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover 2022-08-16 12:13:02 -04:00
mvelazco d00a4b2ae6 updating detection yaml 2022-08-16 12:13:00 -04:00
pyth0n1c 7d441871cb Branch was auto-updated. 2022-08-16 08:40:56 -07:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
gowthamarajr 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled 2022-08-15 17:22:54 -04:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
mvelazco 5579f1ebdb adding new detection 2022-08-10 13:34:18 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
gowthamarajr 29a61f8cb6 Add detections for Awk, Node, Docker Lotl 2022-08-02 16:23:31 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 44517188c1 Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml 2022-08-01 14:22:35 +02:00
tccontre 7ef8d1dadf Update windows_ingress_tool_transfer_using_explorer_exe.test.yml 2022-08-01 14:18:38 +02:00
tccontre b67f2c69a1 dcrat-analytics3 2022-08-01 14:15:02 +02:00
Michael Haag 8bc3086675 iscsicpl 2022-07-29 17:39:55 -06:00
pyth0n1c 9b9ee9b2bf Branch was auto-updated. 2022-07-29 15:44:01 -07:00
Michael Haag 8ad83a0b5f Haag It
Linux Curl Upload File
Linux Ingress Tool Transfer Hunting
Linux Ingress Tool Transfer with Curl
Linux Proxy Socks Curl
2022-07-29 11:17:19 -06:00
tccontre bcb5aab4ee dcrat-analytics3 2022-07-29 10:06:40 +02:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
pyth0n1c e35f6dc30a Branch was auto-updated. 2022-07-28 13:10:57 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
Michael Haag 79f7fdd204 ssh and updated correlation 2022-07-27 16:25:56 -06:00
Michael Haag 55bc63720d auth key 2022-07-27 15:30:48 -06:00
Michael Haag 4c04be8f8a linux base64 decode 2022-07-27 15:08:05 -06:00
Michael Haag e2408b8c1a kmod list 2022-07-27 13:54:30 -06:00
tccontre cf1f54c758 dcrat-analytics2 2022-07-27 15:19:30 +02:00
patel-bhavin a78c180836 file update 2022-07-26 17:21:56 -07:00
patel-bhavin 8672c8d824 security sercvices deleteion activities 2022-07-26 16:54:42 -07:00
patel-bhavin 7eea768cde new detection putbucket lifecycle 2022-07-25 16:29:57 -07:00
Bhavin Patel c55b3ed7e0 Merge pull request #2287 from splunk/TR-2222
AWS Defense Evasion Stop Logging Cloudtrail
2022-07-25 10:48:37 -07:00
Michael Haag d6a707bc09 Linux Correlation 2022-07-21 10:31:52 -06:00
pyth0n1c 71d3996d4c Branch was auto-updated. 2022-07-19 14:15:34 -07:00
pyth0n1c 90c454b327 Branch was auto-updated. 2022-07-19 14:15:33 -07:00
pyth0n1c 01c769f54d Branch was auto-updated. 2022-07-19 14:15:31 -07:00
pyth0n1c 62b5a31d7b Branch was auto-updated. 2022-07-19 13:27:47 -07:00
pyth0n1c 3ed49f35b9 Branch was auto-updated. 2022-07-19 13:27:46 -07:00
pyth0n1c d09d549e2b Branch was auto-updated. 2022-07-19 13:27:44 -07:00
pyth0n1c bac44ba666 Branch was auto-updated. 2022-07-19 13:27:41 -07:00
pyth0n1c 8ad7d66b73 Branch was auto-updated. 2022-07-19 13:04:41 -07:00
pyth0n1c c80418b064 Branch was auto-updated. 2022-07-19 13:04:40 -07:00