 mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|
|
pyth0n1c
|
d99dd1ac71
|
Update requirements.txt
|
2022-08-15 16:30:17 -07:00 |
|
|
gowthamarajr
|
6759feccd4
|
Add Azure AD Multi-Factor Authentication Disabled
|
2022-08-15 17:22:54 -04:00 |
|
|
mvelazco
|
5579f1ebdb
|
adding new detection
|
2022-08-10 13:34:18 -04:00 |
|
|
Bhavin Patel
|
a47086080b
|
Merge pull request #2314 from splunk/faking_appcert
doing a fix to pass appcert
|
2022-08-09 16:57:00 -07:00 |
|
|
pyth0n1c
|
697c14b151
|
Branch was auto-updated.
|
2022-08-09 16:46:20 -07:00 |
|
|
Bhavin Patel
|
a656928371
|
Merge pull request #2320 from splunk/fix-clean-obj-name
fix-clean-obj-name
|
2022-08-09 16:45:55 -07:00 |
|
|
tccontre
|
fe394aa85c
|
fix-clean-obj-name
|
2022-08-09 13:03:53 +02:00 |
|
|
pyth0n1c
|
8d32deae1e
|
Branch was auto-updated.
|
2022-08-04 00:42:14 -07:00 |
|
|
P4T12ICK
|
5355b4f2f1
|
Merge pull request #2297 from splunk/attack_data_helper
attack_data_helper
|
2022-08-04 09:41:41 +02:00 |
|
|
P4T12ICK
|
0fb17dd617
|
bug fix
|
2022-08-04 09:28:56 +02:00 |
|
|
pyth0n1c
|
c0d5fd80e0
|
Branch was auto-updated.
|
2022-08-03 08:28:28 -07:00 |
|
|
pyth0n1c
|
3d16da7d47
|
Branch was auto-updated.
|
2022-08-03 08:28:25 -07:00 |
|
|
pyth0n1c
|
0ded2877dd
|
Merge pull request #2261 from splunk/security_content_automation
Enrich detections with supported TAs
|
2022-08-03 08:28:02 -07:00 |
|
|
d1vious
|
66a679471c
|
Merge branch 'develop' into faking_appcert
|
2022-08-02 11:36:23 -04:00 |
|
|
d1vious
|
c9099e8a41
|
doing a fix to pass appcert
|
2022-08-02 11:28:58 -04:00 |
|
|
root
|
c71b04a866
|
Updated detection files with recommended TA list.
|
2022-08-01 18:43:39 +00:00 |
|
|
P4T12ICK
|
9dac698c46
|
solve merge conflicts
|
2022-08-01 11:39:02 +02:00 |
|
|
P4T12ICK
|
bcb943d150
|
fix tests
|
2022-08-01 11:31:23 +02:00 |
|
|
Jose Enrique Hernandez
|
014ea9855d
|
Merge pull request #2311 from splunk/0729_playbooks
Adding hunting playbook
|
2022-07-29 18:43:40 -04:00 |
|
|
Lou Stella
|
d1f890a4e9
|
Adding hunting playbook
|
2022-07-29 17:12:35 -05:00 |
|
|
research bot
|
b622c65def
|
updating docs and package bits [ci skip]
|
2022-07-28 22:52:59 +00:00 |
|
|
Bhavin Patel
|
7bf7bfe134
|
Merge pull request #2278 from splunk/TR-2219_AzureAD_Password_Srapying
Azure Active Directory Account Takeover Analytic Story
v3.46.0
|
2022-07-28 14:32:50 -07:00 |
|
|
patel-bhavin
|
114df09d78
|
meta updates
|
2022-07-28 14:18:45 -07:00 |
|
|
Bhavin Patel
|
1b645a499c
|
Update azure_ad_successful_single_factor_authentication.yml
|
2022-07-28 14:12:18 -07:00 |
|
|
Bhavin Patel
|
95e47b7fd4
|
Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml
|
2022-07-28 14:11:40 -07:00 |
|
|
Bhavin Patel
|
22f3d9bfee
|
Update azure_ad_successful_powershell_authentication.yml
|
2022-07-28 14:09:17 -07:00 |
|
|
Bhavin Patel
|
07290ffeb7
|
Update azure_ad_successful_powershell_authentication.yml
|
2022-07-28 14:08:32 -07:00 |
|
|
Bhavin Patel
|
42241b1b2e
|
Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml
|
2022-07-28 14:07:47 -07:00 |
|
|
Bhavin Patel
|
72d0a37a12
|
Update azure_ad_authentication_failed_during_mfa_challenge.yml
|
2022-07-28 14:05:57 -07:00 |
|
|
Bhavin Patel
|
f22813da22
|
Update azure_active_directory_high_risk_sign_in.yml
|
2022-07-28 14:05:14 -07:00 |
|
|
pyth0n1c
|
faf01969d7
|
Branch was auto-updated.
|
2022-07-28 13:50:30 -07:00 |
|
|
Bhavin Patel
|
21278f8d68
|
Merge pull request #2305 from splunk/dcrat-analytics2
dcrat-analytics2
|
2022-07-28 13:50:05 -07:00 |
|
|
pyth0n1c
|
d963ff033c
|
Branch was auto-updated.
|
2022-07-28 13:47:24 -07:00 |
|
|
pyth0n1c
|
b3c8645b06
|
Branch was auto-updated.
|
2022-07-28 13:47:21 -07:00 |
|
|
Bhavin Patel
|
19dfced28f
|
Merge pull request #2301 from splunk/haagonymous
Haagnux
|
2022-07-28 13:47:00 -07:00 |
|
|
Bhavin Patel
|
f2731454b1
|
Update windows_system_time_discovery_w32tm_delay.yml
|
2022-07-28 13:30:37 -07:00 |
|
|
Bhavin Patel
|
979dd80466
|
Update windows_system_shutdown_commandline.yml
|
2022-07-28 13:28:00 -07:00 |
|
|
Bhavin Patel
|
d71ddb7e26
|
Update windows_system_reboot_commandline.yml
|
2022-07-28 13:26:54 -07:00 |
|
|
Bhavin Patel
|
c0427508a9
|
Update windows_command_shell_dcrat_forkbomb_payload.yml
|
2022-07-28 13:25:36 -07:00 |
|
|
Bhavin Patel
|
8f78e18334
|
Update windows_system_logoff_commandline.yml
|
2022-07-28 13:24:39 -07:00 |
|
|
Bhavin Patel
|
1498d090fe
|
Update windows_system_reboot_commandline.yml
|
2022-07-28 13:23:33 -07:00 |
|
|
Bhavin Patel
|
b2d1bdb62e
|
Update windows_system_shutdown_commandline.yml
|
2022-07-28 13:23:07 -07:00 |
|
|
pyth0n1c
|
319530efa2
|
Branch was auto-updated.
|
2022-07-28 13:11:04 -07:00 |
|
|
pyth0n1c
|
53fb29f36e
|
Branch was auto-updated.
|
2022-07-28 13:11:00 -07:00 |
|
|
pyth0n1c
|
e35f6dc30a
|
Branch was auto-updated.
|
2022-07-28 13:10:57 -07:00 |
|
|
Bhavin Patel
|
099a7d029a
|
Merge pull request #2293 from splunk/TR-2222_AWS_defense_evasion_story
Tr 2222 aws defense evasion story
|
2022-07-28 13:10:40 -07:00 |
|
|
Michael Haag
|
508424da99
|
Updates
|
2022-07-28 12:07:05 -06:00 |
|
|
pyth0n1c
|
6c0c4f75ca
|
Branch was auto-updated.
|
2022-07-28 10:37:48 -07:00 |
|
|
pyth0n1c
|
1e03d0fddf
|
Branch was auto-updated.
|
2022-07-28 10:37:47 -07:00 |
|