704 Commits

Author	SHA1	Message	Date
github-actions[bot]	f82a26bf8a	Branch was auto-updated.	2021-07-22 19:12:52 +00:00
mhaag-spl	e9e56493f8	Update detect_copy_of_shadowcopy_with_script_block_logging.test.yml	2021-07-21 15:44:04 -06:00
mhaag-spl	b87f262923	test file	2021-07-21 15:41:42 -06:00
github-actions[bot]	03a9e5f2ea	Branch was auto-updated.	2021-07-21 14:14:26 +00:00
patel-bhavin	4a1841fbed	updates	2021-07-20 15:37:36 -07:00
patel-bhavin	4d714cd6f6	snap	2021-07-20 12:55:18 -07:00
github-actions[bot]	cbcc20bee8	Branch was auto-updated.	2021-07-20 15:20:32 +00:00
peter-cg	502bdcca79	Allow kerberoasting detection to fail	2021-07-19 15:21:05 -05:00
peter-cg	f527e9f739	Fixing first_time pass_condition	2021-07-19 14:52:43 -05:00
tccontre	8c20632a14	Update mshta_spawning_rundll32_or_regsvr32_process.test.yml	2021-07-19 15:51:31 +02:00
tccontre	31193b4f4e	uac and trickbot	2021-07-19 15:48:28 +02:00
peter-cg	57da5a1ec2	Adding pass_condition verification for SSA detections	2021-07-16 16:43:26 -05:00
github-actions[bot]	174b7d1202	Branch was auto-updated.	2021-07-14 16:46:00 +00:00
P4T12ICK	f4aa1d7d48	bug fix test file	2021-07-14 17:05:49 +02:00
patel-bhavin	a0a57ab600	atttacker_tools_files	2021-07-12 18:54:24 -05:00
tccontre	8c23f91fb2	uac3	2021-07-12 16:34:55 +02:00
tccontre	00252937fe	uac bypass	2021-07-12 15:25:32 +02:00
tccontre	8e08569df2	uac_2	2021-07-12 13:19:47 +02:00
tccontre	49b0aa6c5f	uac	2021-07-08 12:37:47 +02:00
github-actions[bot]	6fbf1aafa5	Branch was auto-updated.	2021-07-06 10:47:54 +00:00
github-actions[bot]	48bc732005	Branch was auto-updated.	2021-07-05 15:05:30 +00:00
github-actions[bot]	f20a264af1	Branch was auto-updated.	2021-07-05 15:05:20 +00:00
tccontre	86f18d1e33	side loading	2021-07-05 16:27:36 +02:00
tccontre	c8284a3bb8	pwh disable	2021-07-05 15:49:41 +02:00
github-actions[bot]	493174a5a9	Branch was auto-updated.	2021-07-02 15:07:02 +00:00
github-actions[bot]	abc99240eb	Branch was auto-updated.	2021-07-02 15:07:00 +00:00
github-actions[bot]	ce8c057e0d	Branch was auto-updated.	2021-07-02 15:06:51 +00:00
tccontre	30af993c48	Delete wsreset_uac_bypass.test.yml	2021-07-02 14:03:53 +02:00
tccontre	2f74506fc0	minor update	2021-07-02 14:02:31 +02:00
mhaag-spl	97e039bdce	Path issues	2021-07-01 12:14:19 -06:00
mhaag-spl	e86a988621	Printing All your Nightmares	2021-07-01 12:01:45 -06:00
github-actions[bot]	7f2423864a	Branch was auto-updated.	2021-06-29 18:31:02 +00:00
github-actions[bot]	72e304cb79	Branch was auto-updated.	2021-06-29 18:30:59 +00:00
github-actions[bot]	5a7f37ffbf	Branch was auto-updated.	2021-06-29 18:30:58 +00:00
github-actions[bot]	868a3fe2a1	Branch was auto-updated.	2021-06-28 18:29:50 +00:00
github-actions[bot]	e4a7b5a75d	Branch was auto-updated.	2021-06-28 18:29:47 +00:00
github-actions[bot]	52aaa53e40	Branch was auto-updated.	2021-06-28 18:29:47 +00:00
github-actions[bot]	73a7d75731	Branch was auto-updated.	2021-06-28 18:29:46 +00:00
Michael Hart	1a26fc38e3	contentctl puts relative link to detection file in wrong place	2021-06-25 15:00:46 -04:00
Michael Hart	518d03b1a1	Detection looks for excessive number of sc.exe start as disabled calls	2021-06-25 14:48:48 -04:00
tccontre	1af19c52c7	rttp5	2021-06-24 10:51:56 +02:00
tccontre	894f110cba	Merge branch 'ransom_ttp2' of github.com:splunk/security_content into ransom_ttp2	2021-06-24 10:46:21 +02:00
tccontre	fc13134276	rttp4	2021-06-24 10:43:36 +02:00
jzsplunk	5d39a5eed2	[PR-1444] fix branch reversion.	2021-06-24 01:36:15 -07:00
github-actions[bot]	89945a1ae7	Branch was auto-updated.	2021-06-23 23:37:53 +00:00
github-actions[bot]	2364c4a980	Branch was auto-updated.	2021-06-23 23:37:52 +00:00
github-actions[bot]	49052e5c5f	Branch was auto-updated.	2021-06-23 23:37:51 +00:00
Jose Enrique Hernandez	dbdf39cd28	Revert "ssa"	2021-06-23 17:49:11 -04:00
github-actions[bot]	fe7426e818	Branch was auto-updated.	2021-06-23 18:51:10 +00:00
github-actions[bot]	3d484e756b	Branch was auto-updated.	2021-06-23 18:51:10 +00:00