pyth0n1c
|
de62011c2f
|
Branch was auto-updated.
|
2022-02-21 02:11:42 -08:00 |
|
pyth0n1c
|
a5084e384e
|
Branch was auto-updated.
|
2022-02-18 15:32:23 -08:00 |
|
pyth0n1c
|
59d1365ceb
|
Branch was auto-updated.
|
2022-02-18 15:32:18 -08:00 |
|
pyth0n1c
|
4cbabb86bf
|
Branch was auto-updated.
|
2022-02-17 15:35:44 -08:00 |
|
Lou Stella
|
9058ee478b
|
SSA conversion
|
2022-02-17 15:41:45 -06:00 |
|
pyth0n1c
|
794dff58f0
|
Branch was auto-updated.
|
2022-02-17 13:17:32 -08:00 |
|
pyth0n1c
|
c7d25ead5a
|
Branch was auto-updated.
|
2022-02-17 13:17:31 -08:00 |
|
pyth0n1c
|
920f44130e
|
Branch was auto-updated.
|
2022-02-17 11:00:43 -08:00 |
|
Lou Stella
|
95b7a634ac
|
DiskShadow + Story Scaffolding
|
2022-02-17 10:12:50 -06:00 |
|
pyth0n1c
|
a4a1384f6e
|
Branch was auto-updated.
|
2022-02-15 14:54:53 -08:00 |
|
pyth0n1c
|
f57454771e
|
Branch was auto-updated.
|
2022-02-15 14:54:52 -08:00 |
|
pyth0n1c
|
7482ac9113
|
Branch was auto-updated.
|
2022-02-15 12:36:36 -08:00 |
|
pyth0n1c
|
874969a012
|
Branch was auto-updated.
|
2022-02-15 12:36:34 -08:00 |
|
pyth0n1c
|
59292cf55e
|
Branch was auto-updated.
|
2022-02-15 12:36:33 -08:00 |
|
mhaag-spl
|
c9b8eb2985
|
rasautou
|
2022-02-15 13:08:59 -07:00 |
|
pyth0n1c
|
81a5583536
|
Branch was auto-updated.
|
2022-02-15 10:30:14 -08:00 |
|
pyth0n1c
|
733fa530ac
|
Branch was auto-updated.
|
2022-02-15 10:30:12 -08:00 |
|
pyth0n1c
|
45fb0c5afb
|
Branch was auto-updated.
|
2022-02-15 10:30:09 -08:00 |
|
mhaag-spl
|
e241241bf2
|
ordinal Data
|
2022-02-15 11:09:57 -07:00 |
|
tccontre
|
2009364a6b
|
linux_lolbin_stage1
|
2022-02-15 10:55:01 +01:00 |
|
d1vious
|
3a3d0a9922
|
adding powershell downloadfile but not passing
|
2022-02-14 21:28:57 -05:00 |
|
pyth0n1c
|
7648c76c0b
|
A handful of easy detection test fixes to get
the tests to detections to work with the
newest application baseline.
|
2022-02-14 16:57:33 -08:00 |
|
d1vious
|
73cb36c626
|
adding working detection
|
2022-02-14 15:54:12 -05:00 |
|
d1vious
|
0a2618f686
|
adding 1 detection
|
2022-02-14 13:40:24 -05:00 |
|
d1vious
|
a1d127126a
|
adding template detection
|
2022-02-14 11:11:47 -05:00 |
|
tccontre
|
d96849c449
|
linux_lolbin_stage1
|
2022-02-14 10:17:46 +01:00 |
|
mhaag-spl
|
40b34450a0
|
Windows Schtasks Create Run As System
|
2022-02-10 09:08:52 -07:00 |
|
pyth0n1c
|
17e2f3c94b
|
Branch was auto-updated.
|
2022-02-09 16:53:36 -08:00 |
|
Xiao Lin
|
ee2ee98742
|
remove duplicate
|
2022-02-09 16:44:17 -08:00 |
|
Xiao Lin
|
4c5f48c507
|
add detection for unusal volume of data download
|
2022-02-09 16:40:45 -08:00 |
|
Xiao Lin
|
ddd492fe23
|
update data link to attack_range, move detection to experimental
|
2022-02-09 16:36:10 -08:00 |
|
Xiao Lin
|
b31ee54c20
|
Unusual Volume of Data Download from Internal Server Per Entity
|
2022-02-09 16:36:10 -08:00 |
|
mhaag-spl
|
2fdc53b85b
|
MSRA shipment 📮
|
2022-02-09 12:10:58 -07:00 |
|
mhaag-spl
|
0fa295eee0
|
Ordinal
|
2022-02-09 08:01:49 -07:00 |
|
tccontre
|
e84063b9c2
|
Merge branch 'reg_yml_analytics_updates_4' of github.com:splunk/security_content into reg_yml_analytics_updates_4
|
2022-02-04 10:18:24 +01:00 |
|
tccontre
|
2704483cf5
|
reg_yml_analytics_updates_4
|
2022-02-04 10:18:17 +01:00 |
|
mhaag-spl
|
e8dd9051bc
|
pkexec
Deprecating two detections that identified all rundll32 executions.
Added linux pkexec pwnkit detection.
|
2022-02-01 09:52:52 -07:00 |
|
Bhavin Patel
|
14c145c133
|
Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
|
2022-01-28 13:27:59 -08:00 |
|
Bhavin Patel
|
3efcb99124
|
Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
|
2022-01-27 14:55:25 -08:00 |
|
Bhavin Patel
|
7fd71050fe
|
Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
|
2022-01-27 14:51:23 -08:00 |
|
Bhavin Patel
|
1975ff75a2
|
Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
|
2022-01-27 14:11:19 -08:00 |
|
patel-bhavin
|
45c4a7b600
|
remove files that are already merged
|
2022-01-26 13:51:51 -08:00 |
|
patel-bhavin
|
cca42c0009
|
moving to expermental
|
2022-01-24 15:31:15 -08:00 |
|
mhaag-spl
|
befe09f77c
|
Nirsoft Software
|
2022-01-24 15:07:20 -07:00 |
|
pyth0n1c
|
ad85b8b21b
|
Branch was auto-updated.
|
2022-01-24 10:51:04 -08:00 |
|
pyth0n1c
|
4c125f1dd6
|
Branch was auto-updated.
|
2022-01-24 10:51:03 -08:00 |
|
pyth0n1c
|
fc97ef9be2
|
Branch was auto-updated.
|
2022-01-24 10:51:01 -08:00 |
|
pyth0n1c
|
2254d203d8
|
Branch was auto-updated.
|
2022-01-24 10:50:59 -08:00 |
|
pyth0n1c
|
e848c0a544
|
Branch was auto-updated.
|
2022-01-24 10:50:58 -08:00 |
|
pyth0n1c
|
cbabad3107
|
Branch was auto-updated.
|
2022-01-24 10:40:47 -08:00 |
|