 research-bot
|
e06b07f793
|
udpating SPL
|
2025-01-15 13:53:20 -06:00 |
|
|
research-bot
|
dc1672d901
|
updating risk
|
2025-01-15 13:53:20 -06:00 |
|
|
research-bot
|
71e6dd7c7a
|
fixing up yamls for testing
|
2025-01-15 13:53:20 -06:00 |
|
|
dluxtron
|
0282aff10b
|
fixing syntax & updating macro
|
2025-01-15 13:53:19 -06:00 |
|
|
dluxtron
|
5ba40b34df
|
Adding intune detections & updating dataset links
|
2025-01-15 13:53:19 -06:00 |
|
|
dluxtron
|
4761a49d0c
|
Uploading new detections
|
2025-01-15 13:53:19 -06:00 |
|
|
dluxtron
|
a0a7dc4efd
|
Uploading new detections
|
2025-01-15 13:53:19 -06:00 |
|
|
ljstella
|
6f56a467c1
|
New detection conversion
|
2025-01-10 14:07:48 -06:00 |
|
|
Bhavin Patel
|
83ecc74952
|
Branch was auto-updated.
|
2025-01-09 14:18:14 -08:00 |
|
|
Bhavin Patel
|
55d4936427
|
update token
|
2025-01-09 13:26:23 -08:00 |
|
|
ljstella
|
ad772ee1ee
|
More stragglers
|
2025-01-09 14:57:36 -06:00 |
|
|
Bhavin Patel
|
4c65798689
|
Merge branch 'develop' into nterl0k-t1219-rmm-update-2
|
2025-01-08 10:22:03 -08:00 |
|
|
Bhavin Patel
|
557fdeca89
|
Add manual_test flag
|
2025-01-08 10:21:40 -08:00 |
|
|
Bhavin Patel
|
0e6251e06a
|
Branch was auto-updated.
|
2025-01-08 10:11:59 -08:00 |
|
|
Steven Dick
|
50fd37accd
|
Update windows_process_with_netexec_command_line_parameters.yml
Adding drilldowns
|
2025-01-07 15:49:16 -05:00 |
|
|
Steven Dick
|
2627b4bea5
|
Update detect_remote_access_software_usage_registry.yml
add drilldowns
|
2025-01-07 15:39:12 -05:00 |
|
|
Nasreddine Bencherchali
|
e8f9c1ddd0
|
Merge branch 'develop' into nterl0k-T1550-netexec-usage
|
2025-01-07 17:45:50 +01:00 |
|
|
Nasreddine Bencherchali
|
662b542299
|
Apply suggestions from code review
|
2025-01-07 17:44:25 +01:00 |
|
|
Lou Stella
|
f49899a983
|
Merge branch 'develop' into rba_migration
|
2025-01-07 09:47:21 -06:00 |
|
|
ljstella
|
9fb7b90549
|
Stragglers migration
|
2025-01-07 09:45:30 -06:00 |
|
|
Bhavin Patel
|
263db16960
|
author update
|
2025-01-06 14:42:03 -08:00 |
|
|
Bhavin Patel
|
35368173c0
|
observable type
|
2025-01-06 14:41:11 -08:00 |
|
|
Bhavin Patel
|
736bcb3660
|
Merge branch 'develop' into nterl0k-t1219-rmm-update-2
|
2025-01-06 14:31:00 -08:00 |
|
|
Steven Dick
|
36a79d6b99
|
Update detect_remote_access_software_usage_registry.yml
|
2025-01-06 17:21:02 -05:00 |
|
|
Steven Dick
|
ff408f240c
|
Update detect_remote_access_software_usage_registry.yml
|
2025-01-06 17:19:33 -05:00 |
|
|
Bhavin Patel
|
70f1a691fb
|
Merge branch 'develop' into nterl0k-t1595-generic-scanner
|
2025-01-06 13:02:19 -08:00 |
|
|
Steven Dick
|
c1d7d2cc75
|
Update windows_process_with_netexec_command_line_parameters.yml
|
2025-01-06 11:01:24 -05:00 |
|
|
Bhavin Patel
|
9ee8526d74
|
update mitre
Removed T1423 since that id is for Mobile
|
2025-01-03 11:54:54 -08:00 |
|
|
Bhavin Patel
|
39842b9ed9
|
build error fixes
Updated the yaml file name and other meta data to ensure it builds succesfully
|
2025-01-03 11:50:49 -08:00 |
|
|
Bhavin Patel
|
a0e6f0fa7b
|
minor update to data_source
|
2025-01-03 11:38:15 -08:00 |
|
|
Steven Dick
|
6e06a19329
|
Update windows_process_with_netexec_command_line_parameters.yml
|
2024-12-31 08:58:52 -05:00 |
|
|
Steven Dick
|
771f42392f
|
Update windows_process_with_netexec_command_line_parameters.yml
|
2024-12-31 08:51:56 -05:00 |
|
|
Steven Dick
|
2fcd0ecef1
|
Update windows_process_with_netexec_command_line_parameters.yml
Update detection logic to include "nxc.exe" for process_name or original_file_name as detection points as requested.
Reduce confidence as requested.
|
2024-12-30 16:55:10 -05:00 |
|
|
Steven Dick
|
a53cfeb955
|
Update detections/endpoint/windows_process_with_netexec_command_line_parameters.yml
Update detection description with recommendation
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>
|
2024-12-30 16:41:28 -05:00 |
|
|
Steven Dick
|
1506554a58
|
Add files via upload
|
2024-12-28 12:12:39 -05:00 |
|
|
Steven Dick
|
d4a2b3eaee
|
Add files via upload
|
2024-12-27 08:16:02 -05:00 |
|
|
Steven Dick
|
f1d2c7ddf9
|
Add files via upload
|
2024-12-26 12:23:09 -05:00 |
|
|
research-bot
|
73f13e43f3
|
version
|
2024-12-23 10:43:28 -08:00 |
|
|
research-bot
|
cf8036845f
|
updating search
|
2024-12-23 10:40:21 -08:00 |
|
|
Lou Stella
|
0e2e844963
|
Merge branch 'develop' into rba_migration
|
2024-12-19 16:45:59 -06:00 |
|
|
tccontre
|
9e907e9d4a
|
xorddos
|
2024-12-17 19:31:00 +01:00 |
|
|
ljstella
|
d5328dfa77
|
Merge branch 'develop' into rba_migration
|
2024-12-16 14:53:44 -06:00 |
|
|
ljstella
|
51d034c80c
|
Merge branch 'develop' into rba_migration
|
2024-12-16 13:37:42 -06:00 |
|
|
Bhavin Patel
|
6c271cceba
|
Branch was auto-updated.
|
2024-12-16 11:30:51 -08:00 |
|
|
Bhavin Patel
|
31acf078c8
|
Branch was auto-updated.
|
2024-12-16 11:29:42 -08:00 |
|
|
Bhavin Patel
|
6ffb3a2c1e
|
Merge branch 'develop' into issue_3131
|
2024-12-16 11:29:35 -08:00 |
|
|
Lou Stella
|
5adad84746
|
Merge branch 'develop' into rba_migration
|
2024-12-16 13:10:16 -06:00 |
|
|
Bhavin Patel
|
80962edcce
|
Branch was auto-updated.
|
2024-12-16 11:05:43 -08:00 |
|
|
Bhavin Patel
|
49d8bd1ec5
|
Branch was auto-updated.
|
2024-12-16 11:05:42 -08:00 |
|
|
Bhavin Patel
|
93b22488bf
|
Branch was auto-updated.
|
2024-12-16 11:05:41 -08:00 |
|