10546 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mhaag-spl	ea9cfddf1c	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-20 12:05:19 -06:00
Detection Testing Service	8a2401bedf	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-20 18:05:06 +00:00
mhaag-spl	70e1c9a454	Update office_document_spawned_child_process_to_download.yml	2021-09-20 12:05:05 -06:00
root	7ed4be864e	Added detection testing service results inSuspicious SearchProtocolHost no Command Line Arguments	2021-09-20 18:05:05 +00:00
Detection Testing Service	479384a6c1	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-20 17:58:13 +00:00
root	28f03fcbcd	Added detection testing service results inSuspicious Rundll32 with no Command Line Arguments	2021-09-20 17:58:12 +00:00
Detection Testing Service	7d3c68faa1	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-20 17:54:58 +00:00
root	9373763ea3	Added detection testing service results inSuspicious GPUpdate no Command Line Arguments	2021-09-20 17:54:58 +00:00
Detection Testing Service	583db3e726	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-20 17:51:29 +00:00
root	0a34def1b3	Added detection testing service results inSuspicious DLLHost no Command Line Arguments	2021-09-20 17:51:28 +00:00
mhaag-spl	0718d28f83	Update suspicious_searchprotocolhost_no_command_line_arguments.yml	2021-09-20 11:42:34 -06:00
mhaag-spl	14f9bea865	mwc hunting and rundll32 fix	2021-09-20 11:39:40 -06:00
mhaag-spl	4096b496a5	Update suspicious_gpupdate_no_command_line_arguments.yml	2021-09-20 11:34:25 -06:00
mhaag-spl	4320d4ab5b	Update suspicious_dllhost_no_command_line_arguments.yml	2021-09-20 11:32:31 -06:00
root	5d2d0384e3	Added detection testing service results inDetect regsvcs with no Command Line Arguments	2021-09-20 17:21:26 +00:00
mhaag-spl	e07d94f396	regsvcs regasm	2021-09-20 11:02:20 -06:00
root	2bf10d4a33	Added detection testing service results inDetect Regasm with no Command Line Arguments	2021-09-20 16:58:10 +00:00
mhaag-spl	81183b661c	Update detect_regasm_with_no_command_line_arguments.yml	2021-09-20 10:37:57 -06:00
mhaag-spl	958e195593	Update searchprotocolhost_with_no_command_line_with_network.yml	2021-09-20 10:05:07 -06:00
Bhavin Patel	ef7b45ad57	Branch was auto-updated.	2021-09-20 02:42:56 -07:00
P4T12ICK	760328df2c	Merge pull request #1644 from splunk/dev_sec_ops_work ... Dev Sec Ops Work	2021-09-20 11:42:33 +02:00
P4T12ICK	549b58e34c	merged with develop	2021-09-20 11:16:05 +02:00
P4T12ICK	5b41aaaa58	merged with develop	2021-09-20 11:15:23 +02:00
Detection Testing Service	3840ef8d20	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-17 12:32:05 +00:00
root	88a4494b69	Added detection testing service results inExtraction of Registry Hives	2021-09-17 12:32:04 +00:00
Bhavin Patel	3723e0129e	Branch was auto-updated.	2021-09-17 05:24:59 -07:00
Michael Haag	b6db6f357b	Merge pull request #1667 from splunk/add_dataset_url ... adding dataset url	2021-09-17 06:24:41 -06:00
mhaag-spl	3e996076c7	updates	2021-09-17 05:56:19 -06:00
mhaag-spl	93f706926b	Merge branch 'develop' into The-Haag-of-The-Storm	2021-09-17 05:52:44 -06:00
mhaag-spl	d646da8e70	Revert "Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm" ... This reverts commit f7befe61e6, reversing changes made to 5b301ca9b6.	2021-09-17 05:48:51 -06:00
mhaag-spl	6747a30515	Update create_local_admin_accounts_using_net_exe.yml	2021-09-17 05:46:53 -06:00
P4T12ICK	5b98c86ba9	change dataset	2021-09-17 10:19:45 +02:00
Detection Testing Service	f7befe61e6	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 18:42:11 +00:00
root	5b301ca9b6	Added detection testing service results inProcesses created by netsh	2021-09-16 18:42:10 +00:00
Detection Testing Service	f4162778e1	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 18:36:03 +00:00
root	9156fe65e7	Added detection testing service results inExtract SAM from Registry	2021-09-16 18:36:02 +00:00
Detection Testing Service	5ec1bb98f0	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 18:28:51 +00:00
root	e85e81804b	Added detection testing service results inExtract SAM from Registry	2021-09-16 18:28:50 +00:00
Detection Testing Service	9a7e13f858	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 18:25:52 +00:00
root	2056548702	Added detection testing service results inDump LSASS via procdump	2021-09-16 18:25:52 +00:00
mhaag-spl	fa785a991f	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 12:24:56 -06:00
mhaag-spl	fbc3185dbc	Update processes_launching_netsh.yml	2021-09-16 12:24:53 -06:00
Detection Testing Service	47db5dfd79	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 18:19:16 +00:00
root	4178c03b52	Added detection testing service results inDetect PsExec With accepteula Flag	2021-09-16 18:19:16 +00:00
mhaag-spl	6f9c536f8e	error	2021-09-16 12:15:53 -06:00
mhaag-spl	9c08c1f2f4	fixes	2021-09-16 12:14:26 -06:00
mhaag-spl	bd6a779b02	no longer need sysmon procdump - updated superior procdump	2021-09-16 12:06:20 -06:00
root	04e8fd24b2	Added detection testing service results inDomain Account Discovery With Net App	2021-09-16 17:56:37 +00:00
mhaag-spl	70fb8aaf78	fixes	2021-09-16 11:36:51 -06:00
mhaag-spl	583e962d23	Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm	2021-09-16 11:13:16 -06:00