 root
|
ede4862234
|
Added detection testing service results inRundll32 LockWorkStation
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
6f3a90e5f6
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
36866ce6c5
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
root
|
ed734278df
|
Added detection testing service results inPowershell Execute COM Object
|
2021-08-16 14:49:38 +02:00 |
|
|
root
|
d11d58d8db
|
Added detection testing service results inFsutil Zeroing File
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
092996bd09
|
lockbit_ttp
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
e1a96aed84
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
1656962cdd
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
8fd704947e
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
51e4ec72c1
|
conti_leak
|
2021-08-16 14:49:38 +02:00 |
|
|
tccontre
|
d7c5f02d84
|
conti leak
conti leak
|
2021-08-16 14:49:37 +02:00 |
|
|
tccontre
|
07768fb305
|
conti_leak
conti_leak
|
2021-08-16 14:49:37 +02:00 |
|
|
research bot
|
a2bb49f089
|
updating docs and package bits [ci skip]
|
2021-08-12 18:43:04 +00:00 |
|
|
pyth0n1c
|
2df1975e5f
|
Merge pull request #1559 from splunk/appinspect_failures
fixes
v3.26.0
|
2021-08-12 11:15:21 -07:00 |
|
|
patel-bhavin
|
cd4df7567a
|
fixes
|
2021-08-12 09:47:40 -07:00 |
|
|
tccontre
|
c8d21347b1
|
Merge pull request #1549 from splunk/icedid
icedid
|
2021-08-12 10:59:31 +02:00 |
|
|
tccontre
|
dcfab01e14
|
icedid
|
2021-08-12 09:25:43 +02:00 |
|
|
github-actions[bot]
|
f078e35f81
|
Branch was auto-updated.
|
2021-08-11 19:35:37 +00:00 |
|
|
Michael Haag
|
c84a3b3b25
|
Merge pull request #1555 from splunk/blackbolt_1
duplicate
|
2021-08-11 13:35:12 -06:00 |
|
|
patel-bhavin
|
9f71b88e6c
|
duplicate
|
2021-08-11 11:24:14 -07:00 |
|
|
github-actions[bot]
|
7c85b0dfd8
|
Branch was auto-updated.
|
2021-08-09 18:42:36 +00:00 |
|
|
Jose Enrique Hernandez
|
da6a9c2d0f
|
Merge pull request #1550 from splunk/ssa_TR-770_add_event_id
TR-770 added event_id to ssa detections
|
2021-08-09 11:42:14 -07:00 |
|
|
root
|
4e3dc7fe9c
|
Added detection testing service results inSqlite Module In Temp Folder
|
2021-08-05 15:43:52 +00:00 |
|
|
tccontre
|
9a79673dbd
|
Merge branch 'icedid' of github.com:splunk/security_content into icedid
|
2021-08-05 17:22:51 +02:00 |
|
|
tccontre
|
5e8393c3b7
|
icedid
|
2021-08-05 17:22:35 +02:00 |
|
|
root
|
665a99e197
|
Added detection testing service results inSuspicious IcedID Regsvr32 Cmdline
|
2021-08-05 14:54:43 +00:00 |
|
|
Detection Testing Service
|
765f7a184f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:26:04 +00:00 |
|
|
root
|
442cbd9787
|
Added detection testing service results inDrop IcedID License dat
|
2021-08-05 14:26:02 +00:00 |
|
|
Detection Testing Service
|
ba91dfc63f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:25:26 +00:00 |
|
|
root
|
a79f8718eb
|
Added detection testing service results inIcedID Exfiltrated Archived File Creation
|
2021-08-05 14:25:26 +00:00 |
|
|
Detection Testing Service
|
40cf94a229
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:11:56 +00:00 |
|
|
root
|
8c20f6fdb0
|
Added detection testing service results inCHCP Command Execution
|
2021-08-05 14:11:56 +00:00 |
|
|
Detection Testing Service
|
549cb603b8
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:10:59 +00:00 |
|
|
root
|
ea12f51783
|
Added detection testing service results inOffice Application Spawn Regsvr32 process
|
2021-08-05 14:10:58 +00:00 |
|
|
Detection Testing Service
|
83dd255433
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:09:32 +00:00 |
|
|
root
|
2b3346a7c5
|
Added detection testing service results inCreate Remote Thread In Shell Application
|
2021-08-05 14:09:32 +00:00 |
|
|
Detection Testing Service
|
b109f5517e
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:08:17 +00:00 |
|
|
root
|
e0b24a1984
|
Added detection testing service results inSuspicious Rundll32 PluginInit
|
2021-08-05 14:08:16 +00:00 |
|
|
Detection Testing Service
|
4990119ca4
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:00:50 +00:00 |
|
|
root
|
7ac92524f1
|
Added detection testing service results inSuspicious IcedID Rundll32 Cmdline
|
2021-08-05 14:00:49 +00:00 |
|
|
Detection Testing Service
|
6d6f066d47
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:45:15 +00:00 |
|
|
root
|
de016c4686
|
Added detection testing service results inRundll32 Process Creating Exe Dll Files
|
2021-08-05 13:45:14 +00:00 |
|
|
Detection Testing Service
|
890546ac8b
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:36:43 +00:00 |
|
|
root
|
0fde378b6f
|
Added detection testing service results inRundll32 DNSQuery
|
2021-08-05 13:36:42 +00:00 |
|
|
root
|
f9d9e07f7b
|
Added detection testing service results inRundll32 CreateRemoteThread In Browser
|
2021-08-05 13:34:25 +00:00 |
|
|
root
|
4d47c30783
|
Added detection testing service results inRundll32 Create Remote Thread To A Process
|
2021-08-05 13:10:18 +00:00 |
|
|
tccontre
|
ede0bd7675
|
icedid
|
2021-08-05 13:48:42 +02:00 |
|
|
tccontre
|
34377e6310
|
icedid
|
2021-08-05 13:42:29 +02:00 |
|
|
tccontre
|
6ccaf94f2f
|
icedid
|
2021-08-05 13:39:05 +02:00 |
|
|
tccontre
|
c7e8f72fa6
|
icedid
|
2021-08-05 13:36:35 +02:00 |
|