Commit Graph

1516 Commits

Author SHA1 Message Date
research bot 4b27622a3f updating docs and package bits [ci skip] 2021-03-12 17:32:09 +00:00
divious1 592e63779c fixing merge conflicts 2021-03-12 11:43:55 -05:00
root 171b232497 Added detection testing service results inUnified Messaging Service Spawning a Process 2021-03-12 15:37:29 +00:00
root 5e6347385e Added detection testing service results inW3WP Spawning Shell 2021-03-12 04:53:43 +00:00
bpatel 40e1f95e2d fixed validation errors 2021-03-11 12:35:04 -08:00
mhaag-spl 2643be22ff w3wp spawning shell 2021-03-11 12:34:21 -07:00
mhaag-spl 69d73f3dc1 unified messaging service spawning a shell 2021-03-11 12:12:52 -07:00
P4T12ICK edaf9598f2 fixed merging issues 2021-03-11 19:03:54 +01:00
P4T12ICK d847a4cdd7 add required fields 2021-03-11 10:52:53 +01:00
P4T12ICK 43644ff368 add required fields 2021-03-11 09:32:33 +01:00
P4T12ICK 6e826b4e68 add required fields and check 2021-03-11 09:11:48 +01:00
P4T12ICK 7b99551756 add required fields and check 2021-03-11 09:08:15 +01:00
mhaag-spl b15aaa55df Moving non-passed to experimental and deprecating some 2021-03-10 13:27:00 -07:00
mhaag-spl a6265b60df Moving Tor Traffic to Experimental 2021-03-10 11:47:34 -07:00
P4T12ICK c81fd82c03 WIP 2021-03-10 15:50:26 +01:00
P4T12ICK df31ce2246 WIP 2021-03-10 15:22:35 +01:00
P4T12ICK c1c1d1733e WIP 2021-03-10 15:22:14 +01:00
P4T12ICK 7c134dbb5d WIP 2021-03-10 14:44:44 +01:00
mhaag-spl 7ea31fdf6e Merge branch 'OKR-Validation' of https://github.com/splunk/security_content into OKR-Validation 2021-03-10 06:43:35 -07:00
mhaag-spl 851a46ed41 Updated name 2021-03-10 06:43:26 -07:00
Michael Haag 3d9e6104f3 Merge branch 'develop' into OKR-Validation 2021-03-10 06:25:46 -07:00
mhaag-spl 90a385e941 Create detect_exchange_webshell.yml 2021-03-10 06:23:54 -07:00
github-actions[bot] a9338fea28 Branch was auto-updated. 2021-03-09 00:24:22 +00:00
Michael Haag 4e24d5888b Merge branch 'develop' into OKR-Validation 2021-03-08 17:00:55 -07:00
root 060dd6c883 Added detection testing service results inDetect mshta Rename 2021-03-08 23:47:23 +00:00
github-actions[bot] 02d8b0d691 Branch was auto-updated. 2021-03-08 22:45:30 +00:00
github-actions[bot] f08b9cdbda Branch was auto-updated. 2021-03-08 17:41:53 +00:00
github-actions[bot] 1f58996231 Branch was auto-updated. 2021-03-08 17:41:44 +00:00
root 2e68a79149 Added detection testing service results inDetect Mimikatz Using Loaded Images 2021-03-05 20:31:06 +00:00
mhaag-spl e6ce96e5a1 Detect Mimikatz Using Loaded Images 2021-03-05 13:10:59 -07:00
Michael Hart 93bf54562e Merge branch 'develop' of github.com:splunk/security_content into TR-382 2021-03-05 13:32:20 -05:00
Michael Haag b4164d9726 Merge branch 'develop' into 03rel1 2021-03-05 10:41:58 -07:00
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group
Renaming Sunburst Malware to NOBELIUM Group
2021-03-05 10:30:34 -07:00
github-actions[bot] c45d145503 Branch was auto-updated. 2021-03-05 17:02:44 +00:00
divious1 e666dd1998 moved back to endpoint 2021-03-05 11:49:49 -05:00
Michael Hart 037d40575a Tagging last story 2021-03-05 10:24:47 -05:00
Michael Hart f4a04f55ff Adding a new story (Windows Discovery Techniques) and tagging streaming detections with that story 2021-03-04 22:02:25 -05:00
Michael Hart 4f504dff9d Merge branch 'develop' of github.com:splunk/security_content into TR-382 2021-03-04 21:17:42 -05:00
Michael Hart 487a87e41f First pass of tagging 2021-03-04 21:17:38 -05:00
root 752a581042 Added detection testing service results inRyuk Wake on LAN Command 2021-03-04 21:29:56 +00:00
research bot 746997c92c updating docs and package bits [ci skip] 2021-03-04 20:11:07 +00:00
mhaag-spl fcb9fa5340 W3WP Spawning shells 2021-03-04 06:38:00 -07:00
mhaag-spl 8335e8545b Update nishang_powershelltcponeline.yml 2021-03-04 06:31:12 -07:00
mhaag-spl 53cfecd6f6 Update fodhelper_uac_bypass.yml 2021-03-04 06:08:32 -07:00
mhaag-spl 66514f0b6c formatting updates 2021-03-04 06:05:17 -07:00
github-actions[bot] c8fef777ce Branch was auto-updated. 2021-03-03 22:28:02 +00:00
Detection Testing Service 6246233a22 Merge branch '02rel3' of https://github.com/splunk/security_content into 02rel3 2021-03-03 22:12:56 +00:00
root 442fb6eced Added detection testing service results inNishang PowershellTCPOneLine 2021-03-03 22:12:55 +00:00
bpatel 0a72373d2b adding braces 2021-03-03 14:05:10 -08:00
mhaag-spl 943438b52c Update ryuk_wake_on_lan_command.yml 2021-03-03 14:55:50 -07:00