Commit Graph

10527 Commits

Author SHA1 Message Date
Bhavin Patel ef7b45ad57 Branch was auto-updated. 2021-09-20 02:42:56 -07:00
P4T12ICK 760328df2c Merge pull request #1644 from splunk/dev_sec_ops_work
Dev Sec Ops Work
2021-09-20 11:42:33 +02:00
P4T12ICK 549b58e34c merged with develop 2021-09-20 11:16:05 +02:00
P4T12ICK 5b41aaaa58 merged with develop 2021-09-20 11:15:23 +02:00
Detection Testing Service 3840ef8d20 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-17 12:32:05 +00:00
root 88a4494b69 Added detection testing service results inExtraction of Registry Hives 2021-09-17 12:32:04 +00:00
Bhavin Patel 3723e0129e Branch was auto-updated. 2021-09-17 05:24:59 -07:00
Michael Haag b6db6f357b Merge pull request #1667 from splunk/add_dataset_url
adding dataset url
2021-09-17 06:24:41 -06:00
mhaag-spl 3e996076c7 updates 2021-09-17 05:56:19 -06:00
mhaag-spl 93f706926b Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-17 05:52:44 -06:00
mhaag-spl d646da8e70 Revert "Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm"
This reverts commit f7befe61e6, reversing
changes made to 5b301ca9b6.
2021-09-17 05:48:51 -06:00
mhaag-spl 6747a30515 Update create_local_admin_accounts_using_net_exe.yml 2021-09-17 05:46:53 -06:00
P4T12ICK 5b98c86ba9 change dataset 2021-09-17 10:19:45 +02:00
Detection Testing Service f7befe61e6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:42:11 +00:00
root 5b301ca9b6 Added detection testing service results inProcesses created by netsh 2021-09-16 18:42:10 +00:00
Detection Testing Service f4162778e1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:36:03 +00:00
root 9156fe65e7 Added detection testing service results inExtract SAM from Registry 2021-09-16 18:36:02 +00:00
Detection Testing Service 5ec1bb98f0 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:28:51 +00:00
root e85e81804b Added detection testing service results inExtract SAM from Registry 2021-09-16 18:28:50 +00:00
Detection Testing Service 9a7e13f858 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:25:52 +00:00
root 2056548702 Added detection testing service results inDump LSASS via procdump 2021-09-16 18:25:52 +00:00
mhaag-spl fa785a991f Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 12:24:56 -06:00
mhaag-spl fbc3185dbc Update processes_launching_netsh.yml 2021-09-16 12:24:53 -06:00
Detection Testing Service 47db5dfd79 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 18:19:16 +00:00
root 4178c03b52 Added detection testing service results inDetect PsExec With accepteula Flag 2021-09-16 18:19:16 +00:00
mhaag-spl 6f9c536f8e error 2021-09-16 12:15:53 -06:00
mhaag-spl 9c08c1f2f4 fixes 2021-09-16 12:14:26 -06:00
mhaag-spl bd6a779b02 no longer need sysmon procdump - updated superior procdump 2021-09-16 12:06:20 -06:00
root 04e8fd24b2 Added detection testing service results inDomain Account Discovery With Net App 2021-09-16 17:56:37 +00:00
mhaag-spl 70fb8aaf78 fixes 2021-09-16 11:36:51 -06:00
mhaag-spl 583e962d23 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 11:13:16 -06:00
mhaag-spl 695bd7236c hh, mshta, and psexec 2021-09-16 11:13:15 -06:00
Detection Testing Service 325eb8e1c7 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:08:16 +00:00
root eeb3af0c16 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy 2021-09-16 17:08:15 +00:00
Detection Testing Service 644e571292 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 17:07:21 +00:00
root 6c467dbb80 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy 2021-09-16 17:07:21 +00:00
Detection Testing Service c22058ceb4 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:57:26 +00:00
root 8fc4ca5e90 Added detection testing service results inCreation of Shadow Copy with wmic and powershell 2021-09-16 16:57:25 +00:00
Detection Testing Service ee1ef1ecd6 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:52:59 +00:00
root 13a917ea62 Added detection testing service results inCreate or delete windows shares using net exe 2021-09-16 16:52:59 +00:00
mhaag-spl 9e32a32bdd Update credential_dumping_via_symlink_to_shadow_copy.yml 2021-09-16 10:52:50 -06:00
Detection Testing Service ec15b54f16 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:51:08 +00:00
root 7acb54087f Added detection testing service results inCreate local admin accounts using net exe 2021-09-16 16:51:07 +00:00
mhaag-spl 261bdc4270 Update credential_dumping_via_copy_command_from_shadow_copy.yml 2021-09-16 10:50:21 -06:00
Detection Testing Service 7bf85e6245 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:45:19 +00:00
root ddae4670bb Added detection testing service results inBITSAdmin Download File 2021-09-16 16:45:19 +00:00
Detection Testing Service 85594da255 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-09-16 16:41:30 +00:00
root 6059b4e135 Added detection testing service results inBITS Job Persistence 2021-09-16 16:41:29 +00:00
mhaag-spl f43bffd899 Update creation_of_shadow_copy_with_wmic_and_powershell.yml 2021-09-16 10:37:34 -06:00
mhaag-spl 5fe3b8ad85 fixes 2021-09-16 10:33:18 -06:00