Commit Graph

412 Commits

Author SHA1 Message Date
P4T12ICK f12d9a90bb updated test file 2021-03-29 16:49:13 +02:00
P4T12ICK cfca6b19d5 updated test file 2021-03-29 16:30:15 +02:00
P4T12ICK 3cd8b420c6 updated test file 2021-03-29 16:24:40 +02:00
P4T12ICK bf1c11e5b5 test file updated 2021-03-29 16:03:06 +02:00
P4T12ICK 49245226c6 test file updated 2021-03-29 15:52:11 +02:00
P4T12ICK 4ad8b2b6ba Improve ssa detection testing 2021-03-29 11:09:53 +02:00
P4T12ICK d38c53df07 updated test file 2021-03-26 16:29:58 +01:00
P4T12ICK 6934368668 Merge branch 'ssa_detection_testing_three' into ssa_smoketest_nightly 2021-03-26 16:26:37 +01:00
P4T12ICK 1c4908d6a8 merged 2021-03-26 16:26:13 +01:00
P4T12ICK 243121ce04 merged 2021-03-26 16:23:30 +01:00
P4T12ICK da86a0b7cf updated test files 2021-03-26 12:04:51 +01:00
P4T12ICK e2209cb741 updated test files 2021-03-26 10:21:19 +01:00
P4T12ICK 0ae9f1496d updated test files 2021-03-26 08:51:39 +01:00
Stanislav Miskovic 08857c50c8 Misko: Fixed tests with correct datasets and dataset locations 2021-03-25 14:26:23 -07:00
github-actions[bot] a7b63bf17d Branch was auto-updated. 2021-03-25 18:03:14 +00:00
github-actions[bot] 3af7cdbe65 Branch was auto-updated. 2021-03-25 17:34:30 +00:00
github-actions[bot] e6d57ecba1 Branch was auto-updated. 2021-03-25 17:34:18 +00:00
mhaag-spl 1c3d7a3350 Create certutil_with_decode_argument.yml
CertUtil Decode
2021-03-25 11:18:36 -06:00
mhaag-spl 5b7aa4ada2 fix 2021-03-24 15:36:19 -06:00
mhaag-spl 52015bd2b5 certutil 2021-03-24 15:32:46 -06:00
mhaag-spl 249fd0a549 Update Certutil
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
2021-03-24 15:15:47 -06:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
github-actions[bot] 71c628ac17 Branch was auto-updated. 2021-03-23 16:20:46 +00:00
P4T12ICK 617ec011d6 ssa detection testing 2021-03-23 14:52:10 +01:00
P4T12ICK e08b1ab9a9 testing ssa detections 2021-03-23 13:09:50 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
github-actions[bot] 3fa0fbab3b Branch was auto-updated. 2021-03-22 17:51:49 +00:00
github-actions[bot] b4c5d60a8f Branch was auto-updated. 2021-03-22 17:51:48 +00:00
tcontreras 08a0b64eb6 clop_test_file 2021-03-22 11:57:42 +01:00
tcontreras ba33452139 clop_test_file 2021-03-22 11:53:18 +01:00
tcontreras b42ef50322 clop_test_file 2021-03-22 11:45:21 +01:00
P4T12ICK 5fc3209293 SSA detection tests updated 2021-03-22 09:22:44 +01:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
tcontreras b63e3c8177 detections and test data 2021-03-19 17:03:57 +01:00
P4T12ICK 7bad2fa975 new detection tests 2021-03-19 15:10:26 +01:00
github-actions[bot] 886b876e73 Branch was auto-updated. 2021-03-19 13:24:19 +00:00
github-actions[bot] cf44d1ac60 Branch was auto-updated. 2021-03-19 13:24:18 +00:00
P4T12ICK 6355bb7f72 small bug fixes 2021-03-19 13:30:13 +01:00
P4T12ICK 36f63418f0 detection testing SSA 2021-03-19 10:16:58 +01:00
P4T12ICK d13a1896ef detection testing SSA 2021-03-19 09:37:18 +01:00
Michael Haag b59430ab5d Merge branch 'develop' into mhaag 2021-03-18 21:24:34 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell
Updated Detect Exchange Web Shell based on data
2021-03-18 21:00:09 -06:00
bpatel 78903f3fe9 test files 2021-03-18 12:41:00 -07:00
github-actions[bot] 6fb099da19 Branch was auto-updated. 2021-03-18 16:54:44 +00:00
P4T12ICK 4741fc9cca updated test file 2021-03-16 12:50:06 +01:00