Commit Graph

165 Commits

Author SHA1 Message Date
Bhavin Patel 7cbe7c87c9 Update previously_seen_api_calls_from_user_roles.yml 2023-06-12 15:40:37 -07:00
Bhavin Patel 266a2a775b adding lookups 2023-06-12 15:26:27 -07:00
srv-rr-gh-researchbt 0e192e2b8a Branch was auto-updated. 2023-06-12 15:10:08 -07:00
Namratha Sreekanta 0782930137 Adding missing lookup files 2023-06-12 13:56:20 -07:00
patel-bhavin 30ad4d6eab only kvstore conversion 2023-05-22 17:35:13 -07:00
srv-rr-gh-researchbt d57aaa64aa Branch was auto-updated. 2023-05-02 15:02:50 -07:00
mvelazco 39a1645e69 adding new detection 2023-04-25 17:04:46 -04:00
mvelazco 1841df5e4f adding detection 2023-04-25 16:11:37 -04:00
pyth0n1c 44875375e2 Removed a duplicate macro 2023-04-14 15:35:45 -07:00
Michael Haag 89dff5cb65 dns 2023-03-30 12:15:41 -06:00
Bhavin Patel 3caf195760 Merge pull request #2569 from VatsalJagani/madusa-ransomware
Added medusa ransomware file extension and note file names.
2023-03-20 17:16:29 -05:00
Vatsal Jagani 06b9231ed5 Code review change. Made change in the right file. 2023-03-20 22:04:10 +05:30
Vatsal Jagani cf14595674 Made ransomware notes lookup case insensitive. 2023-03-14 18:38:43 +05:30
Vatsal Jagani 0ed1ee7b97 Added medusa ransomware file extension and note file names. 2023-03-14 18:35:46 +05:30
srv-rr-gh-researchbt 0fcad2ae1a Branch was auto-updated. 2023-02-14 09:35:22 -08:00
pyth0n1c e6c5fbd101 added all detections for release, still need to update dataset links 2023-02-14 06:46:13 -08:00
mvelazco 4f2307f6c6 renaming advanced audit policy guids lookup 2023-02-13 12:03:49 -05:00
srv-rr-gh-researchbt dd6812dcc2 Branch was auto-updated. 2023-02-07 10:39:55 -08:00
ksharad-splunk 3a4568bc3d Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml 2023-02-07 15:34:47 +01:00
ksharad-splunk 918f54262d Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.mlmodel 2023-02-07 15:34:23 +01:00
Kumar Sharad e9ed13ea31 Detection name update 2023-02-07 15:31:48 +01:00
Kumar Sharad 87d5b60b0a Detect suspicious Filename updates 2023-01-27 17:23:58 +01:00
dluxtron cc55d3abb5 Adding detection for disabling audit policy on a DC 2023-01-26 13:01:37 +10:00
srv-rr-gh-researchbt a9242d7e60 Branch was auto-updated. 2023-01-24 12:37:52 -08:00
srv-rr-gh-researchbt 1acbc9eabe Branch was auto-updated. 2023-01-24 12:36:10 -08:00
srv-rr-gh-researchbt 59954ea010 Branch was auto-updated. 2023-01-24 12:36:04 -08:00
srv-rr-gh-researchbt 4562759834 Branch was auto-updated. 2023-01-24 11:18:52 -08:00
srv-rr-gh-researchbt af60fd3d8c Branch was auto-updated. 2023-01-24 11:18:50 -08:00
srv-rr-gh-researchbt 4c961f2d4f Branch was auto-updated. 2023-01-24 11:18:49 -08:00
Kumar Sharad 944b7a7e82 Detect Suspicious Filename 2023-01-23 17:24:37 +01:00
Namratha Sreekanta 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl 2023-01-17 15:26:01 -08:00
tccontre bf8f2339b8 lockbit-chaos-ransomware 2023-01-17 15:37:37 +01:00
tccontre 5955920298 lockbit-chaos-ransomware 2023-01-16 10:10:28 +01:00
srv-rr-gh-researchbt 6ee71eb8f8 Branch was auto-updated. 2023-01-10 13:34:04 -08:00
Michael Haag 3642d36c7f Bespoke Drivers 2022-12-31 14:14:11 -07:00
Michael Haag 22f6d4ae92 Fantastic IIS Modules and Where to Find Them 2022-12-21 08:53:03 -07:00
srv-rr-gh-researchbt 0cc6a0cfc0 Branch was auto-updated. 2022-10-18 11:42:30 -07:00
Michael Haag f29367bf37 CISA and mimikatz add 2022-10-06 16:07:25 -06:00
srv-rr-gh-researchbt 62247ec23d Branch was auto-updated. 2022-10-03 13:18:04 -07:00
Bhavin Patel 8a6bc4e348 Merge branch 'develop' into OktaHaag 2022-10-03 13:15:37 -07:00
srv-rr-gh-researchbt 597a041b92 Branch was auto-updated. 2022-09-29 13:55:31 -07:00
Namratha Sreekanta 84ae1743fe changing file names 2022-09-28 13:16:22 -07:00
Namratha Sreekanta 179e58e087 changing files 2022-09-28 12:36:40 -07:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Namratha Sreekanta d1788686d5 initial commit for dga 2022-09-15 17:50:36 -07:00
d1vious 782b9bed8a updating csv 2022-09-15 14:57:53 -04:00
pyth0n1c 775d7c8305 Branch was auto-updated. 2022-09-15 09:15:57 -07:00
pyth0n1c 934844a293 Branch was auto-updated. 2022-09-13 10:12:23 -07:00
d1vious e43855c570 lolbas 2022-09-08 19:15:03 -04:00
d1vious b3aa8b4bb4 working scripts 2022-09-08 18:01:46 -04:00