 Bhavin Patel
|
2c1bc16640
|
Merge pull request #1383 from splunk/darkside
Darkside Ransomware
v3.21.0
|
2021-05-13 14:40:29 -07:00 |
|
|
bpatel
|
a55a6bff0a
|
delete test file
|
2021-05-13 14:26:55 -07:00 |
|
|
bpatel
|
90cae048e2
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 14:22:16 -07:00 |
|
|
bpatel
|
888aae21d3
|
moving to experimental
|
2021-05-13 14:22:07 -07:00 |
|
|
Michael Haag
|
9a7ac4edf8
|
Update slui_spawning_a_process.yml
|
2021-05-13 14:44:05 -06:00 |
|
|
Michael Haag
|
eac3adc300
|
Update slui_runas_elevated.yml
|
2021-05-13 14:43:12 -06:00 |
|
|
Michael Haag
|
2d0c62921c
|
Update detect_renamed_rclone.yml
|
2021-05-13 14:41:54 -06:00 |
|
|
Michael Haag
|
1acad6953e
|
Update detect_rclone_command_line_usage.yml
|
2021-05-13 14:40:25 -06:00 |
|
|
Michael Haag
|
7c15ac9730
|
Update detect_rclone_command_line_usage.yml
|
2021-05-13 14:39:55 -06:00 |
|
|
Michael Haag
|
2d22e600c8
|
Update delete_shadowcopy_with_powershell.yml
|
2021-05-13 14:39:11 -06:00 |
|
|
bpatel
|
9fed6af501
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 13:36:54 -07:00 |
|
|
bpatel
|
d003c79d2f
|
search_formatting
|
2021-05-13 13:36:28 -07:00 |
|
|
Michael Haag
|
0a5f0acc65
|
Update cmlua_or_cmstplua_uac_bypass.yml
|
2021-05-13 14:33:34 -06:00 |
|
|
Detection Testing Service
|
e81a3eb9c8
|
Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
|
2021-05-13 20:14:19 +00:00 |
|
|
root
|
18ff60e231
|
Added detection testing service results inSLUI RunAs Elevated
|
2021-05-13 20:14:18 +00:00 |
|
|
root
|
bab3434e54
|
Added detection testing service results inSLUI Spawning a Process
|
2021-05-13 20:11:55 +00:00 |
|
|
mhaag-spl
|
dccb38e877
|
Update slui_spawning_a_process.yml
|
2021-05-13 13:34:37 -06:00 |
|
|
Detection Testing Service
|
485a811663
|
Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
|
2021-05-13 19:15:49 +00:00 |
|
|
root
|
8c175d5af3
|
Added detection testing service results inExtract SAM from Registry
|
2021-05-13 19:15:48 +00:00 |
|
|
Detection Testing Service
|
07ee4b0b62
|
Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
|
2021-05-13 19:15:06 +00:00 |
|
|
root
|
7b32d0f413
|
Added detection testing service results inDetect Renamed RClone
|
2021-05-13 19:15:05 +00:00 |
|
|
Detection Testing Service
|
6b94433de7
|
Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
|
2021-05-13 19:06:15 +00:00 |
|
|
root
|
13af359b6b
|
Added detection testing service results inDetect RClone Command-Line Usage
|
2021-05-13 19:06:14 +00:00 |
|
|
root
|
b3dd86837d
|
Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass
|
2021-05-13 19:02:02 +00:00 |
|
|
tcontreras
|
54a3f8e3a7
|
com
|
2021-05-13 20:43:54 +02:00 |
|
|
bpatel
|
3f8f5aab30
|
conflicts
|
2021-05-13 11:39:51 -07:00 |
|
|
bpatel
|
2db1f87aff
|
manifest errors
|
2021-05-13 11:38:40 -07:00 |
|
|
tcontreras
|
03e516338f
|
com_obj
|
2021-05-13 20:35:56 +02:00 |
|
|
tcontreras
|
d631a7e2f2
|
fail
|
2021-05-13 20:32:25 +02:00 |
|
|
bpatel
|
fbe24284be
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 11:27:59 -07:00 |
|
|
tcontreras
|
118ea316b7
|
com
|
2021-05-13 20:24:04 +02:00 |
|
|
tcontreras
|
eaae607c12
|
com_obj2
|
2021-05-13 20:21:22 +02:00 |
|
|
github-actions[bot]
|
82f9a5f69d
|
Branch was auto-updated.
|
2021-05-13 18:16:52 +00:00 |
|
|
Bhavin Patel
|
a33eb59bbd
|
Merge pull request #1384 from splunk/TR-657
Fixed small bug in pipeline (two | | back to back)
|
2021-05-13 11:16:36 -07:00 |
|
|
mhaag-spl
|
e63e6c4cfb
|
rclone
|
2021-05-13 12:14:03 -06:00 |
|
|
David Dorsey
|
f29b5e8d38
|
Fixed small bug in pipeline (two | | back to back)
|
2021-05-13 12:55:57 -05:00 |
|
|
bpatel
|
a103ce14c4
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 10:55:17 -07:00 |
|
|
bpatel
|
9a1bd49ca5
|
more mappings
|
2021-05-13 10:55:09 -07:00 |
|
|
github-actions[bot]
|
95c4e70787
|
Branch was auto-updated.
|
2021-05-13 17:54:31 +00:00 |
|
|
Jose Enrique Hernandez
|
a0b9c4290d
|
Merge pull request #1342 from splunk/password_spraying_TR-515
Password spraying TR-515
|
2021-05-13 13:54:04 -04:00 |
|
|
bpatel
|
571781fc8e
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-13 10:50:36 -07:00 |
|
|
bpatel
|
fdb96e514a
|
mapping existing dettections
|
2021-05-13 10:50:29 -07:00 |
|
|
Michael Haag
|
b600c1283b
|
Update cmlua_or_cmstplua_uac_bypass.yml
|
2021-05-13 11:49:30 -06:00 |
|
|
root
|
71b3e135df
|
Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass
|
2021-05-13 17:21:20 +00:00 |
|
|
tcontreras
|
c24f154dce
|
com_obj
|
2021-05-13 18:58:14 +02:00 |
|
|
mhaag-spl
|
5ff8c6372c
|
SLUI
|
2021-05-13 06:52:59 -06:00 |
|
|
bpatel
|
4f9b8a2b1b
|
test time
|
2021-05-12 14:53:27 -07:00 |
|
|
bpatel
|
1b5bf2a065
|
story namne
|
2021-05-12 14:52:06 -07:00 |
|
|
bpatel
|
545951b315
|
narrative
|
2021-05-12 14:06:53 -07:00 |
|
|
bpatel
|
743bbaf051
|
Merge branch 'darkside' of github.com:splunk/security_content into darkside
|
2021-05-12 13:50:15 -07:00 |
|