 pyth0n1c
|
2df1975e5f
|
Merge pull request #1559 from splunk/appinspect_failures
fixes
v3.26.0
|
2021-08-12 11:15:21 -07:00 |
|
|
patel-bhavin
|
cd4df7567a
|
fixes
|
2021-08-12 09:47:40 -07:00 |
|
|
tccontre
|
c8d21347b1
|
Merge pull request #1549 from splunk/icedid
icedid
|
2021-08-12 10:59:31 +02:00 |
|
|
tccontre
|
dcfab01e14
|
icedid
|
2021-08-12 09:25:43 +02:00 |
|
|
github-actions[bot]
|
f078e35f81
|
Branch was auto-updated.
|
2021-08-11 19:35:37 +00:00 |
|
|
Michael Haag
|
c84a3b3b25
|
Merge pull request #1555 from splunk/blackbolt_1
duplicate
|
2021-08-11 13:35:12 -06:00 |
|
|
patel-bhavin
|
9f71b88e6c
|
duplicate
|
2021-08-11 11:24:14 -07:00 |
|
|
github-actions[bot]
|
7c85b0dfd8
|
Branch was auto-updated.
|
2021-08-09 18:42:36 +00:00 |
|
|
Jose Enrique Hernandez
|
da6a9c2d0f
|
Merge pull request #1550 from splunk/ssa_TR-770_add_event_id
TR-770 added event_id to ssa detections
|
2021-08-09 11:42:14 -07:00 |
|
|
root
|
4e3dc7fe9c
|
Added detection testing service results inSqlite Module In Temp Folder
|
2021-08-05 15:43:52 +00:00 |
|
|
tccontre
|
9a79673dbd
|
Merge branch 'icedid' of github.com:splunk/security_content into icedid
|
2021-08-05 17:22:51 +02:00 |
|
|
tccontre
|
5e8393c3b7
|
icedid
|
2021-08-05 17:22:35 +02:00 |
|
|
root
|
665a99e197
|
Added detection testing service results inSuspicious IcedID Regsvr32 Cmdline
|
2021-08-05 14:54:43 +00:00 |
|
|
Detection Testing Service
|
765f7a184f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:26:04 +00:00 |
|
|
root
|
442cbd9787
|
Added detection testing service results inDrop IcedID License dat
|
2021-08-05 14:26:02 +00:00 |
|
|
Detection Testing Service
|
ba91dfc63f
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:25:26 +00:00 |
|
|
root
|
a79f8718eb
|
Added detection testing service results inIcedID Exfiltrated Archived File Creation
|
2021-08-05 14:25:26 +00:00 |
|
|
Detection Testing Service
|
40cf94a229
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:11:56 +00:00 |
|
|
root
|
8c20f6fdb0
|
Added detection testing service results inCHCP Command Execution
|
2021-08-05 14:11:56 +00:00 |
|
|
Detection Testing Service
|
549cb603b8
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:10:59 +00:00 |
|
|
root
|
ea12f51783
|
Added detection testing service results inOffice Application Spawn Regsvr32 process
|
2021-08-05 14:10:58 +00:00 |
|
|
Detection Testing Service
|
83dd255433
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:09:32 +00:00 |
|
|
root
|
2b3346a7c5
|
Added detection testing service results inCreate Remote Thread In Shell Application
|
2021-08-05 14:09:32 +00:00 |
|
|
Detection Testing Service
|
b109f5517e
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:08:17 +00:00 |
|
|
root
|
e0b24a1984
|
Added detection testing service results inSuspicious Rundll32 PluginInit
|
2021-08-05 14:08:16 +00:00 |
|
|
Detection Testing Service
|
4990119ca4
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 14:00:50 +00:00 |
|
|
root
|
7ac92524f1
|
Added detection testing service results inSuspicious IcedID Rundll32 Cmdline
|
2021-08-05 14:00:49 +00:00 |
|
|
Detection Testing Service
|
6d6f066d47
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:45:15 +00:00 |
|
|
root
|
de016c4686
|
Added detection testing service results inRundll32 Process Creating Exe Dll Files
|
2021-08-05 13:45:14 +00:00 |
|
|
Detection Testing Service
|
890546ac8b
|
Merge branch 'icedid' of https://github.com/splunk/security_content into icedid
|
2021-08-05 13:36:43 +00:00 |
|
|
root
|
0fde378b6f
|
Added detection testing service results inRundll32 DNSQuery
|
2021-08-05 13:36:42 +00:00 |
|
|
root
|
f9d9e07f7b
|
Added detection testing service results inRundll32 CreateRemoteThread In Browser
|
2021-08-05 13:34:25 +00:00 |
|
|
root
|
4d47c30783
|
Added detection testing service results inRundll32 Create Remote Thread To A Process
|
2021-08-05 13:10:18 +00:00 |
|
|
tccontre
|
ede0bd7675
|
icedid
|
2021-08-05 13:48:42 +02:00 |
|
|
tccontre
|
34377e6310
|
icedid
|
2021-08-05 13:42:29 +02:00 |
|
|
tccontre
|
6ccaf94f2f
|
icedid
|
2021-08-05 13:39:05 +02:00 |
|
|
tccontre
|
c7e8f72fa6
|
icedid
|
2021-08-05 13:36:35 +02:00 |
|
|
tccontre
|
8539d351da
|
icedid
|
2021-08-04 11:49:52 +02:00 |
|
|
peter-cg
|
f8fc79d4e1
|
Adding event_id extraction
|
2021-08-03 14:56:18 -05:00 |
|
|
Jose Enrique Hernandez
|
b8fea6311e
|
Delete powershell_encoded_command.yml
|
2021-08-03 14:56:17 -05:00 |
|
|
divious1
|
d7000e7608
|
added event_id to ssa detections
|
2021-08-03 14:56:17 -05:00 |
|
|
github-actions[bot]
|
a89a087b07
|
Branch was auto-updated.
|
2021-08-03 19:55:24 +00:00 |
|
|
peter
|
62e6c006b0
|
Merge pull request #1547 from splunk/ssa_TR-778
TR-778: SSA/BA/SAC stage->gstage
|
2021-08-03 14:55:08 -05:00 |
|
|
peter-cg
|
23b22e95d4
|
Event delimiting bugfix and some event upload error checking
|
2021-08-03 14:53:11 -05:00 |
|
|
tccontre
|
51b72ea3b3
|
icedid
|
2021-08-03 14:24:34 +02:00 |
|
|
tccontre
|
3f9c187e11
|
icedid
|
2021-08-03 13:00:06 +02:00 |
|
|
tccontre
|
5de991e461
|
icedid_mod_sig
|
2021-07-30 17:46:06 +02:00 |
|
|
tccontre
|
1722daa514
|
icedid_mod_sig
|
2021-07-30 17:33:42 +02:00 |
|
|
tccontre
|
2d13569fff
|
icedid story
|
2021-07-30 12:34:15 +02:00 |
|
|
research bot
|
df85ff33ad
|
updating docs and package bits [ci skip]
|
2021-07-29 21:15:45 +00:00 |
|