13588 Commits

Author SHA1 Message Date
Bhavin Patel 5ee1f5b7f0 Merge pull request #1974 from splunk/ssa_dist
building SSA package
v3.34.1
2022-01-31 11:53:19 -08:00
patel-bhavin c43646a827 building SSA package 2022-01-31 11:47:41 -08:00
Bhavin Patel ff7f0dfad8 Merge pull request #1966 from splunk/reg_yml_analytics_updates_3
reg_yml_analytics_updates_3
2022-01-31 11:44:23 -08:00
pyth0n1c 59952091e3 Branch was auto-updated. 2022-01-31 11:29:54 -08:00
Bhavin Patel 43a1e7269c Merge pull request #1963 from splunk/reg_yml_analytics_updates_2
reg_yml_analytics_updates_2
2022-01-31 11:29:33 -08:00
pyth0n1c 99ad78a9a8 Branch was auto-updated. 2022-01-31 11:24:12 -08:00
pyth0n1c 1144b3ce63 Branch was auto-updated. 2022-01-31 11:24:11 -08:00
Bhavin Patel 3cf35d037b Merge pull request #1958 from splunk/reg_yml_analytics_updates
reg_yml_analytics_updates
2022-01-31 11:23:43 -08:00
pyth0n1c f0c0612c0c Branch was auto-updated. 2022-01-31 11:17:35 -08:00
pyth0n1c b155ae76f1 Branch was auto-updated. 2022-01-31 11:17:34 -08:00
pyth0n1c 0a5a930d9e Branch was auto-updated. 2022-01-31 11:17:33 -08:00
Bhavin Patel 0cd3274889 Merge pull request #1968 from thejud/add_required_tags
Add empty cist20 and nist tags to meet validation
2022-01-31 11:17:12 -08:00
Bhavin Patel 5eaad1d88b Merge branch 'develop' into reg_yml_analytics_updates 2022-01-31 11:07:41 -08:00
Jud Dagnall ff8cdbc089 Add empty cist20 and nist tags to meet validation 2022-01-28 18:51:51 -08:00
pyth0n1c 091a6c0864 Branch was auto-updated. 2022-01-28 13:28:20 -08:00
pyth0n1c f048b156b8 Branch was auto-updated. 2022-01-28 13:28:19 -08:00
Bhavin Patel 14c145c133 Merge pull request #1953 from splunk/potentially_malicious_code_on_commandline
Potentially malicious code on commandline
2022-01-28 13:27:59 -08:00
Michael Hart 0911746b03 Adding more detail to the description on how scoring works 2022-01-28 16:08:25 -05:00
Michael Haag c5db61e52d Quick fix 2022-01-28 12:49:03 -07:00
tccontre bea2197612 Update disabling_defender_services.yml 2022-01-28 18:05:34 +01:00
tccontre 2e9afadffa Update disabling_defender_services.yml 2022-01-28 11:46:49 +01:00
tccontre 648a9b7971 Update disabling_controlpanel.yml 2022-01-28 11:44:01 +01:00
tccontre 05a002fffa Update disabling_cmd_application.yml 2022-01-28 11:43:24 +01:00
tccontre d409e0483f Update disable_windows_smartscreen_protection.yml 2022-01-28 11:42:02 +01:00
tccontre 4bf30817d1 Update disable_windows_app_hotkeys.yml 2022-01-28 11:36:03 +01:00
tccontre 46f2aeddfb Update allow_inbound_traffic_by_firewall_rule_registry.yml 2022-01-28 11:04:23 +01:00
tccontre 76333b3b9a Update hide_user_account_from_sign_in_screen.yml 2022-01-28 10:57:15 +01:00
tccontre 246d990aad Update eventvwr_uac_bypass.yml 2022-01-28 10:56:54 +01:00
tccontre 93fff15d4f Update etw_registry_disabled.yml 2022-01-28 10:56:29 +01:00
tccontre f0c7fed9cb Update enable_wdigest_uselogoncredential_registry.yml 2022-01-28 10:56:15 +01:00
tccontre 4e004a6731 Update enable_rdp_in_other_port_number.yml 2022-01-28 10:56:01 +01:00
tccontre 63d4b1d8a0 Update disabling_task_manager.yml 2022-01-28 10:55:47 +01:00
tccontre 62e6607f6d Update disabling_systemrestore_in_registry.yml 2022-01-28 10:55:33 +01:00
tccontre e2fcbaf8a1 Update disabling_norun_windows_app.yml 2022-01-28 10:55:20 +01:00
tccontre 2fde5a7c08 Update disabling_folderoptions_windows_feature.yml 2022-01-28 10:55:06 +01:00
tccontre 4fe7983931 Update disabling_defender_services.yml 2022-01-28 10:54:53 +01:00
tccontre 585ef9de39 reg_yml_analytics_updates_3 2022-01-28 10:00:46 +01:00
pyth0n1c 9f24af21e3 Branch was auto-updated. 2022-01-27 14:55:48 -08:00
Bhavin Patel 3efcb99124 Merge pull request #1875 from splunk/ssa_multilogin
Anomalous usage of account credentials
2022-01-27 14:55:25 -08:00
pyth0n1c b331d100ec Branch was auto-updated. 2022-01-27 14:51:56 -08:00
Bhavin Patel 7fd71050fe Merge pull request #1878 from splunk/ssa_1
Disable Defender AntiVirus Registry- SSA
2022-01-27 14:51:23 -08:00
pyth0n1c 3d05f3f566 Branch was auto-updated. 2022-01-27 14:11:43 -08:00
pyth0n1c 2f00808797 Branch was auto-updated. 2022-01-27 14:11:40 -08:00
Bhavin Patel 1975ff75a2 Merge pull request #1900 from splunk/ssa_info_sabotage
new_ssa_ifo_sabotage
2022-01-27 14:11:19 -08:00
pyth0n1c 501e4b8ed3 Branch was auto-updated. 2022-01-27 13:40:48 -08:00
pyth0n1c 22f959a762 Branch was auto-updated. 2022-01-27 13:40:46 -08:00
Bhavin Patel e96516be57 Merge pull request #1965 from splunk/haagupdate
Cred Dump Update
2022-01-27 13:40:27 -08:00
mhaag-spl 7d9e146f76 Cred Dump Update
Based on feedback, updating analytic.
2022-01-27 13:17:30 -07:00
pyth0n1c 8078323a91 Branch was auto-updated. 2022-01-27 12:06:13 -08:00
pyth0n1c 47b5574f49 Branch was auto-updated. 2022-01-27 12:06:02 -08:00