16859 Commits

Author SHA1 Message Date
Bhavin Patel 7bf7bfe134 Merge pull request #2278 from splunk/TR-2219_AzureAD_Password_Srapying
Azure Active Directory Account Takeover Analytic Story
v3.46.0
2022-07-28 14:32:50 -07:00
patel-bhavin 114df09d78 meta updates 2022-07-28 14:18:45 -07:00
Bhavin Patel 1b645a499c Update azure_ad_successful_single_factor_authentication.yml 2022-07-28 14:12:18 -07:00
Bhavin Patel 95e47b7fd4 Update azure_ad_unusual_number_of_failed_authentications_from_ip.yml 2022-07-28 14:11:40 -07:00
Bhavin Patel 22f3d9bfee Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:09:17 -07:00
Bhavin Patel 07290ffeb7 Update azure_ad_successful_powershell_authentication.yml 2022-07-28 14:08:32 -07:00
Bhavin Patel 42241b1b2e Update azure_ad_multiple_users_failing_to_authenticate_from_ip.yml 2022-07-28 14:07:47 -07:00
Bhavin Patel 72d0a37a12 Update azure_ad_authentication_failed_during_mfa_challenge.yml 2022-07-28 14:05:57 -07:00
Bhavin Patel f22813da22 Update azure_active_directory_high_risk_sign_in.yml 2022-07-28 14:05:14 -07:00
pyth0n1c faf01969d7 Branch was auto-updated. 2022-07-28 13:50:30 -07:00
Bhavin Patel 21278f8d68 Merge pull request #2305 from splunk/dcrat-analytics2
dcrat-analytics2
2022-07-28 13:50:05 -07:00
pyth0n1c d963ff033c Branch was auto-updated. 2022-07-28 13:47:24 -07:00
pyth0n1c b3c8645b06 Branch was auto-updated. 2022-07-28 13:47:21 -07:00
Bhavin Patel 19dfced28f Merge pull request #2301 from splunk/haagonymous
Haagnux
2022-07-28 13:47:00 -07:00
Bhavin Patel f2731454b1 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 13:30:37 -07:00
Bhavin Patel 979dd80466 Update windows_system_shutdown_commandline.yml 2022-07-28 13:28:00 -07:00
Bhavin Patel d71ddb7e26 Update windows_system_reboot_commandline.yml 2022-07-28 13:26:54 -07:00
Bhavin Patel c0427508a9 Update windows_command_shell_dcrat_forkbomb_payload.yml 2022-07-28 13:25:36 -07:00
Bhavin Patel 8f78e18334 Update windows_system_logoff_commandline.yml 2022-07-28 13:24:39 -07:00
Bhavin Patel 1498d090fe Update windows_system_reboot_commandline.yml 2022-07-28 13:23:33 -07:00
Bhavin Patel b2d1bdb62e Update windows_system_shutdown_commandline.yml 2022-07-28 13:23:07 -07:00
pyth0n1c 319530efa2 Branch was auto-updated. 2022-07-28 13:11:04 -07:00
pyth0n1c 53fb29f36e Branch was auto-updated. 2022-07-28 13:11:00 -07:00
pyth0n1c e35f6dc30a Branch was auto-updated. 2022-07-28 13:10:57 -07:00
Bhavin Patel 099a7d029a Merge pull request #2293 from splunk/TR-2222_AWS_defense_evasion_story
Tr 2222 aws defense evasion story
2022-07-28 13:10:40 -07:00
Michael Haag 508424da99 Updates 2022-07-28 12:07:05 -06:00
pyth0n1c 6c0c4f75ca Branch was auto-updated. 2022-07-28 10:37:48 -07:00
pyth0n1c 1e03d0fddf Branch was auto-updated. 2022-07-28 10:37:47 -07:00
pyth0n1c d14bb84a81 Branch was auto-updated. 2022-07-28 10:37:44 -07:00
pyth0n1c 1bad5cc933 Branch was auto-updated. 2022-07-28 10:37:43 -07:00
Bhavin Patel 32b7d880eb Merge pull request #2298 from splunk/fix-git-issue-req
fix-git-issue-req
2022-07-28 10:37:26 -07:00
Michael Haag 15147d6aa7 clipboard 2022-07-28 11:27:19 -06:00
tccontre 972bd7b176 Update windows_system_logoff_commandline.yml 2022-07-28 16:12:20 +02:00
tccontre c9611980c2 Update windows_system_time_discovery_w32tm_delay.yml 2022-07-28 15:31:45 +02:00
tccontre 12ab56093b Merge branch 'dcrat-analytics2' of github.com:splunk/security_content into dcrat-analytics2 2022-07-28 15:29:44 +02:00
tccontre e99ab33a15 dcrat-analytics2 2022-07-28 15:29:25 +02:00
pyth0n1c 2f684c5680 Branch was auto-updated. 2022-07-28 06:13:23 -07:00
pyth0n1c cc74cea07f Branch was auto-updated. 2022-07-28 06:13:22 -07:00
pyth0n1c 17f4c812d5 Branch was auto-updated. 2022-07-28 06:13:20 -07:00
pyth0n1c ebc9de0c2f Branch was auto-updated. 2022-07-28 06:13:19 -07:00
pyth0n1c c12e0b636d Branch was auto-updated. 2022-07-28 06:13:18 -07:00
Jose Enrique Hernandez 84352e2511 Delete CNAME 2022-07-28 09:12:54 -04:00
tccontre 521fedf58a dcrat-analytics2 2022-07-28 10:11:52 +02:00
Michael Haag 330f8e74e0 Update linux_persistence_and_privilege_escalation_risk_behavior.yml 2022-07-27 17:39:34 -06:00
Michael Haag 79f7fdd204 ssh and updated correlation 2022-07-27 16:25:56 -06:00
Michael Haag 6374fc8bf5 Update linux_obfuscated_files_or_information_base64_decode.yml 2022-07-27 15:38:25 -06:00
Michael Haag 55bc63720d auth key 2022-07-27 15:30:48 -06:00
Michael Haag f3ca7540f4 Update linux_decode_base64_to_shell.yml 2022-07-27 15:19:24 -06:00
Michael Haag 4c04be8f8a linux base64 decode 2022-07-27 15:08:05 -06:00
pyth0n1c 661dd7c658 Branch was auto-updated. 2022-07-27 13:16:42 -07:00