Commit Graph

  • b88be5305c qakbot_2 tccontre 2022-10-25 10:35:36 +02:00
  • bdec923237 Update suspicious_reg_exe_process.yml Michael Haag 2022-10-24 10:09:53 -06:00
  • 0fd8ed68f5 Update wmi_recon_running_process_or_services.yml Michael Haag 2022-10-24 09:55:43 -06:00
  • 6ffeb8e82f qakbot_2 tccontre 2022-10-24 15:30:23 +02:00
  • eb4e1207ca Merge branch 'qakbot_2' of github.com:splunk/security_content into qakbot_2 tccontre 2022-10-24 15:14:58 +02:00
  • cc3c500841 qakbot_2 tccontre 2022-10-24 15:14:35 +02:00
  • 22cb51ddd3 Update windows_dll_side_loading_in_calc.yml tccontre 2022-10-24 15:05:41 +02:00
  • d749860e46 Update windows_dll_side_loading_in_calc.yml tccontre 2022-10-24 15:05:19 +02:00
  • 7fb9045533 qakbot_2 tccontre 2022-10-24 15:01:20 +02:00
  • 08b779a8d1 change hec config order no_docker pyth0n1c 2022-10-21 12:39:30 -07:00
  • a989b43613 another quick fix pyth0n1c 2022-10-21 11:59:51 -07:00
  • 0c7d9ba27f static password fix pyth0n1c 2022-10-21 11:56:46 -07:00
  • 066f50f9b9 more info on setup pyth0n1c 2022-10-21 11:42:25 -07:00
  • c5239bf367 typo 2 pyth0n1c 2022-10-21 11:36:24 -07:00
  • ddc0171958 fixed typo pyth0n1c 2022-10-21 11:36:01 -07:00
  • ab57825c81 some changes to just use a running splunk app on localhost instead of a docker container pyth0n1c 2022-10-21 11:33:04 -07:00
  • 7cef75c8d4 qakbot_2 tccontre 2022-10-21 11:35:47 +02:00
  • 66948df0b8 Update recon_using_wmi_class.yml tccontre 2022-10-21 11:33:40 +02:00
  • 1da68fe602 Update recon_using_wmi_class.yml tccontre 2022-10-21 11:32:48 +02:00
  • 17ae3f4a2c updating how to implement mvelazco 2022-10-20 17:35:27 -04:00
  • b524154e33 cleaning up BA lolbas detection to remove duplicate exe covered in other lolba detections recently released josehelps 2022-10-20 15:25:12 -04:00
  • 3845d1f17e Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:12 -07:00
  • 5bccfcd080 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:10 -07:00
  • 59804c6c96 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:09 -07:00
  • 2f768fd571 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:07 -07:00
  • 7c15f41b10 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:04 -07:00
  • 3457e69fed Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:03 -07:00
  • 47a78667b4 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:13:01 -07:00
  • 95ac9e9732 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:12:59 -07:00
  • e6e923e836 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:12:58 -07:00
  • 1bc75ba7f2 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:12:57 -07:00
  • b95bdba694 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-20 08:12:51 -07:00
  • 98c27b6825 Merge pull request #2420 from splunk/adding_co_author Jose Enrique Hernandez 2022-10-20 11:12:32 -04:00
  • 26b3c9fe96 adding author josehelps 2022-10-20 11:05:36 -04:00
  • a9fe894cb9 wip P4T12ICK 2022-10-20 16:35:05 +02:00
  • 03cb2bcf30 Merge branch 'security_content_4' of github.com:splunk/security_content into security_content_4 security_content_4 P4T12ICK 2022-10-20 16:28:18 +02:00
  • c9fea4121f WIP security content 4 P4T12ICK 2022-10-20 16:27:53 +02:00
  • 6ed13f5e27 qakbot_2 tccontre 2022-10-20 13:55:34 +02:00
  • 84de6978a0 qakbot_2 tccontre 2022-10-20 13:44:38 +02:00
  • 0c6193617f _time in the by clause patel-bhavin 2022-10-19 14:45:10 -07:00
  • e6dca59fc0 Fixed uuid issue David Dorsey 2022-10-19 11:19:51 -05:00
  • 97184f44f5 More yml issues. I'm rusty David Dorsey 2022-10-19 10:56:15 -05:00
  • a298033109 Fixed yml issue with baseline search David Dorsey 2022-10-19 10:37:31 -05:00
  • 1cc9c2dce0 update query Michael Haag 2022-10-19 08:30:54 -06:00
  • 1e963e553b yaml cleanup and references patel-bhavin 2022-10-18 18:07:50 -07:00
  • 9e26f53df4 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:24 -07:00
  • 2e65bd569c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:23 -07:00
  • 2e12ef59d5 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:22 -07:00
  • b248ec629b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:21 -07:00
  • cd6ead63ab Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:20 -07:00
  • 3bcf60c311 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:18 -07:00
  • 3122e53cb6 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:17 -07:00
  • 4924649d30 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:16 -07:00
  • 861c67dc55 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:15 -07:00
  • 25a9d736e3 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:57:14 -07:00
  • e1e1bf879b Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag research bot 2022-10-18 20:56:57 +00:00
  • 071297eeb4 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:19 -07:00
  • 4048588cba Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:18 -07:00
  • b2149b387c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:16 -07:00
  • 6896344545 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:15 -07:00
  • 5c6259efc9 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:14 -07:00
  • a74e684480 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:12 -07:00
  • d9d36c94dd Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:11 -07:00
  • 97b8786ce5 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:10 -07:00
  • c370a8bc9b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:08 -07:00
  • 2e1c861307 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 13:41:07 -07:00
  • e88784ed00 Merge pull request #2418 from splunk/10_ba_lolbas_plez v3.51.0 Bhavin Patel 2022-10-18 13:40:49 -07:00
  • 602b7b0a97 adding SSA generated files patel-bhavin 2022-10-18 13:29:18 -07:00
  • 5e3cc4f605 remove underscore from test file patel-bhavin 2022-10-18 13:14:20 -07:00
  • 300131dfdf Removing underscore from the name of a detection, which caused validate problems pyth0n1c 2022-10-18 12:27:07 -07:00
  • c905c85b47 Merge branch 'TR_2410_Domain_Controller_Attacks' of github.com:splunk/security_content into TR_2410_Domain_Controller_Attacks mvelazco 2022-10-18 15:19:53 -04:00
  • 002a411ad0 updating dc shadow detection mvelazco 2022-10-18 15:19:51 -04:00
  • 14266bf611 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:30 -07:00
  • e9e2c37d83 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:28 -07:00
  • 74b84f3a5a Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:26 -07:00
  • fc902feb81 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:24 -07:00
  • 7f069da767 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:20 -07:00
  • 86abcfa5ce Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:18 -07:00
  • 54aba47c50 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:16 -07:00
  • e7284cb580 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:14 -07:00
  • fcc2023fc0 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:12 -07:00
  • f16de4a535 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:09 -07:00
  • 795e4b0d47 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 12:05:07 -07:00
  • 7825ffa45c Merge pull request #2363 from splunk/detection_enrichment_project Bhavin Patel 2022-10-18 12:04:45 -07:00
  • ae66d556e0 removing extra detection josehelps 2022-10-18 14:56:03 -04:00
  • 34c6e25997 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:06 -07:00
  • 7afdfb634c Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:05 -07:00
  • eae0adbb51 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:05 -07:00
  • ac352d55bc Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:04 -07:00
  • bb8485fd83 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:03 -07:00
  • 3569b19595 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:01 -07:00
  • eb180b842b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:01 -07:00
  • ccc0d28f14 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:48:00 -07:00
  • 1ff1bd9193 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:47:58 -07:00
  • 66ff515d24 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:47:57 -07:00
  • 4d898f7039 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:47:56 -07:00
  • a08e4b925b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:47:55 -07:00
  • ae81ee6758 Merge pull request #2404 from splunk/aws_mfa Bhavin Patel 2022-10-18 11:47:38 -07:00
  • b9e15d6e4b Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:45 -07:00
  • 84a5e9fe22 Branch was auto-updated. srv-rr-gh-researchbt 2022-10-18 11:42:44 -07:00