Commit Graph

  • d921fed431 Branch was auto-updated. pyth0n1c 2022-02-25 12:31:02 -08:00
  • ff13025620 Branch was auto-updated. pyth0n1c 2022-02-25 12:31:01 -08:00
  • 0e779f6491 Branch was auto-updated. pyth0n1c 2022-02-25 12:29:59 -08:00
  • 9e3e940f27 Branch was auto-updated. pyth0n1c 2022-02-25 12:29:58 -08:00
  • 4e370ea509 Merge pull request #2041 from splunk/UAC_Bypass Bhavin Patel 2022-02-25 12:29:40 -08:00
  • 176c339073 Updated FP Lou Stella 2022-02-25 14:22:53 -06:00
  • d3322283c3 Added risk_severity Lou Stella 2022-02-25 13:49:21 -06:00
  • 9f65b5d0d4 Updated required fields Lou Stella 2022-02-25 13:48:04 -06:00
  • 2c84bcd37d hermetic_wiper tccontre 2022-02-25 20:19:56 +01:00
  • 7b8f6b22e2 update search Xiao Lin 2022-02-25 10:03:01 -08:00
  • 4d05f75a0f Removed broken test Lou Stella 2022-02-25 10:48:30 -06:00
  • 760747cea2 Small update to body Lou Stella 2022-02-25 10:46:46 -06:00
  • ca2163ae8c Moved to Experimental Lou Stella 2022-02-25 10:40:46 -06:00
  • 7088f163a1 updated ci P4T12ICK 2022-02-25 16:37:26 +01:00
  • 3cd94faaf9 updated ci P4T12ICK 2022-02-25 16:21:08 +01:00
  • b7ad4e7c58 hermetic_wiper tccontre 2022-02-25 15:36:41 +01:00
  • 3255b012ef Update windows_raw_access_to_master_boot_record_drive.yml tccontre 2022-02-25 15:23:46 +01:00
  • 26f835751a integrated reporting P4T12ICK 2022-02-25 15:21:25 +01:00
  • 6bee5b4a60 hermetic_wiper tccontre 2022-02-25 15:00:42 +01:00
  • f14eec3bd7 cleaning up a mistakenly added file d1vious 2022-02-24 23:07:52 -05:00
  • 0d49d7fc55 Merge branch 'CityOfLog4Shells' of github.com:splunk/security_content into CityOfLog4Shells d1vious 2022-02-24 23:05:48 -05:00
  • 6a50f02ff4 working detection d1vious 2022-02-24 23:05:31 -05:00
  • 5edf481544 Adding more documentation to the detection Michael Hart 2022-02-24 22:59:21 -05:00
  • f7a8cb0cc5 Working on mhaag-spl 2022-02-24 20:22:13 -07:00
  • 393d25ad6a Branch was auto-updated. pyth0n1c 2022-02-24 14:56:45 -08:00
  • fb723a943d Branch was auto-updated. pyth0n1c 2022-02-24 14:56:43 -08:00
  • 97daa1af67 Branch was auto-updated. pyth0n1c 2022-02-24 14:56:38 -08:00
  • 548282abc2 Branch was auto-updated. pyth0n1c 2022-02-24 14:56:37 -08:00
  • fbe64d1e10 Branch was auto-updated. pyth0n1c 2022-02-24 14:56:35 -08:00
  • 39aa4270c5 Branch was auto-updated. pyth0n1c 2022-02-24 14:56:34 -08:00
  • 5a4196f097 Branch was auto-updated. pyth0n1c 2022-02-24 14:56:33 -08:00
  • 335f74f42d Merge pull request #1957 from splunk/nixpost3 Bhavin Patel 2022-02-24 14:56:11 -08:00
  • 55ffc28ae7 Update linux_post_exploitation.yml Bhavin Patel 2022-02-24 14:37:20 -08:00
  • caf0635885 typo patel-bhavin 2022-02-24 14:16:38 -08:00
  • 68dde34dc8 rename typo patel-bhavin 2022-02-24 14:14:13 -08:00
  • 73752624a8 updated story words Michael Haag 2022-02-24 14:54:46 -07:00
  • 4e6f5a6fe9 Branch was auto-updated. pyth0n1c 2022-02-24 12:59:11 -08:00
  • 8e6500d9be Branch was auto-updated. pyth0n1c 2022-02-24 12:59:10 -08:00
  • 95820f7596 Branch was auto-updated. pyth0n1c 2022-02-24 12:59:09 -08:00
  • 65ee692de2 Branch was auto-updated. pyth0n1c 2022-02-24 12:59:08 -08:00
  • 8a3368ca1d Branch was auto-updated. pyth0n1c 2022-02-24 12:59:07 -08:00
  • dea4839900 Branch was auto-updated. pyth0n1c 2022-02-24 12:59:03 -08:00
  • 2528a84d2e Branch was auto-updated. pyth0n1c 2022-02-24 12:59:01 -08:00
  • fb6c741f85 Branch was auto-updated. pyth0n1c 2022-02-24 12:59:00 -08:00
  • 480b72898a Merge pull request #2002 from splunk/TR_1550_Kerberos_Coverage_1 Bhavin Patel 2022-02-24 12:58:36 -08:00
  • d075ca883b Update rubeus_command_line_parameters.yml Bhavin Patel 2022-02-24 12:31:07 -08:00
  • 2c3f316756 Update suspcious_linux_discovery_commands.test.yml Bhavin Patel 2022-02-24 12:10:55 -08:00
  • edce8098df Merge branch 'TR_1550_Kerberos_Coverage_1' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_1 mvelazco 2022-02-24 14:46:33 -05:00
  • 15a77c78cc adding analytic story tag mvelazco 2022-02-24 14:46:20 -05:00
  • f813a09a07 Branch was auto-updated. pyth0n1c 2022-02-24 11:32:39 -08:00
  • ceb0f0ed21 Branch was auto-updated. pyth0n1c 2022-02-24 11:32:38 -08:00
  • 215a840812 Branch was auto-updated. pyth0n1c 2022-02-24 11:32:36 -08:00
  • 80699d8e1a Branch was auto-updated. pyth0n1c 2022-02-24 11:32:33 -08:00
  • a7a5704c25 Branch was auto-updated. pyth0n1c 2022-02-24 11:32:32 -08:00
  • 79efe8c76e Branch was auto-updated. pyth0n1c 2022-02-24 11:32:31 -08:00
  • 833bb8b275 Branch was auto-updated. pyth0n1c 2022-02-24 11:32:29 -08:00
  • c15f8fd21a Branch was auto-updated. pyth0n1c 2022-02-24 11:32:29 -08:00
  • f785ec358b Branch was auto-updated. pyth0n1c 2022-02-24 11:32:25 -08:00
  • 261b8e0bc2 Merge pull request #2027 from splunk/haagt1629 Bhavin Patel 2022-02-24 11:32:06 -08:00
  • a3fc0779ae tagging password spraying detections mvelazco 2022-02-24 12:40:36 -05:00
  • 8cf8fc40ac reporting integrated P4T12ICK 2022-02-24 16:18:56 +01:00
  • 8b32ec772f new_content integrated P4T12ICK 2022-02-24 12:35:20 +01:00
  • dbce711504 mshta child mhaag-spl 2022-02-23 21:53:31 -07:00
  • e67e0c92bb mshta inline mhaag-spl 2022-02-23 20:56:51 -07:00
  • 97120e2aeb Added back other WIP detection Lou Stella 2022-02-23 19:30:57 -06:00
  • be19bf61b9 fixed like statement Lou Stella 2022-02-23 18:26:26 -06:00
  • 9cf8199444 update again Lou Stella 2022-02-23 18:18:40 -06:00
  • aa03cc011a updates Lou Stella 2022-02-23 18:16:40 -06:00
  • 179d3e8eb5 initial commit Lou Stella 2022-02-23 17:33:46 -06:00
  • c9654f36cf rundll32 inline mhaag-spl 2022-02-23 15:23:30 -07:00
  • a658de3e25 MSHTA URl mhaag-spl 2022-02-23 15:03:51 -07:00
  • 1bddc5433a analytic story Michael Haag 2022-02-23 14:18:24 -07:00
  • 0d10d39302 Branch was auto-updated. pyth0n1c 2022-02-23 13:14:35 -08:00
  • 46b5b497e7 Branch was auto-updated. pyth0n1c 2022-02-23 13:14:34 -08:00
  • 5da9b2c32e Branch was auto-updated. pyth0n1c 2022-02-23 13:14:31 -08:00
  • 39c53dee1d Branch was auto-updated. pyth0n1c 2022-02-23 13:14:29 -08:00
  • 871463f27c Branch was auto-updated. pyth0n1c 2022-02-23 13:14:27 -08:00
  • 8569d61b91 Branch was auto-updated. pyth0n1c 2022-02-23 13:14:26 -08:00
  • 5d7b95a5aa Branch was auto-updated. pyth0n1c 2022-02-23 13:14:25 -08:00
  • 5048f4c33a Branch was auto-updated. pyth0n1c 2022-02-23 13:14:24 -08:00
  • f67e025e0c Merge pull request #2031 from splunk/Diskshadow Michael Haag 2022-02-23 14:14:04 -07:00
  • c602fad067 Fixed datamodel name - removed submodel JIRA_47681_Fixes pyth0n1c 2022-02-23 13:02:25 -08:00
  • f789b97ecb Branch was auto-updated. pyth0n1c 2022-02-23 11:25:16 -08:00
  • e3c5d2310d Branch was auto-updated. pyth0n1c 2022-02-23 11:25:15 -08:00
  • ba02133f71 Branch was auto-updated. pyth0n1c 2022-02-23 11:25:14 -08:00
  • bdf87a0303 Branch was auto-updated. pyth0n1c 2022-02-23 11:25:10 -08:00
  • 378107bef5 Branch was auto-updated. pyth0n1c 2022-02-23 11:25:08 -08:00
  • c66e399c99 Branch was auto-updated. pyth0n1c 2022-02-23 11:25:07 -08:00
  • d0fbf55319 Branch was auto-updated. pyth0n1c 2022-02-23 11:25:03 -08:00
  • 31c3815b9b Branch was auto-updated. pyth0n1c 2022-02-23 11:25:02 -08:00
  • a90154c91a Branch was auto-updated. pyth0n1c 2022-02-23 11:25:01 -08:00
  • 267fd2d007 Merge pull request #2033 from splunk/pasc_fix trogdorsey 2022-02-23 13:24:39 -06:00
  • 9a0770e78f fixing source in test file mvelazco 2022-02-23 13:40:43 -05:00
  • fd78987f8c updating dataset url mvelazco 2022-02-23 13:23:53 -05:00
  • 42e4f1784c adding new detection for T1558.004 mvelazco 2022-02-23 13:02:23 -05:00
  • 1012679be3 working bits mhaag-spl 2022-02-23 10:48:09 -07:00
  • d90e9559ba logic issue mhaag-spl 2022-02-23 10:34:13 -07:00
  • 02684a0741 Fixed Powershell Bits mhaag-spl 2022-02-23 09:56:45 -07:00
  • 7855ed866a Merge branch 'TR_1550_Kerberos_Coverage_1' of github.com:splunk/security_content into TR_1550_Kerberos_Coverage_1 mvelazco 2022-02-23 11:24:06 -05:00
  • 18fe0a5050 adding new detection for T1558.004 mvelazco 2022-02-23 11:24:04 -05:00