Commit Graph

  • 35e9227139 more fixes mhaag-spl 2021-07-15 12:15:40 -06:00
  • 7bd3263382 Merge branch 'splunk:develop' into apger-content-v3 apger 2021-07-15 12:54:38 -05:00
  • 603fcb9f1e Merge branch 'splunk:develop' into apger-content-v4 apger 2021-07-15 12:52:27 -05:00
  • 00f9d2984b Update any_powershell_downloadstring.yml mhaag-spl 2021-07-15 10:22:39 -06:00
  • 14529379e9 updates mhaag-spl 2021-07-15 10:21:05 -06:00
  • 06d9389ca3 update attacker_tooolls metadata patel-bhavin 2021-07-15 11:17:16 -05:00
  • 1c699dce66 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:56 +00:00
  • 8815f51259 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:56 +00:00
  • 9365ffeff5 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:49 +00:00
  • fb5200b134 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:48 +00:00
  • dba7464449 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:47 +00:00
  • 49485e00df Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:47 +00:00
  • 6b9cf46bc6 Branch was auto-updated. github-actions[bot] 2021-07-15 15:54:40 +00:00
  • e76809ab0b Merge pull request #1523 from splunk/error-validate-fix Bhavin Patel 2021-07-15 10:54:23 -05:00
  • 1fc358eeb4 Validate.py mhaag-spl 2021-07-15 07:07:14 -06:00
  • 2b6e6f69d8 Update bits_job_persistence.yml mhaag-spl 2021-07-15 07:05:12 -06:00
  • 694509e7a4 Merge branch 'develop' into apger-content-v4 P4T12ICK 2021-07-15 15:01:11 +02:00
  • f6c3c443fc Merge branch 'develop' into apger-content-v3 P4T12ICK 2021-07-15 15:00:31 +02:00
  • 1245785b9e Merge branch 'develop' into cloud_rab2 P4T12ICK 2021-07-15 15:00:10 +02:00
  • 3d82142995 rba_task_update tccontre 2021-07-15 09:39:03 +02:00
  • 4f42b02fbc Update wsreset_uac_bypass.yml tccontre 2021-07-15 09:15:34 +02:00
  • 501783dc47 Update silentcleanup_uac_bypass.yml tccontre 2021-07-15 09:13:46 +02:00
  • 25ebb52909 Update sdclt_uac_bypass.yml tccontre 2021-07-15 09:13:24 +02:00
  • a5441b29d8 Update net_profiler_uac_bypass.yml tccontre 2021-07-15 09:12:58 +02:00
  • 31f28b1b9f fixes mhaag-spl 2021-07-14 20:18:38 -06:00
  • b37882f7e7 Apger's second round of detection content updates jim@apger.com 2021-07-14 20:58:54 -05:00
  • 1e97d81b2c minor patel-bhavin 2021-07-14 17:14:20 -05:00
  • a0c6733de2 rest of cloud detections patel-bhavin 2021-07-14 17:12:20 -05:00
  • 4d6ac65457 Update anomalous_usage_of_7zip.yml mhaag-spl 2021-07-14 15:55:16 -06:00
  • 03b3545baa Update allow_network_discovery_in_firewall.yml mhaag-spl 2021-07-14 15:54:34 -06:00
  • 2264241807 Update attempted_credential_dump_from_registry_via_reg_exe.yml mhaag-spl 2021-07-14 15:50:56 -06:00
  • d45910c75a Merge branch 'Risky' of https://github.com/splunk/security_content into Risky mhaag-spl 2021-07-14 15:43:39 -06:00
  • 44f7892c19 RBA done mhaag-spl 2021-07-14 15:43:38 -06:00
  • ae79918ffd error fix: patel-bhavin 2021-07-14 16:04:17 -05:00
  • 903e42875b next 6 patel-bhavin 2021-07-14 15:43:04 -05:00
  • d628b7e870 minor fix 2 mvelazco 2021-07-14 15:04:06 -04:00
  • adaa34da25 minor fixes mvelazco 2021-07-14 14:47:05 -04:00
  • 31496ca1b5 fixing variables on message mvelazco 2021-07-14 14:40:09 -04:00
  • 532929c26e Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:09 +00:00
  • 24b597f1a7 Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:07 +00:00
  • 35e323e60a Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:06 +00:00
  • 377686abe7 Branch was auto-updated. add_silver_bullet_to_prohibited github-actions[bot] 2021-07-14 16:46:05 +00:00
  • 2b97233f2a Branch was auto-updated. rba_task github-actions[bot] 2021-07-14 16:46:03 +00:00
  • 72ea718656 Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:02 +00:00
  • 9c7f46f292 Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:01 +00:00
  • 174b7d1202 Branch was auto-updated. github-actions[bot] 2021-07-14 16:46:00 +00:00
  • 69f1131dfe Merge pull request #1507 from splunk/attacker_tools Bhavin Patel 2021-07-14 11:45:43 -05:00
  • 31fd54ba02 Merge branch 'attacker_tools' of github.com:splunk/security_content into attacker_tools P4T12ICK 2021-07-14 17:06:04 +02:00
  • f4aa1d7d48 bug fix test file P4T12ICK 2021-07-14 17:05:49 +02:00
  • 37b678c30d Update wsreset_uac_bypass.yml tccontre 2021-07-14 17:00:59 +02:00
  • 8477b3e3a0 rba_task_2 tccontre 2021-07-14 16:35:10 +02:00
  • 019e9311f1 rba_task_2 tccontre 2021-07-14 16:33:48 +02:00
  • f75e5c75e2 fixes mhaag-spl 2021-07-14 08:31:05 -06:00
  • 1430b38fb8 Merge branch 'develop' into Risky Michael Haag 2021-07-14 07:49:31 -06:00
  • 065a1d22ab Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:23 +00:00
  • 7c4da4e9a6 Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:21 +00:00
  • 228d741773 Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:20 +00:00
  • af61e40ea7 Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:19 +00:00
  • 59a89ff95e Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:18 +00:00
  • cfefbad177 Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:14 +00:00
  • 6efb09dd12 Branch was auto-updated. github-actions[bot] 2021-07-14 13:42:13 +00:00
  • 3e21f4616b Merge pull request #1517 from splunk/detection_testing_fix P4T12ICK 2021-07-14 15:41:57 +02:00
  • fac27a643d Added detection testing service results inAttacker Tools On Endpoint root 2021-07-14 13:33:44 +00:00
  • c5942639cd new ci workflow P4T12ICK 2021-07-14 14:58:25 +02:00
  • ac5d507a73 Merge branch 'detection_testing_fix' of github.com:splunk/security_content into detection_testing_fix P4T12ICK 2021-07-14 14:36:38 +02:00
  • 61e5cbc981 new ci workflow P4T12ICK 2021-07-14 14:36:13 +02:00
  • 33d8df3885 Merge branch 'develop' into detection_testing_fix P4T12ICK 2021-07-14 14:35:17 +02:00
  • ea26c7c491 new ci workflow P4T12ICK 2021-07-14 14:34:34 +02:00
  • 551f3f7002 Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:35 +00:00
  • be14ace425 Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:34 +00:00
  • d1b1f41c35 Merge branch 'develop' into uac_bypass P4T12ICK 2021-07-14 13:04:28 +02:00
  • 760452a0cc Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:28 +00:00
  • f5441bb335 Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:27 +00:00
  • 2e31f2298a Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:24 +00:00
  • 8c615c1978 Branch was auto-updated. github-actions[bot] 2021-07-14 11:04:20 +00:00
  • f2aa2091ea Merge pull request #1516 from splunk/detection_testing_fix P4T12ICK 2021-07-14 13:04:03 +02:00
  • cae682c137 bug fix detection testing P4T12ICK 2021-07-14 11:55:15 +02:00
  • 1cc9a037dd bug fix detection testing P4T12ICK 2021-07-14 11:47:38 +02:00
  • a91762555e bug fix detection testing P4T12ICK 2021-07-14 11:45:33 +02:00
  • 9fc60355a1 Update permission_modification_using_takeown_app.yml tccontre 2021-07-14 10:33:50 +02:00
  • 463c27d20f Update sc_exe_manipulating_windows_services.yml tccontre 2021-07-14 10:25:49 +02:00
  • 4be7e99ddb Update shim_database_file_creation.yml tccontre 2021-07-14 10:23:53 +02:00
  • d7c8dc6fa7 Update schedule_task_with_rundll32_command_trigger.yml tccontre 2021-07-14 10:23:21 +02:00
  • 9fb0e1bded Update ryuk_wake_on_lan_command.yml tccontre 2021-07-14 10:23:00 +02:00
  • 1ac3332622 Update remote_process_instantiation_via_wmi.yml tccontre 2021-07-14 10:22:31 +02:00
  • 9ab3a3b402 Update recon_avproduct_through_pwh_or_wmi.yml tccontre 2021-07-14 10:21:56 +02:00
  • be0d7ef352 Update single_letter_process_on_endpoint.yml tccontre 2021-07-14 10:20:56 +02:00
  • 4f7c6ff84d Update process_kill_base_on_file_path.yml tccontre 2021-07-14 10:20:11 +02:00
  • be71919e60 Update prevent_automatic_repair_mode_using_bcdedit.yml tccontre 2021-07-14 10:19:24 +02:00
  • fe570f7f2f Update permission_modification_using_takeown_app.yml tccontre 2021-07-14 10:18:55 +02:00
  • 02c9da2e07 rba task tccontre 2021-07-14 10:13:42 +02:00
  • 9944856c3f updating docs and package bits [ci skip] research bot 2021-07-13 23:26:40 +00:00
  • e93be02eba Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:22 +00:00
  • 027b4e5c2d Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:21 +00:00
  • 9348545155 Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:20 +00:00
  • eb54d2db6f Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:20 +00:00
  • 3058034530 Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:16 +00:00
  • 8d4fd205a7 Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:15 +00:00
  • 6082861e88 Branch was auto-updated. github-actions[bot] 2021-07-13 22:59:14 +00:00
  • bae394108f Merge pull request #1514 from splunk/ci_tag_workflow v3.25.1 Jose Enrique Hernandez 2021-07-13 18:58:59 -04:00