Commit Graph

  • fd7b7b43d3 Merge pull request #1435 from splunk/den-haag Bhavin Patel 2021-06-23 12:54:15 -05:00
  • b276ecf8fb Update script_execution_via_wmi.yml Bhavin Patel 2021-06-23 12:41:34 -05:00
  • 285b2c5006 Update process_execution_via_wmi.yml Bhavin Patel 2021-06-23 11:57:28 -05:00
  • e728f6b661 ssa_d tccontre 2021-06-23 14:52:44 +02:00
  • 6bcea461e5 Merge branch 'ssa_det' of github.com:splunk/security_content into ssa_det tccontre 2021-06-23 14:48:04 +02:00
  • 580d73a178 ssa_p2 tccontre 2021-06-23 14:47:14 +02:00
  • 2f249722aa Delete ssa___deny_permission_using_cacls_utility.test.yml tccontre 2021-06-23 14:34:19 +02:00
  • a0029c5f44 Delete ssa___grant_permission_using_cacls_utility.test.yml tccontre 2021-06-23 14:34:10 +02:00
  • 950071d533 Delete ssa___modify_acls_permission_of_files_or_folders.test.yml tccontre 2021-06-23 14:33:59 +02:00
  • 99fceb5476 Delete ssa___wevtutil_usage_to_clear_logs.test.yml tccontre 2021-06-23 14:33:48 +02:00
  • b193abce66 Delete ssa___wevtutil_usage_to_disable_logs.test.yml tccontre 2021-06-23 14:33:41 +02:00
  • b168a6f9c1 Delete ssa___wevtutil_usage_to_disable_logs.yml tccontre 2021-06-23 14:33:25 +02:00
  • 5bf38e1228 Delete ssa___wevtutil_usage_to_clear_logs.yml tccontre 2021-06-23 14:33:17 +02:00
  • d3d7c7a52f Delete ssa___modify_acls_permission_of_files_or_folders.yml tccontre 2021-06-23 14:33:06 +02:00
  • 0464965902 Delete ssa___grant_permission_using_cacls_utility.yml tccontre 2021-06-23 14:32:57 +02:00
  • b72f19c000 Delete ssa___deny_permission_using_cacls_utility.yml tccontre 2021-06-23 14:32:43 +02:00
  • f8a4f7e508 ssa2 tccontre 2021-06-23 14:16:05 +02:00
  • a444832b1d ssa6 tccontre 2021-06-18 15:28:08 +02:00
  • c7361eca3f ssa5 tccontre 2021-06-18 13:46:01 +02:00
  • 96968c4538 ssa4 tccontre 2021-06-18 13:10:16 +02:00
  • 60f656915b ssa3 tccontre 2021-06-18 13:04:26 +02:00
  • f5d065ef9f ssa3 tccontre 2021-06-17 14:17:36 +02:00
  • 125c270d12 ssa2 tccontre 2021-06-16 17:11:08 +02:00
  • 400024cf79 ssa2 tccontre 2021-06-16 17:01:00 +02:00
  • 5cf864aad7 ssa tccontre 2021-06-16 16:19:55 +02:00
  • 0091660097 rttp3 tccontre 2021-06-23 13:03:31 +02:00
  • d45f494438 rttp3 tccontre 2021-06-23 12:58:56 +02:00
  • fd156a28bb r+ttp2 tccontre 2021-06-23 12:44:19 +02:00
  • 2cf1d164d5 ransom_ttp_p2 tccontre 2021-06-23 12:38:49 +02:00
  • 368ac1807b Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:17 +00:00
  • ddea72a2ee Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:16 +00:00
  • 81b916991d Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:16 +00:00
  • d5533ca607 Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:15 +00:00
  • 3c45149736 Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:14 +00:00
  • ab9bf6ee37 Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:13 +00:00
  • 467032107d Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:12 +00:00
  • c72e356b07 Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:11 +00:00
  • 320d3b2e8e Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:10 +00:00
  • 5ac7859049 Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:09 +00:00
  • b777334cfb Branch was auto-updated. github-actions[bot] 2021-06-22 21:32:08 +00:00
  • 5e8318af65 Merge pull request #1453 from splunk/TR-745_refactor Michael Haag 2021-06-22 15:31:55 -06:00
  • f164626ac8 Updated Windows event log cleared mhaag-spl 2021-06-22 14:59:47 -06:00
  • 192c2159f8 Added detection testing service results inSuspicious Event Log Service Behavior root 2021-06-22 20:45:30 +00:00
  • 15a86efb80 Update suspicious_event_log_service_behavior.yml mhaag-spl 2021-06-22 14:24:22 -06:00
  • 41f3269fd6 Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:07 +00:00
  • 62760a9adb Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:06 +00:00
  • 8fef77f716 Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:05 +00:00
  • 808fc5f675 Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:03 +00:00
  • 0ef8008237 Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:01 +00:00
  • 4365e5cd64 Branch was auto-updated. github-actions[bot] 2021-06-22 20:01:00 +00:00
  • 2f6e42e005 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:59 +00:00
  • a880b5c101 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:58 +00:00
  • de29411e99 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:56 +00:00
  • e03fde8770 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:55 +00:00
  • 08fc7c5688 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:54 +00:00
  • 30e4b35d56 Branch was auto-updated. github-actions[bot] 2021-06-22 20:00:53 +00:00
  • 960a398f80 Merge pull request #1446 from splunk/deprecation_of_detections mvelazco 2021-06-22 16:00:35 -04:00
  • 8c150335fd readding mitre lookup it was a mistake I left in here divious1 2021-06-22 15:56:14 -04:00
  • 6efe49882f added attacker logic divious1 2021-06-22 14:21:25 -04:00
  • 1dc74c1b93 Really actually fixed the merge conflict David Dorsey 2021-06-22 11:08:10 -05:00
  • d654023e78 Merge branch 'develop' into ssa_fixes_for_jud David Dorsey 2021-06-22 10:42:46 -05:00
  • 535875fe09 Fixed bug as ID'd by TR-724 David Dorsey 2021-06-22 10:36:06 -05:00
  • 208fb06daa Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:42 +00:00
  • 193e8b1f50 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:41 +00:00
  • 42611adb84 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:40 +00:00
  • 359e9e861e Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:39 +00:00
  • da3ac94544 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:39 +00:00
  • 6d949a2860 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:38 +00:00
  • edba7a57fa Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:37 +00:00
  • 1d80a51cff Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:36 +00:00
  • c96ed3cee1 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:35 +00:00
  • 05c441a480 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:33 +00:00
  • 053ed1d97a Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:32 +00:00
  • 14980f46b5 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:32 +00:00
  • 5aa5aa3347 Branch was auto-updated. github-actions[bot] 2021-06-22 14:26:31 +00:00
  • 8e6733e922 Merge pull request #1454 from splunk/ssa_remove_old_lolbas peter 2021-06-22 09:26:09 -05:00
  • eeddaf1200 Removing old, deprecated version of the parent-child-lolbas detection peter-cg 2021-06-22 09:23:48 -05:00
  • 4b81f003a9 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:43 +00:00
  • 498de21e6c Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:42 +00:00
  • 0304f6dda9 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:41 +00:00
  • ddaef35ab4 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:40 +00:00
  • d8e9ff2d0e Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:39 +00:00
  • 9b1245d892 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:38 +00:00
  • 04121bb155 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:37 +00:00
  • 70319a9ad3 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:36 +00:00
  • b53edbf0a2 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:35 +00:00
  • 7f8ef8904d Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:34 +00:00
  • 733c071bb1 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:34 +00:00
  • ccbf877355 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:33 +00:00
  • 35ac3c38a1 Branch was auto-updated. github-actions[bot] 2021-06-22 02:30:32 +00:00
  • 3008438d10 Merge pull request #1447 from splunk/TR-724_fixing_bodies_error peter 2021-06-21 21:30:15 -05:00
  • 4166bb3104 Update windows_event_log_cleared.yml mhaag-spl 2021-06-21 16:15:10 -06:00
  • b7e73f5f60 quick updates mhaag-spl 2021-06-21 16:14:31 -06:00
  • ee1362204b Merge branch 'TR-745_refactor' of github.com:splunk/security_content into TR-745_refactor mvelazco 2021-06-21 17:54:47 -04:00
  • 19ea75d969 adding references mvelazco 2021-06-21 17:50:09 -04:00
  • b3d2ddba58 Minor fixes mhaag-spl 2021-06-21 15:47:47 -06:00
  • e4f5a3894d fixing errors mvelazco 2021-06-21 17:10:54 -04:00
  • 8d0b0caa91 Update suspicious_event_log_service_behavior.yml mvelazco 2021-06-21 16:45:52 -04:00
  • 1b7f966a84 re-factoring windows event log cleared detections mvelazco 2021-06-21 16:40:59 -04:00
  • fcf426e866 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-06-21 13:06:55 -07:00