Commit Graph

  • 767f562d58 rns_notes tccontre 2021-05-17 10:50:49 +02:00
  • 0f2607f04c Merge branch 'xmrig' of github.com:splunk/security_content into xmrig tcontreras 2021-05-17 10:01:09 +02:00
  • 3d3ff91c2b removed tcontreras 2021-05-17 10:00:36 +02:00
  • 5aeeb51d5b Delete powershell.yml tccontre 2021-05-17 09:51:28 +02:00
  • e72000cca2 Delete ransomware_notes_bulk_creation.yml tccontre 2021-05-17 09:50:43 +02:00
  • e15810de9b Delete delete_shadowcopy_with_powershell.yml tccontre 2021-05-17 09:49:40 +02:00
  • 2bad2f8635 Delete delete_shadowcopy_with_powershell.test.yml tccontre 2021-05-17 09:48:56 +02:00
  • 3adb47900a Merge branch 'develop' into TR-605-dll-detections jzsplunk 2021-05-16 23:13:07 -07:00
  • 0adea762fc Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-05-16 21:54:20 -07:00
  • c89adcba8c remove_rel1 tcontreras 2021-05-14 10:06:16 +02:00
  • e80bc45423 updating docs and package bits [ci skip] research bot 2021-05-13 22:09:29 +00:00
  • 41e4dfa659 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-05-13 14:47:37 -07:00
  • 3ccb1368a8 Branch was auto-updated. github-actions[bot] 2021-05-13 21:41:03 +00:00
  • 98d7d7d29c Branch was auto-updated. github-actions[bot] 2021-05-13 21:41:00 +00:00
  • f63a6e9d20 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:59 +00:00
  • 33ad8f804c Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:58 +00:00
  • 753083b7b8 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:56 +00:00
  • a729969172 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:55 +00:00
  • aa5dae7047 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:54 +00:00
  • dffab1a807 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:52 +00:00
  • a7f169c489 Branch was auto-updated. github-actions[bot] 2021-05-13 21:40:49 +00:00
  • 2c1bc16640 Merge pull request #1383 from splunk/darkside v3.21.0 Bhavin Patel 2021-05-13 14:40:29 -07:00
  • a55a6bff0a delete test file bpatel 2021-05-13 14:26:55 -07:00
  • 90cae048e2 Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-13 14:22:16 -07:00
  • 888aae21d3 moving to experimental bpatel 2021-05-13 14:22:07 -07:00
  • 9a7ac4edf8 Update slui_spawning_a_process.yml Michael Haag 2021-05-13 14:44:05 -06:00
  • eac3adc300 Update slui_runas_elevated.yml Michael Haag 2021-05-13 14:43:12 -06:00
  • 2d0c62921c Update detect_renamed_rclone.yml Michael Haag 2021-05-13 14:41:54 -06:00
  • 1acad6953e Update detect_rclone_command_line_usage.yml Michael Haag 2021-05-13 14:40:25 -06:00
  • 7c15ac9730 Update detect_rclone_command_line_usage.yml Michael Haag 2021-05-13 14:39:55 -06:00
  • 2d22e600c8 Update delete_shadowcopy_with_powershell.yml Michael Haag 2021-05-13 14:39:11 -06:00
  • 9fed6af501 Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-13 13:36:54 -07:00
  • d003c79d2f search_formatting bpatel 2021-05-13 13:36:28 -07:00
  • 0a5f0acc65 Update cmlua_or_cmstplua_uac_bypass.yml Michael Haag 2021-05-13 14:33:34 -06:00
  • e81a3eb9c8 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside Detection Testing Service 2021-05-13 20:14:19 +00:00
  • 18ff60e231 Added detection testing service results inSLUI RunAs Elevated root 2021-05-13 20:14:18 +00:00
  • bab3434e54 Added detection testing service results inSLUI Spawning a Process root 2021-05-13 20:11:55 +00:00
  • dccb38e877 Update slui_spawning_a_process.yml mhaag-spl 2021-05-13 13:34:37 -06:00
  • 485a811663 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside Detection Testing Service 2021-05-13 19:15:49 +00:00
  • 8c175d5af3 Added detection testing service results inExtract SAM from Registry root 2021-05-13 19:15:48 +00:00
  • 07ee4b0b62 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside Detection Testing Service 2021-05-13 19:15:06 +00:00
  • 7b32d0f413 Added detection testing service results inDetect Renamed RClone root 2021-05-13 19:15:05 +00:00
  • 6b94433de7 Merge branch 'darkside' of https://github.com/splunk/security_content into darkside Detection Testing Service 2021-05-13 19:06:15 +00:00
  • 13af359b6b Added detection testing service results inDetect RClone Command-Line Usage root 2021-05-13 19:06:14 +00:00
  • b3dd86837d Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass root 2021-05-13 19:02:02 +00:00
  • 54a3f8e3a7 com tcontreras 2021-05-13 20:43:54 +02:00
  • 3f8f5aab30 conflicts bpatel 2021-05-13 11:39:51 -07:00
  • 2db1f87aff manifest errors bpatel 2021-05-13 11:38:40 -07:00
  • 03e516338f com_obj tcontreras 2021-05-13 20:35:56 +02:00
  • d631a7e2f2 fail tcontreras 2021-05-13 20:32:25 +02:00
  • fbe24284be Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-13 11:27:59 -07:00
  • 118ea316b7 com tcontreras 2021-05-13 20:24:04 +02:00
  • eaae607c12 com_obj2 tcontreras 2021-05-13 20:21:22 +02:00
  • 9116ae6cb2 Branch was auto-updated. github-actions[bot] 2021-05-13 18:17:05 +00:00
  • 8510546478 Branch was auto-updated. github-actions[bot] 2021-05-13 18:17:04 +00:00
  • 064dd58b57 Branch was auto-updated. github-actions[bot] 2021-05-13 18:17:02 +00:00
  • 4d82661dac Branch was auto-updated. github-actions[bot] 2021-05-13 18:17:01 +00:00
  • db9123a21a Branch was auto-updated. github-actions[bot] 2021-05-13 18:17:00 +00:00
  • c45b2d1743 Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:59 +00:00
  • 6bd7153831 Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:57 +00:00
  • cdbc566ecb Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:57 +00:00
  • d51778cbae Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:55 +00:00
  • 812e40f100 Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:53 +00:00
  • 82f9a5f69d Branch was auto-updated. github-actions[bot] 2021-05-13 18:16:52 +00:00
  • a33eb59bbd Merge pull request #1384 from splunk/TR-657 Bhavin Patel 2021-05-13 11:16:36 -07:00
  • e63e6c4cfb rclone mhaag-spl 2021-05-13 12:14:03 -06:00
  • f29b5e8d38 Fixed small bug in pipeline (two | | back to back) David Dorsey 2021-05-13 12:55:57 -05:00
  • a103ce14c4 Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-13 10:55:17 -07:00
  • 9a1bd49ca5 more mappings bpatel 2021-05-13 10:55:09 -07:00
  • 55d582c317 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:51 +00:00
  • 3f20f1a725 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:49 +00:00
  • af40afded1 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:48 +00:00
  • db9e7b054f Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:47 +00:00
  • 3a14a79900 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:44 +00:00
  • 737836e70f Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:43 +00:00
  • a664dde385 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:42 +00:00
  • e169f8bc61 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:40 +00:00
  • 64a5c3a334 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:34 +00:00
  • 659766fc1e Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:33 +00:00
  • 95c4e70787 Branch was auto-updated. github-actions[bot] 2021-05-13 17:54:31 +00:00
  • a0b9c4290d Merge pull request #1342 from splunk/password_spraying_TR-515 Jose Enrique Hernandez 2021-05-13 13:54:04 -04:00
  • 571781fc8e Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-13 10:50:36 -07:00
  • fdb96e514a mapping existing dettections bpatel 2021-05-13 10:50:29 -07:00
  • b600c1283b Update cmlua_or_cmstplua_uac_bypass.yml Michael Haag 2021-05-13 11:49:30 -06:00
  • 71b3e135df Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass root 2021-05-13 17:21:20 +00:00
  • c24f154dce com_obj tcontreras 2021-05-13 18:58:14 +02:00
  • 5ff8c6372c SLUI mhaag-spl 2021-05-13 06:52:59 -06:00
  • 4f9b8a2b1b test time bpatel 2021-05-12 14:53:27 -07:00
  • 1b5bf2a065 story namne bpatel 2021-05-12 14:52:06 -07:00
  • 545951b315 narrative bpatel 2021-05-12 14:06:53 -07:00
  • 743bbaf051 Merge branch 'darkside' of github.com:splunk/security_content into darkside bpatel 2021-05-12 13:50:15 -07:00
  • 03444a29e9 test file bpatel 2021-05-12 13:50:03 -07:00
  • 1992d8fe8b Update extract_sam_from_registry.yml mhaag-spl 2021-05-12 14:49:44 -06:00
  • f4f519f6aa Extract SAM from registry mhaag-spl 2021-05-12 14:45:55 -06:00
  • 09e6d43e52 Added Cobalt Named pIpe mhaag-spl 2021-05-12 14:22:01 -06:00
  • 4a840d4184 ericks detections from xmrig bpatel 2021-05-12 12:58:00 -07:00
  • 542f229457 story_file bpatel 2021-05-12 12:37:33 -07:00
  • d984670146 shadow1 tcontreras 2021-05-12 18:49:24 +02:00
  • 7bb8eb506c shadow tcontreras 2021-05-12 18:35:13 +02:00
  • ed333d33a8 Update multiple_users_failing_to_authenticate_from_host_using_kerberos.yml Michael Haag 2021-05-11 14:17:38 -06:00