Commit Graph

  • 3e1d23fd95 Merge branch 'develop' into name_changes David Dorsey 2021-01-22 10:26:16 -06:00
  • 4b76d9c308 language David Dorsey 2021-01-22 09:42:00 -06:00
  • 88c9469541 More language clean up David Dorsey 2021-01-22 09:37:51 -06:00
  • 26050fae29 More language clean up David Dorsey 2021-01-22 09:34:33 -06:00
  • b26af2d24d Branch was auto-updated. github-actions[bot] 2021-01-22 14:16:36 +00:00
  • 2ee53e66e7 Branch was auto-updated. github-actions[bot] 2021-01-22 14:16:35 +00:00
  • 99429907d8 Branch was auto-updated. github-actions[bot] 2021-01-22 14:16:33 +00:00
  • cc559e70f0 Branch was auto-updated. github-actions[bot] 2021-01-22 14:16:32 +00:00
  • d9414f1356 Branch was auto-updated. github-actions[bot] 2021-01-22 14:16:30 +00:00
  • 7dd359b4a2 Merge pull request #1124 from splunk/dependabot/pip/boto3-1.16.58 dependabot[bot] 2021-01-22 14:16:12 +00:00
  • b9a0403a7d Bump pyyaml from 5.4 to 5.4.1 dependabot[bot] 2021-01-22 14:10:19 +00:00
  • 2373d29a2b Bump azure-mgmt-compute from 18.0.0 to 18.1.0 dependabot[bot] 2021-01-22 14:10:16 +00:00
  • 3ea9f8255f Bump boto3 from 1.16.57 to 1.16.58 dependabot[bot] 2021-01-22 14:10:04 +00:00
  • 15bced98cd Merge pull request #1123 from splunk/dependabot/pip/botocore-1.19.58 dependabot[bot] 2021-01-22 14:08:58 +00:00
  • 6597f89950 Bump botocore from 1.19.57 to 1.19.58 dependabot[bot] 2021-01-22 14:03:02 +00:00
  • 0c07ebeb88 bug fix P4T12ICK 2021-01-22 13:01:09 +01:00
  • fd76342c94 Changed the language in some of the descriptions David Dorsey 2021-01-21 23:53:47 -06:00
  • c8fc855ccd rename mustang to ssa4aws bpatel 2021-01-21 14:31:23 -08:00
  • 35ff0b21cf Branch was auto-updated. github-actions[bot] 2021-01-21 22:26:23 +00:00
  • f53e9f7344 Branch was auto-updated. github-actions[bot] 2021-01-21 22:26:21 +00:00
  • 0a8a41d83e Branch was auto-updated. github-actions[bot] 2021-01-21 22:26:19 +00:00
  • 4e5d0c05ee Merge pull request #1096 from splunk/lookup_name_duplicate jzsplunk 2021-01-21 14:26:00 -08:00
  • 37da0fb227 Merge branch 'develop' into lookup_name_duplicate jzsplunk 2021-01-21 14:14:51 -08:00
  • 1d1fcfc7a7 Update suspicious_mshta_activity.yml mhaag-spl 2021-01-21 14:10:42 -07:00
  • 5708e3d999 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:41:56 -07:00
  • d84f20ab5a Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:32:41 -07:00
  • 77e720a1ad Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:21:46 -07:00
  • 9f549140c2 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:16:59 -07:00
  • 306b65a6bc Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:13:36 -07:00
  • 56031c3f3e Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:10:22 -07:00
  • 5271462bb4 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 13:00:30 -07:00
  • 2d0e9bb7a7 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 12:55:44 -07:00
  • 50be4077f3 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 12:53:47 -07:00
  • 17c64de9d6 Merge branch 'develop' into detection_testing_branch Bhavin Patel 2021-01-21 11:43:46 -08:00
  • 2e5c1bfa10 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 12:41:06 -07:00
  • 549fb5d197 minor text bpatel 2021-01-21 11:39:57 -08:00
  • eea72fdf44 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild mhaag-spl 2021-01-21 12:37:48 -07:00
  • 9dc0988a36 Update trusted_developer_utilities_proxy_execution_msbuild.yml mhaag-spl 2021-01-21 12:37:38 -07:00
  • 40e7295a08 Branch was auto-updated. github-actions[bot] 2021-01-21 19:34:16 +00:00
  • e874b32dd3 Branch was auto-updated. github-actions[bot] 2021-01-21 19:34:14 +00:00
  • b6b65ab7b4 Merge pull request #1120 from splunk/ransomeware_lookup Jose Enrique Hernandez 2021-01-21 14:33:56 -05:00
  • 802d15bed0 MSBuild story update mhaag-spl 2021-01-21 12:27:43 -07:00
  • f5e653a552 duplicate PR bpatel 2021-01-21 11:27:24 -08:00
  • deb8e2488b Branch was auto-updated. github-actions[bot] 2021-01-21 19:02:16 +00:00
  • b13b01452c Merge pull request #1087 from splunk/dependabot/pip/importlib-metadata-3.4.0 Jose Enrique Hernandez 2021-01-21 14:01:56 -05:00
  • ffa1a8de10 Merge branch 'develop' into dependabot/pip/importlib-metadata-3.4.0 Jose Enrique Hernandez 2021-01-21 12:54:08 -05:00
  • d79327153c Merge branch 'develop' into issue_1101 Jose Enrique Hernandez 2021-01-21 12:53:57 -05:00
  • 1c2db6ad24 Merge pull request #1117 from splunk/dependabot/pip/pyyaml-5.4 Jose Enrique Hernandez 2021-01-21 11:48:40 -05:00
  • 3ccfea4dcc Merge branch 'develop' into detection_testing_branch P4T12ICK 2021-01-21 16:07:41 +01:00
  • 369dab3488 minor bpatel 2021-01-20 17:32:03 -08:00
  • 0b7f46489a adding deployment file for Mustang bpatel 2021-01-20 16:40:33 -08:00
  • e02498dbf2 Merge branch 'develop' into issue_1101 bpatel 2021-01-20 15:39:49 -08:00
  • f7ae31682a adding product field in tags for mustang bpatel 2021-01-20 15:39:29 -08:00
  • 6697920c84 Added detection testing service results inDetect mshta spawn root 2021-01-20 22:31:06 +00:00
  • b60d75a587 renamed testing mhaag-spl 2021-01-20 14:46:45 -07:00
  • f3d274c0f8 ID changes mhaag-spl 2021-01-20 14:45:27 -07:00
  • 03ac6e1174 Suspicious mshta spawn mhaag-spl 2021-01-20 14:16:29 -07:00
  • b29378ff57 Merge branch 'develop' into msbuild Michael Haag 2021-01-20 14:09:16 -07:00
  • 492c70d6ba Update detect_mshta_renamed.yml mhaag-spl 2021-01-20 13:54:17 -07:00
  • c3197d003e mshta renamed mhaag-spl 2021-01-20 13:50:57 -07:00
  • 9205419f90 Update detect_mshta_inline_hta_execution.yml mhaag-spl 2021-01-20 13:16:33 -07:00
  • 676a51159e Update detect_mshta_inline_hta_execution.yml mhaag-spl 2021-01-20 12:53:19 -07:00
  • dfc9ac84c5 Update detect_mshta_inline_hta_execution.yml mhaag-spl 2021-01-20 12:48:28 -07:00
  • 5e516b427e Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild mhaag-spl 2021-01-20 12:44:24 -07:00
  • 5b0ff63278 rename mshta inline hta execution mhaag-spl 2021-01-20 12:44:21 -07:00
  • db1265ad84 Added detection testing service results inDetect mshta url in command line root 2021-01-20 19:24:25 +00:00
  • 1d11230510 MSHTA mhaag-spl 2021-01-20 12:00:25 -07:00
  • 4299138f97 Update detect_rundll32_inline_hta_execution.yml mhaag-spl 2021-01-20 11:43:42 -07:00
  • 267b33b9b4 Added detection testing service results inDetect rundll32 executing hta with inline protocols root 2021-01-20 18:13:10 +00:00
  • 753d2dc00f add custom badge for detection coverage P4T12ICK 2021-01-20 18:59:09 +01:00
  • ed6e40433c rundll32 inline hta mhaag-spl 2021-01-20 10:48:25 -07:00
  • fae32c8fd2 add custom badge for detection coverage P4T12ICK 2021-01-20 17:47:46 +01:00
  • cf290ce750 add custom badge for detection coverage P4T12ICK 2021-01-20 17:45:21 +01:00
  • 82f13f9f8d add custom badge for detection coverage P4T12ICK 2021-01-20 17:37:19 +01:00
  • a06538df87 add custom badge for detection coverage P4T12ICK 2021-01-20 17:35:01 +01:00
  • 0943ecdf0e add custom badge for detection coverage P4T12ICK 2021-01-20 17:15:45 +01:00
  • e2767bcae0 add custom badge for detection coverage P4T12ICK 2021-01-20 16:09:42 +01:00
  • 124f6bd191 add custom badge for detection coverage P4T12ICK 2021-01-20 15:34:18 +01:00
  • 893cb37eb8 add custom badge for detection coverage P4T12ICK 2021-01-20 15:27:05 +01:00
  • fce1c9a12f Branch was auto-updated. github-actions[bot] 2021-01-20 14:17:24 +00:00
  • 004a532de3 Branch was auto-updated. github-actions[bot] 2021-01-20 14:17:23 +00:00
  • cd31cb6a23 Merge pull request #1118 from splunk/dependabot/pip/botocore-1.19.57 dependabot[bot] 2021-01-20 14:17:01 +00:00
  • 225669b55c Bump botocore from 1.19.56 to 1.19.57 dependabot[bot] 2021-01-20 14:10:26 +00:00
  • fefa3038e2 Bump pyyaml from 5.3.1 to 5.4 dependabot[bot] 2021-01-20 14:10:16 +00:00
  • 9f927bbd6f Branch was auto-updated. github-actions[bot] 2021-01-20 14:09:47 +00:00
  • afe450b577 Merge pull request #1116 from splunk/dependabot/pip/boto3-1.16.57 dependabot[bot] 2021-01-20 14:09:26 +00:00
  • 955b7bc1af Merge branch 'develop' into dependabot/pip/importlib-resources-5.0.0 Jose Enrique Hernandez 2021-01-20 09:06:34 -05:00
  • fb549c1859 Bump boto3 from 1.16.56 to 1.16.57 dependabot[bot] 2021-01-20 14:03:54 +00:00
  • af17e44f9f test custom test coverage badge P4T12ICK 2021-01-20 14:48:48 +01:00
  • e12d1078e8 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-01-19 23:46:54 -08:00
  • bf919b37a5 Merge branch 'develop' into msbuild Michael Haag 2021-01-19 15:36:03 -07:00
  • 55d2921458 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild Detection Testing Service 2021-01-19 22:12:28 +00:00
  • edd77b709f Added detection testing service results inDetect microsoft.workflow.compiler.exe usage root 2021-01-19 22:12:26 +00:00
  • 5a22ce57f6 Added detection testing service results inDetect microsoft.workflow.compiler.exe rename root 2021-01-19 22:11:46 +00:00
  • 9514ec2d50 Update trusted_developer_utilities_proxy_execution.yml mhaag-spl 2021-01-19 14:48:31 -07:00
  • 8f5f82cb56 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild mhaag-spl 2021-01-19 14:45:04 -07:00
  • d6a9bf502f Microsoft Workflow Compiler mhaag-spl 2021-01-19 14:45:02 -07:00
  • 778c81b2d1 Merge branch 'msbuild' of https://github.com/splunk/security-content into msbuild Detection Testing Service 2021-01-19 21:42:58 +00:00
  • b355147e2b Added detection testing service results inDetect renamed msbuild execution root 2021-01-19 21:42:57 +00:00
  • f26d176b8c Added detection testing service results inDetect moved msbuild execution root 2021-01-19 21:37:47 +00:00