research bot b622c65def updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

..

acidrain.md

updating docs and package bits [ci skip]

2022-04-14 22:03:48 +00:00

active_directory_discovery.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

active_directory_kerberos_attacks.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

active_directory_lateral_movement.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

active_directory_password_spraying.md

adding datasources to docgen

2022-03-22 21:43:34 -04:00

apache_struts_vulnerability.md

Refactored security content

2022-03-10 10:27:29 +01:00

asset_tracking.md

Refactored security content

2022-03-10 10:27:29 +01:00

atlassian_confluence_server_and_data_center_cve-2022-26134.md

updating docs and package bits [ci skip]

2022-06-06 21:13:55 +00:00

aws_cross_account_activity.md

Refactored security content

2022-03-10 10:27:29 +01:00

aws_cryptomining.md

Refactored security content

2022-03-10 10:27:29 +01:00

aws_defense_evasion.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

aws_iam_privilege_escalation.md

Refactored security content

2022-03-10 10:27:29 +01:00

aws_network_acl_activity.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

aws_privilege_escalation.md

added analytic stories, cleaned up view a bit

2021-09-12 20:39:15 -04:00

aws_security_hub_alerts.md

Refactored security content

2022-03-10 10:27:29 +01:00

aws_suspicious_provisioning_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

aws_user_monitoring.md

Refactored security content

2022-03-10 10:27:29 +01:00

azorult.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

azure_active_directory_account_takeover.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

baron_samedit_cve-2021-3156.md

Refactored security content

2022-03-10 10:27:29 +01:00

bits_jobs.md

Refactored security content

2022-03-10 10:27:29 +01:00

blackmatter_ransomware.md

Refactored security content

2022-03-10 10:27:29 +01:00

brand_monitoring.md

Refactored security content

2022-03-10 10:27:29 +01:00

caddy_wiper.md

updating docs

2022-03-28 11:42:43 -04:00

clop_ransomware.md

Refactored security content

2022-03-10 10:27:29 +01:00

cloud_cryptomining.md

Refactored security content

2022-03-10 10:27:29 +01:00

cloud_federated_credential_abuse.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

cobalt_strike.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

coldroot_macos_rat.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

collection_and_staging.md

Refactored security content

2022-03-10 10:27:29 +01:00

command_and_control.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

common_phishing_frameworks.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

container_implantation_monitoring_and_investigation.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

credential_dumping.md

updating docs and package bits [ci skip]

2022-06-22 17:56:19 +00:00

cyclopsblink.md

adding insider threat, fixing minor display bug

2022-05-19 21:19:35 -04:00

darkcrystal_rat.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

darkside_ransomware.md

Updating link from Fireeye to Mandiant since links changed due to acquisition.

2022-07-19 10:06:50 -07:00

data_destruction.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

data_exfiltration.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

data_protection.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

deobfuscate-decode_files_or_information.md

Refactored security content

2022-03-10 10:27:29 +01:00

detect_zerologon_attack.md

Refactored security content

2022-03-10 10:27:29 +01:00

dev_sec_ops.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

dhs_report_ta18-074a.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

disabling_security_tools.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

dns_amplification_attacks.md

Refactored security content

2022-03-10 10:27:29 +01:00

dns_hijacking.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

domain_trust_discovery.md

Refactored security content

2022-03-10 10:27:29 +01:00

double_zero_destructor.md

updating docs

2022-03-28 11:42:43 -04:00

dynamic_dns.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

emotet_malware__dhs_report_ta18-201a_.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

f5_big-ip_vulnerability_cve-2022-1388.md

adding insider threat, fixing minor display bug

2022-05-19 21:19:35 -04:00

f5_tmui_rce_cve-2020-5902.md

Refactored security content

2022-03-10 10:27:29 +01:00

fin7.md

updating docs and package bits [ci skip]

2022-03-29 17:56:49 +00:00

gcp_cross_account_activity.md

Refactored security content

2022-03-10 10:27:29 +01:00

hafnium_group.md

updating docs and package bits [ci skip]

2022-04-11 22:55:36 +00:00

hermetic_wiper.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

hidden_cobra_malware.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

host_redirection.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

icedid.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

industroyer2.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

information_sabotage.md

Refactored security content

2022-03-10 10:27:29 +01:00

ingress_tool_transfer.md

updating docs and package bits [ci skip]

2022-04-11 22:55:36 +00:00

insider_threat.md

updating docs and package bits [ci skip]

2022-06-22 17:56:19 +00:00

jboss_vulnerability.md

Refactored security content

2022-03-10 10:27:29 +01:00

kubernetes_scanning_activity.md

Refactored security content

2022-03-10 10:27:29 +01:00

kubernetes_sensitive_object_access_activity.md

Refactored security content

2022-03-10 10:27:29 +01:00

kubernetes_sensitive_role_activity.md

adding datasources to docgen

2022-03-22 21:43:34 -04:00

lateral_movement.md

updating docs and package bits [ci skip]

2021-12-02 18:50:01 +00:00

linux_living_off_the_land.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

linux_persistence_techniques.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

linux_post-exploitation.md

Refactored security content

2022-03-10 10:27:29 +01:00

linux_privilege_escalation.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

linux_rootkit.md

updating docs and package bits [ci skip]

2022-07-28 22:52:59 +00:00

living_off_the_land.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

local_privilege_escalation_with_krbrelayup.md

updating docs and package bits [ci skip]

2022-05-02 22:30:16 +00:00

log4shell_cve-2021-44228.md

updating docs and package bits [ci skip]

2022-04-11 22:55:36 +00:00

malicious_powershell.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

masquerading_-_rename_system_utilities.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

meterpreter.md

updating docs and package bits [ci skip]

2022-05-23 20:49:38 +00:00

microsoft_mshtml_remote_code_execution_cve-2021-40444.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

microsoft_support_diagnostic_tool_vulnerability_cve-2022-30190.md

updating docs and package bits [ci skip]

2022-06-06 21:13:55 +00:00

monitor_backup_solution.md

Refactored security content

2022-03-10 10:27:29 +01:00

monitor_for_unauthorized_software.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

monitor_for_updates.md

Refactored security content

2022-03-10 10:27:29 +01:00

netsh_abuse.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

network_discovery.md

Refactored security content

2022-03-10 10:27:29 +01:00

nobelium_group.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

office_365_detections.md

Refactored security content

2022-03-10 10:27:29 +01:00

orangeworm_attack_group.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

petitpotam_ntlm_relay_on_active_directory_certificate_services.md

Refactored security content

2022-03-10 10:27:29 +01:00

possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

printnightmare_cve-2021-34527.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

prohibited_traffic_allowed_or_protocol_mismatch.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

proxyshell.md

adding datasources to docgen

2022-03-22 21:43:34 -04:00

ransomware_cloud.md

Refactored security content

2022-03-10 10:27:29 +01:00

ransomware.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

remcos.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

revil_ransomware.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

router_and_infrastructure_security.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

ryuk_ransomware.md

Refactored security content

2022-03-10 10:27:29 +01:00

samaccountname_spoofing_and_domain_controller_impersonation.md

Refactored security content

2022-03-10 10:27:29 +01:00

samsam_ransomware.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

signed_binary_proxy_execution_installutil.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

silver_sparrow.md

Refactored security content

2022-03-10 10:27:29 +01:00

spearphishing_attachments.md

updating docs and package bits [ci skip]

2022-06-22 17:56:19 +00:00

spectre_and_meltdown_vulnerabilities.md

Refactored security content

2022-03-10 10:27:29 +01:00

splunk_enterprise_vulnerability_cve-2018-11409.md

Refactored security content

2022-03-10 10:27:29 +01:00

splunk_enterprise_vulnerability.md

Refactored security content

2022-03-10 10:27:29 +01:00

splunk_vulnerabilities.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

spring4shell_cve-2022-22965.md

updating docs and package bits [ci skip]

2022-04-11 22:55:36 +00:00

sql_injection.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_aws_ec2_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_aws_login_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_aws_s3_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_aws_traffic.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

suspicious_cloud_authentication_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_cloud_instance_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_cloud_provisioning_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_cloud_user_activities.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_command-line_executions.md

Added automaticc generation of finding report

2022-03-14 12:12:48 +01:00

suspicious_compiled_html_activity.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_dns_traffic.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_emails.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_gcp_storage_activities.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

suspicious_mshta_activity.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_okta_activity.md

Refactored security content

2022-03-10 10:27:29 +01:00

suspicious_regsvcs_regasm_activity.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_regsvr32_activity.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_rundll32_activity.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

suspicious_windows_registry_activities.md

updating docs and package bits [ci skip]

2022-03-29 17:56:49 +00:00

suspicious_wmi_use.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

suspicious_zoom_child_processes.md

Refactored security content

2022-03-10 10:27:29 +01:00

trickbot.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

trusted_developer_utilities_proxy_execution_msbuild.md

updating docs and package bits [ci skip]

2022-04-11 22:55:36 +00:00

trusted_developer_utilities_proxy_execution.md

Refactored security content

2022-03-10 10:27:29 +01:00

unusual_aws_ec2_modifications.md

Refactored security content

2022-03-10 10:27:29 +01:00

unusual_processes.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

use_of_cleartext_protocols.md

Refactored security content

2022-03-10 10:27:29 +01:00

vmware_server_side_injection_and_privilege_escalation.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

web_fraud_detection.md

Refactored security content

2022-03-10 10:27:29 +01:00

whispergate.md

adding a note about how the score is calculated

2022-05-27 20:33:28 -04:00

windows_defense_evasion_tactics.md

updating docs and package bits [ci skip]

2022-07-19 21:35:47 +00:00

windows_discovery_techniques.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_dns_sigred_cve-2020-1350.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_drivers.md

updating docs and package bits [ci skip]

2022-05-23 20:49:38 +00:00

windows_file_extension_and_association_abuse.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_log_manipulation.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_persistence_techniques.md

updating docs and package bits [ci skip]

2022-05-02 22:30:16 +00:00

windows_privilege_escalation.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_registry_abuse.md

updating docs and package bits [ci skip]

2022-06-22 17:56:19 +00:00

windows_service_abuse.md

Refactored security content

2022-03-10 10:27:29 +01:00

windows_system_binary_proxy_execution_msiexec.md

updating docs and package bits [ci skip]

2022-06-29 21:25:28 +00:00

xmrig.md

updating docs

2022-03-28 11:42:43 -04:00