Commits

Commit history

1. Commits on Nov 25, 2021

   • Branch was auto-updated.

     patel-bhavin

     authored
     c778a2eView commit details

     Copy full SHA for c778a2e

     View code at this pointBrowse repository at this point

   • Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion

     

     Detection Testing Service

     committed
     6d8151dView commit details

     Copy full SHA for 6d8151d

     View code at this pointBrowse repository at this point

   • Added detection testing service results inPowershell Windows Defender Exclusion Commands

     

     root

     committed
     1b28033View commit details

     Copy full SHA for 1b28033

     View code at this pointBrowse repository at this point

   • Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion

     

     Detection Testing Service

     committed
     724101fView commit details

     Copy full SHA for 724101f

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWindows Defender Exclusion Registry Entry

     

     root

     committed
     4ed89e2View commit details

     Copy full SHA for 4ed89e2

     View code at this pointBrowse repository at this point

   • Added detection testing service results inAdd or Set Windows Defender Exclusion

     

     root

     committed
     b6bb18dView commit details

     Copy full SHA for b6bb18d

     View code at this pointBrowse repository at this point

   • remcos_evasion

     tccontre

     committed
     dfd210cView commit details

     Copy full SHA for dfd210c

     View code at this pointBrowse repository at this point

   • Branch was auto-updated.

     patel-bhavin

     authored
     6d291d2View commit details

     Copy full SHA for 6d291d2

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into ssa_anomalous_usage_of_7zip

     

     P4T12ICK

     committed
     40a8047View commit details

     Copy full SHA for 40a8047

     View code at this pointBrowse repository at this point

   • Branch was auto-updated.

     patel-bhavin

     authored
     a619c98View commit details

     Copy full SHA for a619c98

     View code at this pointBrowse repository at this point
2. Commits on Nov 24, 2021

   • Branch was auto-updated.

     patel-bhavin

     authored
     c57f06cView commit details

     Copy full SHA for c57f06c

     View code at this pointBrowse repository at this point

   • Branch was auto-updated.

     patel-bhavin

     authored
     fd77109View commit details

     Copy full SHA for fd77109

     View code at this pointBrowse repository at this point

   • Update wsmprovhost_exe_lolbas_execution_process_spawn.yml

     MHaggis

     authored
     144b697View commit details

     Copy full SHA for 144b697

     View code at this pointBrowse repository at this point

   • Update wmiprsve_exe_lolbas_execution_process_spawn.yml

     MHaggis

     authored
     097683fView commit details

     Copy full SHA for 097683f

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWindows Service Created Within Public Path

     

     root

     committed
     ba11110View commit details

     Copy full SHA for ba11110

     View code at this pointBrowse repository at this point

   • Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn

     

     root

     committed
     9f122d5View commit details

     Copy full SHA for 9f122d5

     View code at this pointBrowse repository at this point

   • update dataset location

     mvelazc0

     committed
     4291344View commit details

     Copy full SHA for 4291344

     View code at this pointBrowse repository at this point

   • ssa test ci cd

     

     P4T12ICK

     committed
     9310c27View commit details

     Copy full SHA for 9310c27

     View code at this pointBrowse repository at this point

   • ssa test ci cd

     

     P4T12ICK

     committed
     421aebbView commit details

     Copy full SHA for 421aebb

     View code at this pointBrowse repository at this point

   • Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3

     mvelazc0

     committed
     46aa673View commit details

     Copy full SHA for 46aa673

     View code at this pointBrowse repository at this point

   • updating logic and adding datasets

     mvelazc0

     committed
     33e9597View commit details

     Copy full SHA for 33e9597

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWsmprovhost.exe LOLBAS Execution Process Spawn

     

     root

     committed
     9e16557View commit details

     Copy full SHA for 9e16557

     View code at this pointBrowse repository at this point

   • Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3

     mvelazc0

     committed
     eba7f33View commit details

     Copy full SHA for eba7f33

     View code at this pointBrowse repository at this point

   • update datasets

     mvelazc0

     committed
     ad273d4View commit details

     Copy full SHA for ad273d4

     View code at this pointBrowse repository at this point

   • Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3

     

     Detection Testing Service

     committed
     25a60dfView commit details

     Copy full SHA for 25a60df

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWmiprsve.exe LOLBAS Execution Process Spawn

     

     root

     committed
     6c45a54View commit details

     Copy full SHA for 6c45a54

     View code at this pointBrowse repository at this point
3. Commits on Nov 23, 2021

   • Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3

     

     Detection Testing Service

     committed
     2c6ae76View commit details

     Copy full SHA for 2c6ae76

     View code at this pointBrowse repository at this point

   • Added detection testing service results inMmc.exe LOLBAS Execution Process Spawn

     

     root

     committed
     e7ad40aView commit details

     Copy full SHA for e7ad40a

     View code at this pointBrowse repository at this point

   • Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3

     mvelazc0

     committed
     2e86dedView commit details

     Copy full SHA for 2e86ded

     View code at this pointBrowse repository at this point

   • update dataset metadata

     mvelazc0

     committed
     c13de25View commit details

     Copy full SHA for c13de25

     View code at this pointBrowse repository at this point

   • Added detection testing service results inServices.exe LOLBAS Execution Process Spawn

     

     root

     committed
     37f4a32View commit details

     Copy full SHA for 37f4a32

     View code at this pointBrowse repository at this point

   • adding dataset fields

     mvelazc0

     committed
     c2fd0a4View commit details

     Copy full SHA for c2fd0a4

     View code at this pointBrowse repository at this point

   • Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3

     mvelazc0

     committed
     190c0cbView commit details

     Copy full SHA for 190c0cb

     View code at this pointBrowse repository at this point

   • update detections

     mvelazc0

     committed
     5211a97View commit details

     Copy full SHA for 5211a97

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWindows Service Created With Suspicious Service Path

     

     root

     committed
     c8c731eView commit details

     Copy full SHA for c8c731e

     View code at this pointBrowse repository at this point