Repository navigation

Darkside Ransomware - #1383

Merged

patel-bhavin merged 52 commits into

developfrom

darkside

May 13, 2021

Merged

Darkside Ransomware#1383
patel-bhavin merged 52 commits into
developfrom
darkside

Commits on May 12, 2021
- story_file
  patel-bhavin
  committed
  542f229
- ericks detections from xmrig
  patel-bhavin
  committed
  4a840d4
- Added Cobalt Named pIpe
  MHaggis
  committed
  09e6d43
- Extract SAM from registry
  MHaggis
  committed
  f4f519f
- Update extract_sam_from_registry.yml
  MHaggis
  committed
  1992d8f
- test file
  patel-bhavin
  committed
  03444a2
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  743bbaf
- narrative
  patel-bhavin
  committed
  545951b
- story namne
  patel-bhavin
  committed
  1b5bf2a
- test time
  patel-bhavin
  committed
  4f9b8a2
Commits on May 13, 2021
- SLUI
  MHaggis
  committed
  5ff8c63
- com_obj
  t-contreras
  committed
  c24f154
- Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass
  root
  committed
  71b3e13
- Update cmlua_or_cmstplua_uac_bypass.yml
  MHaggis
  authored
  b600c12
- mapping existing dettections
  patel-bhavin
  committed
  fdb96e5
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  571781f
- Branch was auto-updated.
  github-actions[bot]
  authored
  95c4e70
- more mappings
  patel-bhavin
  committed
  9a1bd49
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  a103ce1
- rclone
  MHaggis
  committed
  e63e6c4
- Branch was auto-updated.
  github-actions[bot]
  authored
  82f9a5f
- com_obj2
  t-contreras
  committed
  eaae607
- com
  t-contreras
  committed
  118ea31
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  fbe2428
- fail
  t-contreras
  committed
  d631a7e
- com_obj
  t-contreras
  committed
  03e5163
- manifest errors
  patel-bhavin
  committed
  2db1f87
- conflicts
  patel-bhavin
  committed
  3f8f5aa
- com
  t-contreras
  committed
  54a3f8e
- Added detection testing service results inCMLUA Or CMSTPLUA UAC Bypass
  root
  committed
  b3dd868
- Added detection testing service results inDetect RClone Command-Line Usage
  root
  committed
  13af359
- Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
  Detection Testing Service
  committed
  6b94433
- Added detection testing service results inDetect Renamed RClone
  root
  committed
  7b32d0f
- Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
  Detection Testing Service
  committed
  07ee4b0
- Added detection testing service results inExtract SAM from Registry
  root
  committed
  8c175d5
- Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
  Detection Testing Service
  committed
  485a811
- Update slui_spawning_a_process.yml
  MHaggis
  committed
  dccb38e
- Added detection testing service results inSLUI Spawning a Process
  root
  committed
  bab3434
- Added detection testing service results inSLUI RunAs Elevated
  root
  committed
  18ff60e
- Merge branch 'darkside' of https://github.com/splunk/security_content into darkside
  Detection Testing Service
  committed
  e81a3eb
- Update cmlua_or_cmstplua_uac_bypass.yml
  MHaggis
  authored
  0a5f0ac
- search_formatting
  patel-bhavin
  committed
  d003c79
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  9fed6af
- Update delete_shadowcopy_with_powershell.yml
  MHaggis
  authored
  2d22e60
- Update detect_rclone_command_line_usage.yml
  MHaggis
  authored
  7c15ac9
- Update detect_rclone_command_line_usage.yml
  MHaggis
  authored
  1acad69
- Update detect_renamed_rclone.yml
  MHaggis
  authored
  2d0c629
- Update slui_runas_elevated.yml
  MHaggis
  authored
  eac3adc
- Update slui_spawning_a_process.yml
  MHaggis
  authored
  9a7ac4e
- moving to experimental
  patel-bhavin
  committed
  888aae2
- Merge branch 'darkside' of github.com:splunk/security_content into darkside
  patel-bhavin
  committed
  90cae04
- delete test file
  patel-bhavin
  committed
  a55a6bf

Commits

Commits on May 12, 2021

Commits on May 13, 2021