Commits

Commit history

1. Commits on May 7, 2021

   • Added detection testing service results inAttempted Credential Dump From Registry via Reg exe

     

     root

     committed
     1310fc6View commit details

     Copy full SHA for 1310fc6

     View code at this pointBrowse repository at this point

   • add process_id

     

     P4T12ICK

     committed
     145542eView commit details

     Copy full SHA for 145542e

     View code at this pointBrowse repository at this point
2. Commits on May 6, 2021

   • Merge branch 'develop' into fix_missing_dm_entry

     josehelps

     authored
     add2e70View commit details

     Copy full SHA for add2e70

     View code at this pointBrowse repository at this point

   • minor update to include DM closes issue #1357

     josehelps

     committed
     375a824View commit details

     Copy full SHA for 375a824

     View code at this pointBrowse repository at this point
3. Commits on May 5, 2021

   • Added detection testing service results inSchedule Task with HTTP Command Arguments

     

     root

     committed
     af1503dView commit details

     Copy full SHA for af1503d

     View code at this pointBrowse repository at this point

   • fix_typos

     t-contreras

     committed
     03c0524View commit details

     Copy full SHA for 03c0524

     View code at this pointBrowse repository at this point

   • fix_typo

     t-contreras

     committed
     d9cfd94View commit details

     Copy full SHA for d9cfd94

     View code at this pointBrowse repository at this point
4. Commits on May 3, 2021

   • Added detection testing service results inAccount Discovery With Net App

     

     root

     committed
     652c386View commit details

     Copy full SHA for 652c386

     View code at this pointBrowse repository at this point

   • minor

     t-contreras

     committed
     f4e25f9View commit details

     Copy full SHA for f4e25f9

     View code at this pointBrowse repository at this point

   • Merge branch 'trickbot' of github.com:splunk/security_content into trickbot

     t-contreras

     committed
     cea3e29View commit details

     Copy full SHA for cea3e29

     View code at this pointBrowse repository at this point

   • net

     t-contreras

     committed
     9250acaView commit details

     Copy full SHA for 9250aca

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWermgr Process Connecting To IP Check Web Services

     

     root

     committed
     0ef9cb1View commit details

     Copy full SHA for 0ef9cb1

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWermgr Process Create Executable File

     

     root

     committed
     ecfecd4View commit details

     Copy full SHA for ecfecd4

     View code at this pointBrowse repository at this point

   • Added detection testing service results inPowershell Remote Thread To Known Windows Process

     

     root

     committed
     fe36e28View commit details

     Copy full SHA for fe36e28

     View code at this pointBrowse repository at this point

   • Added detection testing service results inWermgr Process Spawned CMD Or Powershell Process

     

     root

     committed
     8386cfdView commit details

     Copy full SHA for 8386cfd

     View code at this pointBrowse repository at this point
5. Commits on Apr 30, 2021

   • minor_mod

     t-contreras

     committed
     a845ca2View commit details

     Copy full SHA for a845ca2

     View code at this pointBrowse repository at this point

   • Merge branch 'develop' into trickbot

     P4T12ICK

     authored
     5aeadfbView commit details

     Copy full SHA for 5aeadfb

     View code at this pointBrowse repository at this point
6. Commits on Apr 29, 2021

   • updating docs and package bits [ci skip]

     

     research bot

     committed
     1aeb0a9View commit details

     Copy full SHA for 1aeb0a9

     View code at this pointBrowse repository at this point

   • Branch was auto-updated.

     github-actions[bot]

     authored
     370987dView commit details

     Copy full SHA for 370987d

     View code at this pointBrowse repository at this point

   • fix text

     patel-bhavin

     committed
     b8c4992View commit details

     Copy full SHA for b8c4992

     View code at this pointBrowse repository at this point
7. Commits on Apr 28, 2021

   • Branch was auto-updated.

     github-actions[bot]

     authored
     c5a8aceView commit details

     Copy full SHA for c5a8ace

     View code at this pointBrowse repository at this point

   • removed dest id from a body field since it is already part of the anomaly

     josehelps

     committed
     a2e62c0View commit details

     Copy full SHA for a2e62c0

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_service_and_process_control_via_mimikatz_modules.yml

     josehelps

     authored
     e334484View commit details

     Copy full SHA for e334484

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_privilege_elevation_via_mimikatz_modules.yml

     josehelps

     authored
     87d7cb0View commit details

     Copy full SHA for 87d7cb0

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_privilege_elevation_and_persistence_via_powersploit_modules.yml

     josehelps

     authored
     2bd7255View commit details

     Copy full SHA for 2bd7255

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_management_computers_and_AD_elements_via_powersploit_modules.yml

     josehelps

     authored
     5d7c94fView commit details

     Copy full SHA for 5d7c94f

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_management_AD_elements_and_policies_via_dsinternals_modules.yml

     josehelps

     authored
     8f1e5f6View commit details

     Copy full SHA for 8f1e5f6

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_log_deletion_via_mimikatz_modules.yml

     josehelps

     authored
     3980104View commit details

     Copy full SHA for 3980104

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_account_enable_disable_via_dsinternals_modules.yml

     josehelps

     authored
     d0c2145View commit details

     Copy full SHA for d0c2145

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_account_creation_via_powersploit_modules.yml

     josehelps

     authored
     df8c60dView commit details

     Copy full SHA for df8c60d

     View code at this pointBrowse repository at this point

   • Update ssa___illegal_access_user_content_via_powersploit_modules.yml

     josehelps

     authored
     acae84aView commit details

     Copy full SHA for acae84a

     View code at this pointBrowse repository at this point

   • Update ssa___detect_pass_hash.yml

     josehelps

     authored
     5eec0c7View commit details

     Copy full SHA for 5eec0c7

     View code at this pointBrowse repository at this point

   • Update ssa___credential_extraction_powersploit_modules.yml

     josehelps

     authored
     2877c36View commit details

     Copy full SHA for 2877c36

     View code at this pointBrowse repository at this point

   • Update ssa___credential_extraction_ms_debuggers_z_option.yml

     josehelps

     authored
     05f4acbView commit details

     Copy full SHA for 05f4acb

     View code at this pointBrowse repository at this point

   • Update ssa___credential_extraction_ms_debuggers_kernel_peek.yml

     josehelps

     authored
     65dc6f1View commit details

     Copy full SHA for 65dc6f1

     View code at this pointBrowse repository at this point