Skip to content
New pull request New
94 Open 3,794 Closed
94 Open 3,794 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
CyberArkEPM: first commit
Solution
#4397 opened Mar 11, 2022 by averbn • Review required
@v-webr
Create MacroInvokingShellBrowserWindowCOMObjects.yaml
Detection
#4396 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Create DSRMAccountAbuse.yaml
Detection
#4395 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Create RegistryPersistenceViaAppCertDLLModification.yaml
Detection
#4394 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Create RegistryPersistenceViaAppInitDLLsModification.yaml
Detection
#4393 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Create LateralMovementViaDCOM.yaml
Detection
#4392 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Add FalconFriday 0xFF15 - 0xFF1B
Detection Solution
#4391 opened Mar 11, 2022 by gijsh • Review required
@aprakash13
2
Create WindowsBinariesLolbinsRenamed.yaml
Detection
#4390 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Create DumpingLSASSProcessIntoaFile.yaml
Detection
#4389 opened Mar 11, 2022 by vpaschalidis • Review required
@aprakash13
Update MFARejectedByUser to include AAD IDs
Detection
#4388 opened Mar 11, 2022 by malexmave • Review required
@aprakash13
Moving Meraki Connector to Solutions folder
Connector Solution
#4387 opened Mar 11, 2022 by anki-narravula • Review required
@NikTripathi
1
Delete Playbooks/Move-LogAnalytics-to-Storage directory (Addressing Conflicts)
Playbook
#4384 opened Mar 11, 2022 by malowe101 • Review required
@sreedharande
Add detection for Password Spray against Seamless SSO
Detection
#4383 opened Mar 10, 2022 by ep3p • Review required
@aprakash13
Adding windows forwarded events connector ID
Detection Hunting
#4382 opened Mar 10, 2022 by yaelrbergman • Review required
@aprakash13
Simplified variables and logic
Playbook
#4381 opened Mar 10, 2022 by iwafula025 • Changes requested
@sreedharande
1
Create AccessibilityFeaturesModification.yaml
Detection
#4380 opened Mar 10, 2022 by vpaschalidis • Review required
@aprakash13
Create WDigestDowngradeAttack.yaml
Detection
#4378 opened Mar 10, 2022 by vpaschalidis • Review required
@aprakash13
Adding ipaddr_has_any parameter
ASIM
#4373 opened Mar 10, 2022 by yaronMSFT • Review required
@oshezaf
commit for version 1.8
Workbook
#4372 opened Mar 10, 2022 by YuvalGrMic • Review required
@v-sabiraj
1
Replacing Notebooks submodule with README.md with redirection to note…
Notebook
#4362 opened Mar 9, 2022 by ianhelle • Approved
1
@anki-narravula
Create compromised nvidia certificates[Lapsus$].yaml
Hunting
#4360 opened Mar 9, 2022 by davidbrilliant • Review required
@aprakash13
1
Create Detection for Password Spray against ADFSSignInLogs
Detection
#4349 opened Mar 8, 2022 by ep3p • Review required
@aprakash13
1
Lodewyk
Detection
#4346 opened Mar 8, 2022 by Lodewyk-Git • Review required
@aprakash13
1
Moving content for CarbonBlack to solution folder
Solution
#4340 opened Mar 8, 2022 by ritika-msft • Review required
@v-webr
Created an automation to keep service tags updated.
javascript
#4332 opened Mar 7, 2022 by samikroy • Review required
@v-rucdu
1
ProTip! Mix and match filters to narrow down what you’re looking for.