8 Commits

Author	SHA1	Message	Date
Ming Di Leom	9ea18b1495	page(threat-hunting): cmd without extension	2025-02-08 01:07:45 +00:00
Ming Di Leom	9c02132f68	page(threat-hunting): "Rundll32 Scheduled Task"	2025-02-03 06:46:56 +00:00
Ming Di Leom	afbf7f6428	page(threat-hunting): SimpleHelp,Netop,Impero	2025-02-03 06:31:29 +00:00
Ming Di Leom	42ba8a01de	page(threat-hunting): rename snow_cmdb_lookup to cmdb_ci_list_lookup	2025-02-03 06:24:49 +00:00
Ming Di Leom	ea7d24b3c0	page(threat-hunting): move status monitor to gitlab ... https://gitlab.com/curben/splunk-scripts/-/blob/main/itsi_im_metrics/savedsearches.conf	2025-02-01 03:35:43 +00:00
Ming Di Leom	d25e9662ab	page(threat-hunting): "Unusual printui.exe path"	2025-01-28 08:59:40 +00:00
Ming Di Leom	bd36476125	page(threat-hunting): some queries require custom data model	2025-01-15 11:06:33 +00:00
Ming Di Leom	a9c575817e	page: Splunk Threat Hunting ... migrated from https://gitlab.com/curben/splunk-scripts/-/tree/main/threat-hunting	2025-01-15 10:59:11 +00:00