Skip to content

v1.0.51

Choose a tag to compare

View all tags
@josehelps josehelps released this 02 Mar 18:44
v1.0.51
b1fbcc0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Enterprise Security Content Updates v 1.0.51 was released on March 2, 2020. It includes the following enhancements:

New Analytic Story:

  • Container Implantation Monitoring & Investigation

Fixed issues:

  • Updated "Credential Dumping" story with new detection - "Dump LSASS via comsvcs DLL"
  • Update to "Access LSASS Memory for Dump Creation"

Full documentation: https://docs.splunk.com/Documentation/ESSOC/1.0.51

Assets 3
Loading