Commit Graph

4880 Commits

Author SHA1 Message Date
pyth0n1c 82ea20ae1d Field name changed from process_name to parent_process_name. This should be reviewed to ensure that the TA is parsing the events correctly and that this does not change the fundamental meaning of the detection. 2022-02-22 15:00:29 -08:00
mhaag-spl 1f3d15676b Update scheduled_task_deleted_or_created_via_cmd.yml 2022-02-22 10:57:07 -07:00
mhaag-spl 8f9561932d Update scheduled_task_deleted_or_created_via_cmd.yml 2022-02-22 10:56:24 -07:00
pyth0n1c a5084e384e Branch was auto-updated. 2022-02-18 15:32:23 -08:00
patel-bhavin 9da1af7e8c minor changes for CIM fields and other metadata 2022-02-18 11:51:32 -08:00
pyth0n1c 0338044721 Updating the date to today
and bumping the version for
updated searches associated 
with this PR.
2022-02-18 10:57:49 -08:00
pyth0n1c aa6ec9315b Branch was auto-updated. 2022-02-18 07:41:50 -08:00
pyth0n1c de2ef0d50e Branch was auto-updated. 2022-02-18 07:41:48 -08:00
P4T12ICK ac1662310c Merge pull request #1903 from kirtankhatana-crest/test/enrich_detections
WIP: Enriched detections with supprted_tas and tas_with_data in detection files
2022-02-18 16:41:17 +01:00
pyth0n1c 794dff58f0 Branch was auto-updated. 2022-02-17 13:17:32 -08:00
pyth0n1c c7d25ead5a Branch was auto-updated. 2022-02-17 13:17:31 -08:00
pyth0n1c f40d9bb32c Branch was auto-updated. 2022-02-17 11:01:01 -08:00
pyth0n1c c9b5184dc9 Branch was auto-updated. 2022-02-17 11:01:00 -08:00
pyth0n1c 920f44130e Branch was auto-updated. 2022-02-17 11:00:43 -08:00
Jose Enrique Hernandez 05474921db Update system_information_discovery_detection.yml 2022-02-17 11:59:25 -05:00
Michael Haag dae31d6d6a Quick fix 2022-02-17 09:31:53 -07:00
Lou Stella 95b7a634ac DiskShadow + Story Scaffolding 2022-02-17 10:12:50 -06:00
rushabhs-crest 7ed54694f7 Merge branch 'splunk:develop' into test/enrich_detections 2022-02-17 11:15:50 +05:30
research bot 5c8268f137 updating docs and package bits [ci skip] 2022-02-15 23:10:10 +00:00
pyth0n1c a4a1384f6e Branch was auto-updated. 2022-02-15 14:54:53 -08:00
pyth0n1c f57454771e Branch was auto-updated. 2022-02-15 14:54:52 -08:00
d1vious 96609e50f1 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE 2022-02-15 17:40:57 -05:00
d1vious b767a93e5b fixing base on feedback 2022-02-15 17:40:51 -05:00
pyth0n1c ce4e67a077 Branch was auto-updated. 2022-02-15 12:57:32 -08:00
pyth0n1c d17720f6ba Branch was auto-updated. 2022-02-15 12:57:30 -08:00
pyth0n1c 0ca10d6c14 Branch was auto-updated. 2022-02-15 12:57:30 -08:00
Bhavin Patel 990694e9e6 Update ssa___windows_powershell_downloadfile.yml 2022-02-15 12:38:12 -08:00
Bhavin Patel 6ef8187b2f Update ssa___windows_powershell_connect_to_internet_with_hidden_window.yml 2022-02-15 12:37:57 -08:00
pyth0n1c 7482ac9113 Branch was auto-updated. 2022-02-15 12:36:36 -08:00
pyth0n1c 874969a012 Branch was auto-updated. 2022-02-15 12:36:34 -08:00
pyth0n1c 59292cf55e Branch was auto-updated. 2022-02-15 12:36:33 -08:00
pyth0n1c bd1c27edb1 Branch was auto-updated. 2022-02-15 12:36:27 -08:00
Lou Stella 7f8e5221c7 Updated second detection with unicode codepoints 2022-02-15 14:17:55 -06:00
mhaag-spl c9b8eb2985 rasautou 2022-02-15 13:08:59 -07:00
Lou Stella 95d060e135 Character sets are difficult 2022-02-15 13:52:01 -06:00
pyth0n1c 44f9a47161 Branch was auto-updated. 2022-02-15 10:50:12 -08:00
pyth0n1c 818e125692 Branch was auto-updated. 2022-02-15 10:50:12 -08:00
pyth0n1c 331e27834d Branch was auto-updated. 2022-02-15 10:50:09 -08:00
pyth0n1c 85760fed63 Branch was auto-updated. 2022-02-15 10:40:13 -08:00
pyth0n1c 92f08cbf49 Branch was auto-updated. 2022-02-15 10:40:09 -08:00
pyth0n1c 1e7216b08c Branch was auto-updated. 2022-02-15 10:40:08 -08:00
pyth0n1c 63a5ac071a Branch was auto-updated. 2022-02-15 10:40:01 -08:00
pyth0n1c b42ec08d85 Fixed spacing on detection_of_dns_tunnels.yml
Added line was too long.
2022-02-15 10:39:23 -08:00
pyth0n1c 81a5583536 Branch was auto-updated. 2022-02-15 10:30:14 -08:00
pyth0n1c 733fa530ac Branch was auto-updated. 2022-02-15 10:30:12 -08:00
pyth0n1c 45fb0c5afb Branch was auto-updated. 2022-02-15 10:30:09 -08:00
pyth0n1c 33ab1741f6 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
pyth0n1c 1035b056b7 Branch was auto-updated. 2022-02-15 10:30:08 -08:00
patel-bhavin e99b973973 note updadte 2022-02-15 10:27:42 -08:00
patel-bhavin 085cec0b0d adding note 2022-02-15 10:26:12 -08:00