49 Commits

Author	SHA1	Message	Date
patel-bhavin	69fa5a1eef	Updated TAs	2024-09-18 06:57:39 +00:00
patel-bhavin	e3586170c5	Updated TAs	2024-09-15 06:57:47 +00:00
patel-bhavin	4ca4295dd3	Updated TAs	2024-09-05 06:57:54 +00:00
Patrick Bareiss	676d1a7e18	bump aws ta version	2024-08-30 07:43:21 +02:00
Bhavin Patel	3de50154a2	updating minor	2024-08-22 23:05:58 +05:30
Bhavin Patel	f07062ef1a	adding aws datasource	2024-08-22 22:48:26 +05:30
Bhavin Patel	113618a41d	updating data source	2024-08-22 21:49:40 +05:30
Michael Haag	c5165cef6a	👀	2024-08-22 10:07:04 -06:00
Michael Haag	77f0a76383	data sourced	2024-08-22 09:54:44 -06:00
tccontre	f16501ec86	auditd_data_source	2024-08-08 15:06:44 +02:00
tccontre	d0b5537cc5	auditd_data_source	2024-08-08 15:00:58 +02:00
Br3akp0int	35e2f0d0cc	Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml	2024-08-08 14:56:03 +02:00
Br3akp0int	98b7916636	Rename Linux_Auditd_Service_Stop.yml to linux_auditd_service_stop.yml	2024-08-08 14:55:44 +02:00
Br3akp0int	8ebc697d5f	Rename Linux_Auditd_Proctitle.yml to linux_auditd_proctitle.yml	2024-08-08 14:55:24 +02:00
Br3akp0int	d1f13df7c5	Rename Linux_Auditd_Path.yml to linux_auditd_path.yml	2024-08-08 14:55:03 +02:00
Br3akp0int	65df507595	Rename Linux_Auditd_Execve.yml to linux_auditd_execve.yml	2024-08-08 14:54:44 +02:00
Br3akp0int	250ff001f2	Rename Linux_Auditd_Add_User.yml to linux_auditd_add_user.yml	2024-08-08 14:54:21 +02:00
tccontre	89902ee34b	auditd_data_source	2024-08-08 14:47:22 +02:00
Patrick Bareiss	9ce5478271	Data Source Bug Fix	2024-08-07 16:21:33 +02:00
pyth0n1c	19a1470d14	Update crowdstrike ta	2024-08-05 16:42:40 -07:00
Bhavin Patel	672084461f	Merge branch 'develop' into data_source_improvements	2024-08-05 12:50:11 -07:00
Patrick Bareiss	bf1d25af38	improved data source TA version	2024-08-05 10:12:12 +02:00
ljstella	abdf1b51e7	Fixing TA for CS data	2024-08-01 08:31:06 -05:00
Patrick	f479e762e6	Improve TA names to match the naming in Splunk	2024-07-31 09:58:03 +02:00
pyth0n1c	0d82fcb0d2	Fix merge conflicts	2024-07-24 15:26:40 -07:00
Patrick	4c0d7f41b0	merged with develop	2024-07-24 13:52:36 +02:00
Patrick	b3f2bb4682	merged with develop	2024-07-24 13:48:22 +02:00
Patrick	c0774b9762	Better data source handling	2024-07-24 13:25:59 +02:00
Patrick	68b3a666a9	renamed data source and event source files	2024-07-19 08:45:57 +02:00
Patrick	7263680bf3	added date and version to objects and changed event_names to event_source and made it a list of strings instead of list of dicts	2024-07-18 11:44:35 +02:00
Bhavin Patel	2629cf330a	Release v4.36.0 - Draft release branch (Manual)	2024-07-17 18:03:56 +00:00
Patrick	87108a5aac	Improved data sources	2024-07-17 14:41:50 +02:00
Bhavin Patel	8d42322842	rm new line	2024-07-16 08:12:27 -07:00
Bhavin Patel	40248a397a	updating data source files	2024-07-16 08:11:24 -07:00
Patrick	9e0d8426c1	improved data source field	2024-07-16 14:06:31 +02:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	7539e88c4c	Release Branch v4.33.0	2024-06-05 21:05:06 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Bhavin Patel	309aee5b1d	ESCU Release branch : v4.29.0	2024-04-04 17:50:37 +00:00
P4T12ICK	43180a41bd	bug fix srs detections	2023-05-08 10:56:12 +02:00
P4T12ICK	0ca3face42	updates srs detections	2023-03-27 11:12:42 +02:00
P4T12ICK	153b2d44ae	merged with develop	2023-03-16 09:44:35 +01:00
P4T12ICK	517ab37092	improved sigma converter	2023-03-07 11:27:12 +01:00
P4T12ICK	788359e169	wip	2023-03-07 09:19:42 +01:00
P4T12ICK	b87ee36de6	updated ssa_detections	2023-03-06 13:15:39 +01:00
P4T12ICK	684cad0ff9	update sigma ba conversion	2023-03-06 11:26:51 +01:00
P4T12ICK	ecf25b566f	updates	2023-02-17 17:21:55 +01:00
P4T12ICK	eec8968a85	Added sigma detections into dev folder	2023-01-20 13:24:15 +01:00
P4T12ICK	4393135c41	Converted endpoint detections from v3 to v4	2022-12-19 09:34:19 +01:00