167 Commits

Author	SHA1	Message	Date
Bhavin Patel	9c5f329c83	Branch was auto-updated.	2024-09-02 20:56:02 +05:30
ljstella	73c546a54d	TR-3867	2024-08-29 08:26:56 -05:00
Michael Haag	23b4910cf6	No More Haag-gling with BlackSuit: A Tailored Analytic Story	2024-08-26 13:27:08 -06:00
ljstella	1ff2c9bfed	Missed a date & version bump	2024-08-19 12:00:27 -05:00
ljstella	6d7c0b0405	missed deprecated	2024-08-19 10:31:55 -05:00
ljstella	9eafedf32c	Missed version and date updates	2024-08-16 08:41:51 -05:00
ljstella	2b40bbedbd	Deprecated Detections	2024-08-15 15:37:43 -05:00
ljstella	266846eb8d	Updated Observable config	2024-07-26 12:42:11 -05:00
pyth0n1c	0d82fcb0d2	Fix merge conflicts	2024-07-24 15:26:40 -07:00
Bhavin Patel	2413b6c078	remove yamls	2024-07-17 10:18:03 -07:00
Patrick	87108a5aac	Improved data sources	2024-07-17 14:41:50 +02:00
Patrick	9e0d8426c1	improved data source field	2024-07-16 14:06:31 +02:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Bhavin Patel	b0eaed8f75	ESCU Release v4.31.0	2024-05-08 16:05:40 +00:00
Bhavin Patel	3c617f5b70	Duplicate Yml FIle	2024-04-17 21:20:09 +00:00
Bhavin Patel	72e29c764f	ESCU Release Branch - v4.30.0	2024-04-17 20:44:56 +00:00
Eric McGinnis	9fdf182033	Release v4.24.0	2024-02-14 23:54:00 +00:00
Bhavin Patel	f3372e03c2	Release branch v4.16.0	2023-11-16 20:33:10 +00:00
Bhavin Patel	1813ce39ac	Merge branch 'release_v4.13.0' into sysmon_fix	2023-09-28 12:38:50 -07:00
Bhavin Patel	92a6c6f694	Update dump_lsass_via_procdump_rename.yml	2023-09-28 10:52:21 -07:00
Bhavin Patel	e9b0b6fcdb	update status to deprecated	2023-09-22 16:05:31 -07:00
Bhavin Patel	b00506bd95	Merge branch 'develop' into sysmon_fix	2023-09-20 16:22:08 -07:00
Bhavin Patel	50d19ab56d	updating moar	2023-09-19 15:26:01 -07:00
Bhavin Patel	1d35e00366	testing a change for sysmon	2023-09-19 15:17:24 -07:00
Gowthamaraj rajendran	e06cfa133d	Edit how_to_implement for Endpoint.Processes	2023-09-15 10:58:38 -07:00
Bhavin Patel	c6cd7e613f	adding depreacted	2023-06-27 12:16:52 -07:00
P4T12ICK	d2defca9a4	Delete Detection Kubernetes AWS detect RBAC authorization by account	2023-06-21 16:17:31 +02:00
patel-bhavin	8ef2a73122	mionr	2023-05-03 11:58:17 -07:00
patel-bhavin	63abc37beb	deprecated note update	2023-05-03 11:57:27 -07:00
Bhavin Patel	444dde5d66	Revert "deprecate Pth"	2023-05-03 11:51:24 -07:00
patel-bhavin	ae89db26ea	deprecate this	2023-05-03 11:44:31 -07:00
patel-bhavin	e51757ca9f	conflicts	2023-05-02 14:56:38 -07:00
patel-bhavin	553df895cd	deprecate	2023-04-24 10:27:52 -07:00
pyth0n1c	44875375e2	Removed a duplicate macro	2023-04-14 15:35:45 -07:00
P4T12ICK	2861d04434	merged with ba ocsf work	2023-03-03 13:28:14 +01:00
P4T12ICK	78909f6429	merged with develop	2023-03-03 12:40:16 +01:00
P4T12ICK	d115bfd4e0	converted ssa detections to ocsf	2023-02-28 12:00:16 +01:00
P4T12ICK	fd0c8b349f	updated tags	2023-01-09 09:33:30 +01:00
P4T12ICK	5ae53c9368	Migrated all detections to v4	2023-01-03 13:42:10 +01:00
Michael Haag	c6db7b5415	CISA AA22-320A	2022-11-16 12:10:42 -07:00
Michael Haag	2fa429127b	CISA AA22-257A tag	2022-09-15 10:07:38 -06:00
d1vious	f5a53d0a64	fixing base on feedback from users	2022-07-28 13:48:29 -04:00
d1vious	3c62e835df	removing	2022-07-19 12:59:03 -04:00
pyth0n1c	a11c62e121	Branch was auto-updated.	2022-06-28 11:33:22 -07:00
d1vious	3bd6477ec7	moving complex pipelines to deprecated	2022-06-28 14:13:38 -04:00
pyth0n1c	dd922baf2a	Branch was auto-updated.	2022-05-16 13:53:47 -04:00
d1vious	5b9febe81a	removing all the stuff in bin	2022-05-03 14:18:22 -04:00
pyth0n1c	578e6bb088	Updated a very large number of detections whose references were returning HTTP Status 301 - resource moved. For example, this includes a large number of fireeye reports, which are now under mandiant, cobaltstrike info, and microsoft links.	2022-05-02 17:12:50 -07:00
mhaag-spl	305a20bc54	Hunting ... Changed to hunting, added renamed logic to not use the process_macro Issue #2010	2022-04-07 14:39:56 -06:00