Commit Graph

45 Commits

Author SHA1 Message Date
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Bhavin Patel 196d618f2f Release v4.15.0 2023-11-01 19:24:56 +00:00
Bhavin Patel b00506bd95 Merge branch 'develop' into sysmon_fix 2023-09-20 16:22:08 -07:00
Bhavin Patel 1d35e00366 testing a change for sysmon 2023-09-19 15:17:24 -07:00
Bhavin Patel ba4a0d8919 updates to yamls 2023-08-21 13:50:31 -07:00
patel-bhavin 6211b72579 testing CI failure 2023-03-29 16:21:26 -05:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
Michael Haag 03e585fb7c Added MSAccess 2023-02-15 07:19:07 -07:00
P4T12ICK ffa1210a00 merged with develop 2023-02-02 09:15:59 +01:00
Michael Haag 42f4eefeae more onenotes 2023-01-24 10:20:15 -07:00
Michael Haag 11ff0fa87d onenote 2023-01-24 06:38:23 -07:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
tccontre d7830ab523 Update office_document_executing_macro_code.yml 2022-11-11 15:19:02 +01:00
tccontre 4160527799 cisa_coverage 2022-11-11 14:27:57 +01:00
tccontre c96c6d03d3 qakbot_1 2022-10-18 11:57:58 +02:00
tccontre 888a148bbb agent-with-tesla-1 2022-09-19 11:28:07 +02:00
tccontre 2dd87d6d33 dcrat-analytics 2022-07-26 12:02:35 +02:00
pyth0n1c 54203d6858 Fixing detection to conform to new sysmon
behavior.
2022-06-21 17:21:30 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5
CARS_UPDATE_MITRE_ID_B5
2021-10-13 11:20:47 +02:00
patel-bhavin c7bc4d7243 rename 2021-08-18 13:49:15 -07:00
patel-bhavin e1ff3993cd run generate again 2021-08-16 15:57:44 -07:00
tccontre 2d13569fff icedid story 2021-07-30 12:34:15 +02:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
mvelazco 589d3f92ed fixing extra space 2021-07-20 13:53:50 -04:00
P4T12ICK 4ddd09fd87 add analytic types to detections 2021-07-19 17:12:54 +02:00
mvelazco 31496ca1b5 fixing variables on message 2021-07-14 14:40:09 -04:00
mvelazco 9a245fdfa0 Rba support Take 4 2021-07-13 16:03:52 -04:00
research bot e80bc45423 updating docs and package bits [ci skip] 2021-05-13 22:09:29 +00:00
tcontreras a845ca2f0d minor_mod 2021-04-30 12:15:04 +02:00
tcontreras 051c6f9cfa trickbot_1 2021-04-26 17:19:41 +02:00
research bot 25a4be5d98 updating docs and package bits [ci skip] 2021-04-22 21:55:11 +00:00
mhaag-spl dc319b6eda Spearphishing Attachments detections 2021-04-21 10:16:49 -06:00
tcontreras 07e5528918 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach 2021-04-15 19:40:46 +02:00
tcontreras 7a0d9be5a5 spear_update 2021-04-15 19:39:21 +02:00
root 8cd49a3f7a Added detection testing service results inOffice Document Executing Macro Code 2021-04-15 08:25:53 +00:00
tcontreras 71b663937e spear_detections 2021-04-14 16:00:16 +02:00