 patel-bhavin
|
a9f728ab14
|
Updated TAs
|
2025-05-01 06:57:43 +00:00 |
|
|
Bhavin Patel
|
700667bda7
|
Merge pull request #3499 from splunk/weavingbaskets
🕸️ BasketNetWeaving with Haag: No Shell Left Behind!
|
2025-04-28 12:09:17 -07:00 |
|
|
Michael Haag
|
0c67bd001c
|
Delete java_spawning_command_shells.yml
|
2025-04-28 12:01:09 -06:00 |
|
|
Michael Haag
|
074c90ceb4
|
ver and date
|
2025-04-28 10:37:57 -06:00 |
|
|
Michael Haag
|
074d13f001
|
BasketNetWeaving with Haag: No Shell Left Behind!
|
2025-04-28 10:33:17 -06:00 |
|
|
Bhavin Patel
|
be0e06c743
|
Merge pull request #3493 from splunk/taskhost_counting
Taskhost counting
|
2025-04-25 08:54:30 -07:00 |
|
|
ljstella
|
511221ba1e
|
version bump
|
2025-04-25 08:58:58 -05:00 |
|
|
ljstella
|
31e2c03b8d
|
Add where clause back
|
2025-04-25 08:44:50 -05:00 |
|
|
Nasreddine Bencherchali
|
713576c3a4
|
Merge pull request #3490 from splunk/filter_macro_duplicate
Remove duplicate filter macro
|
2025-04-24 18:25:38 +02:00 |
|
|
ljstella
|
ba0577038e
|
bump version
|
2025-04-24 10:41:10 -05:00 |
|
|
ljstella
|
8240ed3c6e
|
Remove duplicate filter macro
|
2025-04-24 10:34:30 -05:00 |
|
|
Bhavin Patel
|
de5542c9c1
|
Merge pull request #3481 from splunk/revert_prestats_optimization
Revert prestats optimization
v5.4.0
|
2025-04-22 14:19:44 -07:00 |
|
|
pyth0n1c
|
08dac066e8
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 13:52:23 -07:00 |
|
|
pyth0n1c
|
4c1dbbb3ac
|
Merge pull request #3486 from splunk/shadow_single
Update attack data - Delete ShadowCopy With PowerShell
|
2025-04-22 13:51:59 -07:00 |
|
|
Lou Stella
|
3b73f92315
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 15:42:09 -05:00 |
|
|
Lou Stella
|
91e97c147c
|
Merge branch 'develop' into shadow_single
|
2025-04-22 15:37:34 -05:00 |
|
|
pyth0n1c
|
ac5b667bd7
|
Merge pull request #3485 from splunk/version_adjustments
Version adjustments for new detection metadata validation check
|
2025-04-22 13:37:08 -07:00 |
|
|
Bhavin Patel
|
5158549d8b
|
updating dataset
|
2025-04-22 13:32:12 -07:00 |
|
|
Lou Stella
|
f0e662bd6f
|
Merge branch 'develop' into version_adjustments
|
2025-04-22 15:04:40 -05:00 |
|
|
ljstella
|
6fc106b995
|
Version adjustments for new detection metadata validation check
|
2025-04-22 15:03:23 -05:00 |
|
|
Bhavin Patel
|
34d33627b3
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 12:12:45 -07:00 |
|
|
pyth0n1c
|
2bbcdd5032
|
Merge pull request #3484 from splunk/cisco_slashn
Cisco slashn
|
2025-04-22 12:12:32 -07:00 |
|
|
Bhavin Patel
|
3fb1a7ad96
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 12:11:41 -07:00 |
|
|
pyth0n1c
|
1411dac82f
|
Merge branch 'develop' into cisco_slashn
|
2025-04-22 12:11:23 -07:00 |
|
|
pyth0n1c
|
45af4dedab
|
Merge pull request #3483 from splunk/mitre_17
updating ids in new branch
|
2025-04-22 12:11:02 -07:00 |
|
|
Bhavin Patel
|
f37ca5fc68
|
update message formatting
|
2025-04-22 12:05:49 -07:00 |
|
|
Bhavin Patel
|
4a1547b9c9
|
updating message
|
2025-04-22 11:51:26 -07:00 |
|
|
Bhavin Patel
|
b1ff40dfd4
|
updating ids in new branch
|
2025-04-22 11:24:52 -07:00 |
|
|
Bhavin Patel
|
f8df5c4491
|
Update windows_deleted_registry_by_a_non_critical_process_file_path.yml
fix data source
|
2025-04-22 10:33:39 -07:00 |
|
|
Patrick Bareiss
|
967b689501
|
bump version
|
2025-04-22 11:06:07 +02:00 |
|
|
Patrick Bareiss
|
08294f4123
|
bug fix
|
2025-04-22 10:57:45 +02:00 |
|
|
Patrick Bareiss
|
a24c72d431
|
Revert prestats optimization
|
2025-04-22 10:32:24 +02:00 |
|
|
Bhavin Patel
|
262d492358
|
Merge pull request #3479 from splunk/integration_v5.4.0
Integration fixes - v5.4.0
|
2025-04-21 14:12:34 -07:00 |
|
|
Bhavin Patel
|
0c729cc37d
|
Merge branch 'develop' into integration_v5.4.0
|
2025-04-21 13:44:34 -07:00 |
|
|
Bhavin Patel
|
d85a312259
|
Merge pull request #3472 from splunk/water
Haag's Ruse: The MSC EvilTwin Detector - Unmasking Path Manipulators & Digital Spies
|
2025-04-21 13:37:44 -07:00 |
|
|
Bhavin Patel
|
b5258b99e4
|
Update detect_psexec_with_accepteula_flag.yml
|
2025-04-21 13:00:03 -07:00 |
|
|
Bhavin Patel
|
366474792d
|
Update cisco_secure_firewall___rare_snort_rule_triggered.yml
|
2025-04-21 12:52:17 -07:00 |
|
|
Bhavin Patel
|
bd617e1211
|
Update windows_powershell_invoke_restmethod_ip_information_collection.yml
fix threat object
|
2025-04-21 12:27:30 -07:00 |
|
|
Bhavin Patel
|
5bd5a53938
|
updating searches
|
2025-04-21 12:13:42 -07:00 |
|
|
Eric
|
a219deb751
|
Merge branch 'develop' into water
|
2025-04-21 10:25:16 -07:00 |
|
|
Michael Haag
|
677fe6a7f9
|
Update windows_msc_eviltwin_directory_path_manipulation.yml
|
2025-04-21 10:25:39 -06:00 |
|
|
Bhavin Patel
|
078b89e774
|
Merge pull request #3475 from splunk/dep_cli
Deprecate CLI updates
|
2025-04-18 13:56:23 -07:00 |
|
|
Bhavin Patel
|
067eb13fe1
|
Merge branch 'develop' into dep_cli
|
2025-04-18 13:48:27 -07:00 |
|
|
Bhavin Patel
|
482cdc2ee9
|
Merge pull request #3462 from splunk/crushingit
Haag's Crushed Shell: A Tale of CrushFTP Exploitation
|
2025-04-18 13:48:18 -07:00 |
|
|
Bhavin Patel
|
f26d6beda1
|
updating yaml
|
2025-04-18 13:42:29 -07:00 |
|
|
Bhavin Patel
|
93a1b752fe
|
updating this detection
|
2025-04-18 13:35:11 -07:00 |
|
|
Bhavin Patel
|
426d54d99d
|
updating cli flags
|
2025-04-18 13:29:32 -07:00 |
|
|
Bhavin Patel
|
bb2045cce0
|
Merge branch 'develop' into crushingit
|
2025-04-18 12:45:18 -07:00 |
|
|
Michael Haag
|
9f8f28c0b5
|
Update crushftp_max_simultaneous_users_from_ip.yml
|
2025-04-18 13:27:09 -06:00 |
|
|
Michael Haag
|
95049154e9
|
Update crushftp_authentication_bypass_exploitation.yml
|
2025-04-18 13:25:39 -06:00 |
|