Commit Graph

8 Commits

Author SHA1 Message Date
Nasreddine Bencherchali 976c62383e Update Macro Usage (#3840)
* update macro usage

* bump version

* Update detect_hosts_connecting_to_dynamic_domain_providers.yml

* more macro updates
2025-12-18 21:42:06 +05:30
Michael Haag b6083e5076 GhostRedirectors 2025-09-18 13:39:40 -06:00
Eric d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. 2025-05-02 14:10:46 -07:00
Eric fc2be9e0b7 fix pass at attack data name fixes 2025-03-31 17:05:54 -07:00
research-bot f16d54cb04 remove hunting drilldowns and fixing others 2025-02-25 09:04:36 -08:00
Michael Haag bbf63efcb7 Changed to Hunting 2025-02-20 09:29:44 -07:00
Michael Haag a87f5f2461 fixing regex
Thank you @nterl0k
2025-02-14 08:10:38 -07:00
Michael Haag f4a5cb9b4d Haag's SQL Server Story Time: Tales of SQLCMD and Suspicious Queries 📚 2025-02-13 17:14:27 -07:00