Commit Graph

27121 Commits

Author SHA1 Message Date
Bhavin Patel f11c81adaa update ctl 2025-05-15 16:03:57 -07:00
Bhavin Patel 34632f5b81 Merge branch 'develop' into snort_by_threat_actor 2025-05-15 12:51:12 -07:00
Bhavin Patel 6e6a5d3c50 Merge pull request #3513 from splunk/xworm
xworm
2025-05-15 12:50:33 -07:00
Bhavin Patel 655b836b4d Merge branch 'develop' into xworm 2025-05-15 12:01:11 -07:00
Bhavin Patel 10c844457a pushing a detections renamed 2025-05-15 11:52:52 -07:00
Bhavin Patel 7a214c4fd4 Merge pull request #3522 from splunk/extra_field_removal
Removing duplicate creation of user
2025-05-15 11:42:52 -07:00
ljstella 57fddbf24e Bumping version & date 2025-05-15 08:04:29 -05:00
ljstella d49440f4fe Removing duplicate creation of user 2025-05-15 07:45:56 -05:00
Nasreddine Bencherchali fee7d91532 Apply suggestions from code review 2025-05-15 11:34:23 +02:00
Nasreddine Bencherchali 78b11fa6a0 Update threat_snort_count.yml 2025-05-15 11:32:13 +02:00
Nasreddine Bencherchali 559f472227 Rename threat_actor_snort_count.yml to threat_snort_count.yml 2025-05-15 11:31:59 +02:00
Nasreddine Bencherchali 42da135696 Rename threat_actor_snort_count.csv to threat_snort_count.csv 2025-05-15 11:31:40 +02:00
Nasreddine Bencherchali 8330f6bdf1 Apply suggestions from code review 2025-05-15 11:31:17 +02:00
Bhavin Patel 7e396e000e panel descirption 2025-05-14 17:54:52 -07:00
Bhavin Patel 97f8ca35ba update faulty query 2025-05-14 17:16:34 -07:00
Bhavin Patel 95a2748196 final for today 2025-05-14 16:29:37 -07:00
Bhavin Patel f2e712dd1e updating overview text 2025-05-14 15:56:09 -07:00
Bhavin Patel dcd276fc27 panel descirptions 2025-05-14 14:52:56 -07:00
Bhavin Patel ac6b1877f8 after testing the build from CI 2025-05-14 14:28:37 -07:00
Bhavin Patel 20fa8ebb23 remove CSV from the dashboard 2025-05-14 14:15:22 -07:00
Bhavin Patel e95c2d480d updating code to use udpated names of lookup files 2025-05-14 13:50:22 -07:00
Bhavin Patel 3900c7e5e0 Update detections/network/cisco_secure_firewall___intrusion_events_by_threat_actors.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:58:08 -07:00
Bhavin Patel 1abed8cb5b Update detections/network/cisco_secure_firewall___intrusion_events_by_threat_actors.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:57:51 -07:00
Bhavin Patel 80a6ceac51 Update dashboards/threat_actors_by_snort_ids.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:57:42 -07:00
Bhavin Patel 289fa8ae68 Update dashboards/threat_actors_by_snort_ids.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:57:33 -07:00
Bhavin Patel b2c3875e02 Update dashboards/threat_actors_by_snort_ids.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:57:22 -07:00
Bhavin Patel a3b8e1fb84 Update dashboards/threat_actors_by_snort_ids.json
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:57:08 -07:00
Bhavin Patel 08f9db1dcd Update dashboards/threat_actors_by_snort_ids.json
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:56:59 -07:00
Bhavin Patel a50e0e9249 Update dashboards/threat_actors_by_snort_ids.json
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:56:46 -07:00
Bhavin Patel 225c4d03d3 Update dashboards/threat_actors_by_snort_ids.json
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:56:29 -07:00
Bhavin Patel 60d4a13c29 Update dashboards/threat_actors_by_snort_ids.json
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-05-14 09:56:22 -07:00
Bhavin Patel 823652f4e2 lookup update 2025-05-13 17:41:13 -07:00
Bhavin Patel 8b219cb05a updating json - with nas feedback 2025-05-13 17:17:32 -07:00
Bhavin Patel d692f5b4a6 updating working version 2 2025-05-13 16:54:26 -07:00
Bhavin Patel bb5a3852be moar refinements 2025-05-13 14:57:54 -07:00
Bhavin Patel 8f445c574a updating lookup content and query 2025-05-13 13:57:44 -07:00
Bhavin Patel c1eef4cf0f updating csv 2025-05-13 12:59:17 -07:00
Bhavin Patel 59d229c813 Merge branch 'develop' into snort_by_threat_actor 2025-05-13 12:53:11 -07:00
Bhavin Patel dbc1da9bf9 udpate spl 2025-05-13 12:52:53 -07:00
Bhavin Patel 0b0e5114ab adding two lookups and updating query for test 2025-05-13 12:44:30 -07:00
Bhavin Patel c599382875 Merge pull request #3521 from splunk/auto-ta-update-264
Automated Splunk TA Update 264
2025-05-13 11:56:02 -07:00
Bhavin Patel 5940725605 rename file on AWS 2025-05-13 10:34:30 -07:00
Bhavin Patel 9ee4a5b4e9 CI changes for errors 2025-05-13 10:21:06 -07:00
Bhavin Patel 89f8b5ff7d s3 app name 2025-05-13 09:37:15 -07:00
patel-bhavin 2c798ffb2d Updated TAs 2025-05-13 06:58:01 +00:00
Bhavin Patel a030b577c0 updating how to implement 2025-05-12 16:17:23 -07:00
Bhavin Patel 29a64f2b56 change count to 4 based on dataset 2025-05-12 16:15:45 -07:00
Bhavin Patel 6731ba38d5 remove csv from search 2025-05-12 15:57:30 -07:00
Bhavin Patel 933ff68b40 Merge branch 'develop' into snort_by_threat_actor 2025-05-12 15:36:31 -07:00
Bhavin Patel 98ca7c70b9 yaml updates 2025-05-12 15:35:58 -07:00