 P4T12ICK
|
438aa44e6d
|
data source improvements
|
2025-10-17 07:40:10 +02:00 |
|
|
Rod Soto
|
0bcb54b6f9
|
Ollama TA detections (#3710)
* commit1oll
* olldet2
* olldet3
* fixeddet3
* fixsp
* olldet4
* olldet5
* detoll6
* olldet7
* olldet8
* datasets
* testfixes
* modifiedtasearch
* lotsofixes
* fixednewta
* addedmorerefs
* fixedatasource
* fixedthreatobject
* fixedetectionandalertmessage
* fixedalermessage
* fixedquotes
* fixedhowtoimp
* fixeddescriptionandhowto
* changedestforuripat
* fixedowasplink
* Update detections/application/ollama_possible_api_endpoint_scan_reconnaissance.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
* Update detections/application/ollama_possible_rce_via_model_loading.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
* Update detections/application/ollama_possible_memory_exhaustion_resource_abuse.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
* protoexnassuggestions
* mionr
* remove index=*
---------
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
Co-authored-by: Bhavin Patel <bpatel@splunk.com>
|
2025-10-13 21:54:37 +02:00 |
|
|
Rod Soto
|
6cf5b0f8f6
|
Copilot based Detections (#3693)
* det1
* fixeddt1
* det2
* d3
* det4
* djbk
* d6
* d7
* d8
* addedlnkds
* fixsctype
* pipegone
* fixp
* fixdevices
* jbfix
* datasetfix
* exp
* fixsynthax
* changedstory
* changeprinus
* improvedht
* changedSenderuser
* datas
* fixdoublesearch
* fixedpi
* fixeddescriptionsuser
* fixdatalink
* exportedlogsdatasource
* fixedhowtodatasource
* updating risk stuff
---------
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
Co-authored-by: Bhavin Patel <bpatel@splunk.com>
|
2025-10-13 12:14:09 -07:00 |
|
|
patel-bhavin
|
5f36e1ea07
|
Updated TAs
|
2025-10-10 06:57:53 +00:00 |
|
|
patel-bhavin
|
73097a131f
|
Updated TAs
|
2025-10-09 06:58:04 +00:00 |
|
|
patel-bhavin
|
50284777f7
|
Updated TAs
|
2025-10-08 06:57:56 +00:00 |
|
|
patel-bhavin
|
96cfc3ee82
|
Updated TAs
|
2025-10-07 06:58:20 +00:00 |
|
|
patel-bhavin
|
807bd7730e
|
Updated TAs
|
2025-10-06 06:58:11 +00:00 |
|
|
patel-bhavin
|
4f4485d8bd
|
Updated TAs
|
2025-10-02 06:58:12 +00:00 |
|
|
Bhavin Patel
|
afb75a6bac
|
Merge branch 'develop' into ctl_515
|
2025-09-29 12:07:09 -07:00 |
|
|
patel-bhavin
|
b12935d33c
|
Updated TAs
|
2025-09-29 06:59:13 +00:00 |
|
|
Bhavin Patel
|
4d7faff280
|
link for debug logging
|
2025-09-25 16:35:50 -07:00 |
|
|
Bhavin Patel
|
6fc52ccd51
|
updating to text
|
2025-09-25 16:21:47 -07:00 |
|
|
Bhavin Patel
|
fd9394687e
|
move to public
|
2025-09-25 13:05:25 -07:00 |
|
|
Bhavin Patel
|
5727b39bf8
|
updating rewuired output fields
|
2025-09-17 15:38:45 -07:00 |
|
|
patel-bhavin
|
8b3e0ef183
|
Updated TAs
|
2025-09-11 06:58:13 +00:00 |
|
|
patel-bhavin
|
5f529c8858
|
Updated TAs
|
2025-09-10 06:57:45 +00:00 |
|
|
patel-bhavin
|
9a0663e70a
|
Updated TAs
|
2025-09-08 06:58:28 +00:00 |
|
|
patel-bhavin
|
ea22018d32
|
Updated TAs
|
2025-08-27 06:57:46 +00:00 |
|
|
patel-bhavin
|
e4135caf6e
|
Updated TAs
|
2025-08-25 06:59:36 +00:00 |
|
|
Bhavin Patel
|
7541c45be5
|
data source description
|
2025-08-21 11:24:20 -07:00 |
|
|
Bhavin Patel
|
c31013241b
|
updatings with snort detection and lookup also contentctl
|
2025-08-21 09:43:02 -07:00 |
|
|
Michael Haag
|
125486536c
|
DS + new
|
2025-08-21 10:08:59 -06:00 |
|
|
Bhavin Patel
|
dc9bd32b13
|
udpating searches
|
2025-08-18 16:31:03 -07:00 |
|
|
Michael Haag
|
34d8db9847
|
updates
|
2025-08-18 16:21:35 -06:00 |
|
|
Michael Haag
|
1f709a9d67
|
The Lost Payload: MSIX Resurrection
"They thought it was just a package."
|
2025-08-18 11:46:34 -06:00 |
|
|
patel-bhavin
|
9572eb1853
|
Updated TAs
|
2025-08-11 07:02:06 +00:00 |
|
|
patel-bhavin
|
fc4089f8bd
|
Updated TAs
|
2025-08-07 07:02:29 +00:00 |
|
|
Bhavin Patel
|
2c6248de85
|
updating based on request from Ryan Long
|
2025-08-04 13:56:35 -05:00 |
|
|
patel-bhavin
|
391fedba18
|
Updated TAs
|
2025-07-29 07:01:46 +00:00 |
|
|
patel-bhavin
|
6755ee0a5a
|
Updated TAs
|
2025-07-22 07:01:02 +00:00 |
|
|
Bhavin Patel
|
d3082fc262
|
minor
|
2025-07-21 14:43:12 -07:00 |
|
|
Patrick Bareiss
|
034c2a7bf6
|
feedback review
|
2025-07-21 09:47:20 +02:00 |
|
|
Bhavin Patel
|
efc331be05
|
Merge branch 'develop' into duo_detections_1
|
2025-07-18 13:50:53 -07:00 |
|
|
Raven Tait
|
8e02ae92a9
|
Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections
|
2025-07-18 14:56:31 -04:00 |
|
|
Raven Tait
|
c7974920c3
|
add output_fields to datasource
|
2025-07-18 14:56:30 -04:00 |
|
|
Lou Stella
|
c8ed36821e
|
Merge branch 'develop' into esxi_detections
|
2025-07-18 11:27:55 -05:00 |
|
|
patel-bhavin
|
2418f8cd13
|
Updated TAs
|
2025-07-18 07:01:20 +00:00 |
|
|
Lou Stella
|
1d5e468d18
|
Merge branch 'develop' into esxi_detections
|
2025-07-16 13:20:54 -05:00 |
|
|
Raven Tait
|
e16ce3b350
|
Add vmware data source
Add vmware data source
|
2025-07-16 14:16:23 -04:00 |
|
|
Bhavin Patel
|
63ef9cc053
|
updating sourcetype values to PascalCase
|
2025-07-10 13:21:47 -07:00 |
|
|
P4T12ICK
|
e143fac759
|
Merge branch 'develop' into duo_detections_1
|
2025-07-10 13:51:02 +02:00 |
|
|
Patrick Bareiss
|
8601a2174a
|
Cisco Duo Detections
|
2025-07-10 13:39:55 +02:00 |
|
|
patel-bhavin
|
e9ab572d46
|
Updated TAs
|
2025-07-10 07:00:35 +00:00 |
|
|
patel-bhavin
|
2d930a03c7
|
Updated TAs
|
2025-07-09 07:00:28 +00:00 |
|
|
Bhavin Patel
|
1b5d0d28f5
|
updating the app_name
|
2025-07-07 15:55:23 -07:00 |
|
|
Nasreddine Bencherchali
|
80092eceb1
|
Merge branch 'develop' into nvm-batch1
|
2025-07-07 20:46:28 +02:00 |
|
|
Bhavin Patel
|
254d92ebc9
|
Merge branch 'develop' into cs_events
|
2025-07-07 07:58:47 -07:00 |
|
|
Nasreddine Bencherchali
|
8ffb683440
|
Merge branch 'develop' into nvm-batch1
|
2025-07-07 01:23:13 +02:00 |
|
|
patel-bhavin
|
5ea6155d96
|
Updated TAs
|
2025-07-04 07:00:30 +00:00 |
|