277 Commits

Author	SHA1	Message	Date
Nasreddine Bencherchali	21ee673940	Fix Issues & Updates (#3705) ... * Fix Issues and Updates * Update add_or_set_windows_defender_exclusion.yml * Update windows_curl_download_to_suspicious_path.yml * Fix more issues and bugs * Update deprecation_mapping.YML * Update windows_application_whitelisting_bypass_attempt_via_rundll32.yml * More updates and fixes * update `Windows Change Default File Association For No File Ext` * A couple more updates for ya * rename * add / update rules * Update windows_symlink_evaluation_change_via_fsutil.yml * Update windows_symlink_evaluation_change_via_fsutil.yml * Update linux_service_started_or_enabled.yml * Update linux_service_started_or_enabled.yml --------- Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>	2025-10-13 09:18:21 -07:00
Br3akp0int	e41bd98cb9	fix_net_profile_analytic (#3689) ... * fix_net_profile_analytic * fix_net_profile_analytic * fix_net_profile_analytic * fix_net_profile_analytic * fix_net_profile_analytic * fix_net_profile_analytic * fix_net_profile_analytic * Update windows_set_network_profile_category_to_private_via_registry.yml * Update deprecation_mapping.YML * Remove deprecated web fraud detection mapping Removed deprecated analytic story for web fraud detection. --------- Co-authored-by: Teoderick Contreras <tcontreras@splunk.com> Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com> Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>	2025-10-10 17:20:14 +00:00
Bhavin Patel	a69230f087	removing staged detection	2025-08-26 09:46:54 -07:00
Bhavin Patel	5097cd5fef	removed detections and version bump	2025-08-06 14:08:17 -05:00
Bhavin Patel	716592ff40	updating spl	2025-08-04 14:48:58 -05:00
Bhavin Patel	8a8e24ff29	adding macro	2025-08-04 14:45:49 -05:00
Bhavin Patel	ab80c31b85	appinspect	2025-08-04 14:38:02 -05:00
Bhavin Patel	2c6248de85	updating based on request from Ryan Long	2025-08-04 13:56:35 -05:00
Michael Haag	ea0121c2f1	Scattered Spider Tags	2025-07-31 10:54:21 -06:00
Bhavin Patel	3666bfa9f4	prep for next release	2025-07-09 11:25:06 -07:00
Nasreddine Bencherchali	f49bd318d9	update time 🚀	2025-06-30 13:55:55 +02:00
Eric McGinnis	64aac40e82	Remove deprecated detections in line with prepublished guidance	2025-06-17 12:44:39 -07:00
Nasreddine Bencherchali	6c5aa91dbf	more updates	2025-06-16 23:38:10 +02:00
Eric McGinnis	23d0f236b5	Move deprecated detections to removed. update status too	2025-05-08 14:52:52 -07:00
Eric	d9960562b8	Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.	2025-05-02 14:10:46 -07:00
Bhavin Patel	7742f511b3	Merge branch 'develop' into deprecate_rmm_hunt	2025-05-01 11:53:34 -07:00
Bhavin Patel	4d1ff91ee3	updated messaging	2025-04-30 12:24:55 -07:00
Bhavin Patel	884eede4ce	updating search	2025-04-30 12:14:30 -07:00
Nasreddine Bencherchali	1dc4f1c45a	bump versions	2025-04-24 19:53:19 +02:00
Nasreddine Bencherchali	60164de4e7	updates and tunings	2025-04-24 15:15:09 +02:00
Bhavin Patel	bf3fe8b361	remove yamls and update mapping	2025-04-15 15:19:48 -07:00
Bhavin Patel	23219463dc	Merge branch 'develop' into jp_paranoid	2025-04-02 12:07:51 -07:00
Michael Haag	6c40990600	fixes	2025-04-01 15:05:10 -06:00
Patrick Bareiss	7541027f8e	Merge branch 'develop' into output_normalization_endpoint	2025-04-01 09:41:58 +02:00
Bhavin Patel	6408f290aa	Merge branch 'develop' into jp_paranoid	2025-03-28 13:38:11 -07:00
Bhavin Patel	12356f996f	updating detection to previous	2025-03-28 11:39:59 -07:00
Bhavin Patel	3f274b9b83	deprecate and add new	2025-03-28 11:32:34 -07:00
Bhavin Patel	25a3239716	clean up	2025-03-26 13:49:53 -07:00
Bhavin Patel	e5b05500d7	deprecating the old one	2025-03-26 13:45:26 -07:00
Bhavin Patel	c345f920ed	adding gitkeep for empty folders	2025-03-17 18:04:26 -07:00
Bhavin Patel	7f3276c872	Merge branch 'develop' into remove_detections	2025-03-17 14:38:06 -07:00
P4T12ICK	fd9c3f69c5	Merge branch 'develop' into output_normalization_aws	2025-02-27 09:59:00 +01:00
research-bot	2fe8bc5638	remove 152 public detections	2025-02-26 10:39:51 -08:00
Patrick Bareiss	e96239166e	Merge branch 'develop' into output_normalization_aws	2025-02-26 09:35:23 +01:00
Patrick Bareiss	e098dc93c2	version bump	2025-02-26 09:24:11 +01:00
Patrick Bareiss	77cbb835ce	Merge branch 'develop' into github_detections_improvement	2025-02-21 09:37:10 +01:00
Patrick Bareiss	41e69bd182	Merge branch 'develop' into github_detections_improvement	2025-02-21 09:24:24 +01:00
Patrick Bareiss	3c9145b8dd	bug fixes	2025-02-21 09:21:33 +01:00
Bhavin Patel	2ab27cd8c5	Update suspicious_event_log_service_behavior.yml	2025-02-19 11:22:59 +01:00
Nasreddine Bencherchali	805d75c84d	fix: deprecate 2b85aa3d-f5f6-4c2e-a081-a09f6e1c2e40	2025-02-19 11:22:56 +01:00
Patrick Bareiss	60e55f95c5	version bump	2025-02-18 11:18:15 +01:00
Patrick Bareiss	e6ec9a99c5	version bump	2025-02-18 11:11:15 +01:00
Patrick Bareiss	a75adf9558	Revert "version bump" ... This reverts commit 1a3f332ac7.	2025-02-18 10:18:06 +01:00
Patrick Bareiss	0a4e58f9cf	version bump	2025-02-18 10:06:29 +01:00
Patrick Bareiss	1a3f332ac7	version bump	2025-02-18 09:57:11 +01:00
Patrick Bareiss	e2bc6c1a66	Merge branch 'develop' into output_normalization_aws	2025-02-18 09:50:28 +01:00
Patrick Bareiss	3563fdd417	Merge branch 'develop' into github_detections_improvement	2025-02-18 09:38:19 +01:00
Patrick Bareiss	d03cb62686	Merge branch 'data_source_improvements_2' of github.com:splunk/security_content into data_source_improvements_2	2025-02-18 09:13:25 +01:00
Patrick Bareiss	9e588b51b9	Merge branch 'develop' into data_source_improvements_2	2025-02-18 09:08:28 +01:00
pyth0n1c	b9f5735bd3	Merge branch 'develop' into remove_type_and_subtype	2025-02-11 15:38:08 -08:00