Commit Graph

31 Commits

Author SHA1 Message Date
Nasreddine Bencherchali 21ee673940 Fix Issues & Updates (#3705)
* Fix Issues and Updates

* Update add_or_set_windows_defender_exclusion.yml

* Update windows_curl_download_to_suspicious_path.yml

* Fix more issues and bugs

* Update deprecation_mapping.YML

* Update windows_application_whitelisting_bypass_attempt_via_rundll32.yml

* More updates and fixes

* update `Windows Change Default File Association For No File Ext`

* A couple more updates for ya

* rename

* add / update rules

* Update windows_symlink_evaluation_change_via_fsutil.yml

* Update windows_symlink_evaluation_change_via_fsutil.yml

* Update linux_service_started_or_enabled.yml

* Update linux_service_started_or_enabled.yml

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2025-10-13 09:18:21 -07:00
Br3akp0int e41bd98cb9 fix_net_profile_analytic (#3689)
* fix_net_profile_analytic

* fix_net_profile_analytic

* fix_net_profile_analytic

* fix_net_profile_analytic

* fix_net_profile_analytic

* fix_net_profile_analytic

* fix_net_profile_analytic

* Update windows_set_network_profile_category_to_private_via_registry.yml

* Update deprecation_mapping.YML

* Remove deprecated web fraud detection mapping

Removed deprecated analytic story for web fraud detection.

---------

Co-authored-by: Teoderick Contreras <tcontreras@splunk.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-10-10 17:20:14 +00:00
Bhavin Patel a69230f087 removing staged detection 2025-08-26 09:46:54 -07:00
Bhavin Patel 5097cd5fef removed detections and version bump 2025-08-06 14:08:17 -05:00
Bhavin Patel 2c6248de85 updating based on request from Ryan Long 2025-08-04 13:56:35 -05:00
Bhavin Patel 3666bfa9f4 prep for next release 2025-07-09 11:25:06 -07:00
Nasreddine Bencherchali cb8f4bb6f3 Update removed/deprecation_mapping.YML 2025-07-07 17:13:15 +02:00
Nasreddine Bencherchali f49bd318d9 update time 🚀 2025-06-30 13:55:55 +02:00
Eric McGinnis 81efb271c3 fixed status of newly removed detection 2025-06-17 12:47:33 -07:00
Eric McGinnis 64aac40e82 Remove deprecated detections in line with prepublished guidance 2025-06-17 12:44:39 -07:00
Nasreddine Bencherchali 6c5aa91dbf more updates 2025-06-16 23:38:10 +02:00
Eric McGinnis 23d0f236b5 Move deprecated detections to removed. update status too 2025-05-08 14:52:52 -07:00
Bhavin Patel 7742f511b3 Merge branch 'develop' into deprecate_rmm_hunt 2025-05-01 11:53:34 -07:00
Bhavin Patel a7f0e38586 updating removed in version 2025-05-01 11:33:07 -07:00
Bhavin Patel 884eede4ce updating search 2025-04-30 12:14:30 -07:00
Nasreddine Bencherchali eb99c36454 Update deprecation_mapping.YML 2025-04-24 19:48:12 +02:00
Nasreddine Bencherchali 44b110d9e6 update date and deprecation replacement 2025-04-24 19:43:37 +02:00
Nasreddine Bencherchali ce07cb9ded Update deprecation_mapping.YML 2025-04-24 19:40:31 +02:00
Nasreddine Bencherchali 75cb7af28d Update deprecation_mapping.YML 2025-04-24 19:14:31 +02:00
Nasreddine Bencherchali 194d99c655 Update deprecation_mapping.YML 2025-04-24 18:55:29 +02:00
Nasreddine Bencherchali 5676c6691c Update deprecation_mapping.YML 2025-04-24 18:36:06 +02:00
Bhavin Patel f26d6beda1 updating yaml 2025-04-18 13:42:29 -07:00
Bhavin Patel 93a1b752fe updating this detection 2025-04-18 13:35:11 -07:00
Bhavin Patel 3e51bbca2c updating replacement name 2025-04-16 15:29:16 -07:00
Bhavin Patel 5c7c567a3f updating status 2025-04-16 15:07:32 -07:00
Bhavin Patel 1a8c89957b baseline to removed 2025-04-16 15:00:47 -07:00
Bhavin Patel e424e64086 remove private from this mapping 2025-04-16 13:20:07 -07:00
Bhavin Patel bf3fe8b361 remove yamls and update mapping 2025-04-15 15:19:48 -07:00
Patrick Bareiss 641c590df7 Merge branch 'develop' into output_normalization_endpoint 2025-03-19 15:10:33 +01:00
Eric f096d77d6f Changed the names of some fields due to the use of both deprecated and removed to refer to content in different stages of removal 2025-03-18 14:25:56 -07:00
Eric b1d1ae90d9 rename deprecated directory to removed 2025-03-18 14:14:37 -07:00