342 Commits

Author	SHA1	Message	Date
research-bot	ebdd770afd	udpating name	2025-02-20 15:08:25 -08:00
research-bot	d25d712781	updating detection	2025-02-20 15:07:29 -08:00
Bhavin Patel	49fa1c1900	Merge branch 'develop' into cisco_ai_defense	2025-02-20 15:02:29 -08:00
research-bot	aba0bdc4d3	updating detection	2025-02-20 14:47:37 -08:00
research-bot	63facf9e78	updating detection	2025-02-20 14:47:35 -08:00
research-bot	ecf4948604	manual test	2025-02-20 08:52:07 -08:00
Bhavin Patel	a7425f0d4f	Update cisco_ai_defense_security_alerts.yml	2025-02-19 09:52:08 -08:00
pyth0n1c	2ae421d724	Merge branch 'develop' into fix_datasource_typos	2025-02-18 16:24:39 -08:00
Bhavin Patel	9ae1c7acff	kfp	2025-02-18 08:13:55 -08:00
Bhavin Patel	44ffd97006	typo ... Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>	2025-02-18 08:05:35 -08:00
pyth0n1c	f2e7dbfbe7	bump versions and dates on modified detections	2025-02-17 15:46:23 -08:00
pyth0n1c	4c80dba4de	Fix some typos in the data_source fields. Many detections were referencing data sources that ACTUALLY exist, but by the wrong name.	2025-02-17 12:11:35 -08:00
research-bot	2933334f4c	updaing for validate	2025-02-14 13:42:13 -08:00
research-bot	9446ac7782	updating test	2025-02-14 13:07:47 -08:00
research-bot	c1a10beef5	drafting a search	2025-02-14 12:53:18 -08:00
Bhavin Patel	2ba144b959	Update cisco_secure_application_alerts.yml	2025-02-14 12:06:20 -08:00
research-bot	3bb8618ac2	updating as per Lou's feedback	2025-02-13 15:57:49 -08:00
Bhavin Patel	d5f3bf613f	Add manual_test flag	2025-02-13 12:24:36 -08:00
Bhavin Patel	0392bfe9c0	Update cisco_secure_application_alerts.yml	2025-02-13 11:48:16 -08:00
Bhavin Patel	690874895b	Merge branch 'develop' into app_dynamics_alerts	2025-02-13 11:15:10 -08:00
research-bot	af6077f5f0	updating spl	2025-02-12 12:25:10 -08:00
pyth0n1c	45599e0b18	Clean up MITRE Tagging. When a type is defined, such as T1003, DO NOT allow a subtype such as T1003.001 to be defined. Remove the generic type T1003 and keep the subtype T1003.001. However, it is acceptable for a subtype to be defined or for a type to be defined separately. It is also okay for multiple subtypes to be defined.	2025-02-10 12:28:22 -08:00
research-bot	c8aabc01db	updating yaml	2025-02-05 11:26:47 -08:00
research-bot	76a9a02c9e	updating versions	2025-02-05 10:49:03 -08:00
research-bot	5e3991de7c	updating datasiource	2025-02-04 11:59:58 -08:00
research-bot	0544e801b2	adding draft detections	2025-02-04 11:55:10 -08:00
research-bot	6c3e7df1ad	notable to finding 2	2025-01-24 17:03:47 -08:00
research-bot	217666c5d1	all but one fixes	2025-01-23 09:56:40 -08:00
research-bot	3d646fa16d	updating version	2025-01-21 14:34:51 -08:00
pyth0n1c	d1442c2805	remove update_timestamps, confidence, impact, ... related_fields, and risk_score from detections	2025-01-03 15:25:52 -08:00
ljstella	9f14118bbc	application: cleanup tbd messages	2024-11-27 12:32:56 -06:00
Lou Stella	88fd263606	Merge branch 'develop' into rba_migration	2024-11-22 08:36:33 -06:00
Bhavin Patel	c5e2c7ef27	Branch was auto-updated.	2024-11-19 14:18:39 -08:00
research-bot	7f109d5ecc	updating dataset link	2024-11-19 14:02:59 -08:00
research-bot	f605a70b33	updating drilldown	2024-11-19 13:14:11 -08:00
research-bot	18164e9370	updating to prod	2024-11-19 12:56:19 -08:00
research-bot	1788541f29	updating detection after test	2024-11-19 12:24:48 -08:00
ljstella	67dec1e7cf	application: threat object type cleanup	2024-11-15 12:54:25 -06:00
ljstella	26e4c85baf	application: remove rba config from correlations	2024-11-15 11:41:24 -06:00
ljstella	c3f94b6101	application: remove rba from hunting	2024-11-15 11:01:49 -06:00
Michael Haag	d75dc81630	vers up	2024-11-15 09:52:37 -07:00
ljstella	9225593619	application: more typefixes	2024-11-15 10:47:57 -06:00
ljstella	43691254af	artifact of cleanup	2024-11-15 10:38:14 -06:00
ljstella	18a44d5f42	application: more typefixes	2024-11-15 10:35:52 -06:00
ljstella	e902ee2c36	application: ip address typefix	2024-11-15 10:25:52 -06:00
ljstella	92ab1d5e16	application: lowercase rba types	2024-11-15 10:18:09 -06:00
ljstella	d4a93b0268	Application detection score field rename	2024-11-15 09:49:32 -06:00
ljstella	c6739f2c72	application detections score fix	2024-11-15 09:41:01 -06:00
Nasreddine Bencherchali	99bb3994cd	tagging content and typo fixes	2024-11-14 20:01:29 +01:00
ljstella	a0a94f389b	Application detections	2024-11-13 15:47:11 -06:00