51 Commits

Author	SHA1	Message	Date
pyth0n1c	f1dd70da1e	update and pull in all the latest changes from ... develop branch	2025-02-14 10:22:46 -08:00
pyth0n1c	fdaa038eab	Finish removing extra fields, or renaming ... misnamed fields, in endpoint detections	2025-01-03 15:47:32 -08:00
ljstella	357eb89124	Rename to A&I compatible user field	2024-12-16 12:32:25 -06:00
Lou Stella	88fd263606	Merge branch 'develop' into rba_migration	2024-11-22 08:36:33 -06:00
tccontre	4470cd3282	pxa_stealer	2024-11-18 17:28:31 +01:00
tccontre	02cb973048	pxa_stealer	2024-11-18 17:19:34 +01:00
ljstella	bc14854c55	endpoint: more typefixes	2024-11-15 10:36:13 -06:00
ljstella	c9186e0b7d	endpoint: lowercase rba types	2024-11-15 10:16:37 -06:00
ljstella	514123089d	endpoint detection score field rename	2024-11-15 09:49:53 -06:00
ljstella	f88eb16c6f	endpoint detection score fix	2024-11-15 09:34:59 -06:00
ljstella	92cc97a5a7	endpoint first pass	2024-11-14 15:44:51 -06:00
Bhavin Patel	a7c0940d17	Branch was auto-updated.	2024-11-01 14:51:56 -07:00
research-bot	f6a5e162e7	xml to Xml	2024-11-01 13:39:20 -07:00
Bhavin Patel	6e8653e5da	Branch was auto-updated.	2024-10-28 10:23:24 -07:00
Bhavin Patel	0bb378b19b	updating drilldowns	2024-10-24 14:13:05 -07:00
Bhavin Patel	8b03f3d58f	updating all detections with quotes	2024-10-24 14:08:37 -07:00
Bhavin Patel	7bc11be7dc	updating drilldown_formatting	2024-10-23 18:25:39 -07:00
Bhavin Patel	385ac7adc1	remove end hours	2024-10-23 17:52:24 -07:00
Bhavin Patel	5a237b4d5b	Branch was auto-updated.	2024-10-17 09:07:56 -07:00
tccontre	cfb5a6bca3	braodo_stealer	2024-10-15 11:34:59 +02:00
Bhavin Patel	cf169b3de0	adding drilldowns to all	2024-09-30 22:04:57 +05:30
tccontre	81bf565399	moon_peak_coverage	2024-08-21 16:38:52 +02:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
tccontre	566287f6b8	iceid_dfir_coverage	2023-05-23 15:41:47 +02:00
tccontre	f276d22e6c	data_destruction_wiper_story	2023-04-14 10:50:14 +02:00
P4T12ICK	78909f6429	merged with develop	2023-03-03 12:40:16 +01:00
tccontre	f1628eefd3	asyncrat-onenote-chain2	2023-01-25 15:08:29 +01:00
P4T12ICK	fd0c8b349f	updated tags	2023-01-09 09:33:30 +01:00
P4T12ICK	5ae53c9368	Migrated all detections to v4	2023-01-03 13:42:10 +01:00
mhaag-spl	0ae31b8ef1	streamreader	2022-06-29 10:00:23 -06:00
mhaag-spl	dcc707ce36	stream	2022-05-02 13:38:30 -06:00
mhaag-spl	2b4a3b98fc	Merge branch 'develop' into 4104allday	2022-04-26 11:22:18 -06:00
Rod Soto	8298acf18e	powershelldetectionstaghermetic	2022-03-31 15:29:51 -07:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
mhaag-spl	cf31629e06	Converted detections to XML	2022-02-25 15:30:49 -07:00
P4T12ICK	4fd8604b9a	removed SAAWS and automated_detection_testing flag	2022-01-27 09:50:45 +01:00
P4T12ICK	84092434a2	fixed more detections	2022-01-18 12:53:54 +01:00
tccontre	e0299db411	CARS_UPDATE_MITRE_ID_B5 ... CARS_UPDATE_MITRE_ID_B5	2021-10-13 11:20:47 +02:00
P4T12ICK	5e6e987fb7	resolved merge conflicts	2021-07-21 09:22:09 +02:00
research bot	3740535cca	updating docs and package bits [ci skip]	2021-07-20 17:49:09 +00:00
github-actions[bot]	23c103c192	Branch was auto-updated.	2021-07-20 15:47:19 +00:00
P4T12ICK	4ddd09fd87	add analytic types to detections	2021-07-19 17:12:54 +02:00
tccontre	02c9da2e07	rba task	2021-07-14 10:13:42 +02:00
research bot	eb3a3607f0	updating docs and package bits [ci skip]	2021-06-24 18:23:02 +00:00
mhaag-spl	ad85879e89	Fixing descriptions	2021-06-18 13:41:54 -06:00
root	c8ad2a7428	Added detection testing service results inPowershell Processing Stream Of Data	2021-06-15 15:20:44 +00:00
tccontre	bed3227224	wild_check	2021-06-15 16:43:23 +02:00
root	aee919474e	Added detection testing service results inPowershell Processing Stream Of Data	2021-06-14 10:48:43 +00:00