21 Commits

Author SHA1 Message Date
Eric McGinnis db8c7c8509 Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit. 2026-05-13 14:02:27 -07:00
patel-bhavin 73097a131f Updated TAs 2025-10-09 06:58:04 +00:00
Bhavin Patel 72e1c0611c Merge branch 'develop' into auto-ta-update-250 2025-05-05 15:05:26 -07:00
Bhavin Patel fcb1c407cd add dest to output_field 2025-05-05 11:07:20 -07:00
Teoderick Contreras 8b9a070ec1 linux_syscall_auditd_update 2025-05-05 10:09:54 +02:00
patel-bhavin 15ed5d18f2 Updated TAs 2025-04-29 06:57:56 +00:00
delgado-jacob bb134be861 Merge remote-tracking branch 'upstream/develop' into datasource_enrichment 2025-03-17 17:04:08 -07:00
Br3akp0int 9614dcd292 Update linux_auditd_syscall.yml 2025-02-21 10:31:56 +01:00
Teoderick Contreras 26b65f5da3 Merge branch 'auditd_sourcetype_update' of https://github.com/splunk/security_content into auditd_detection_updates 2025-02-21 10:26:50 +01:00
Teoderick Contreras 7f09aa976d auditd_detection_updates 2025-02-20 13:36:03 +01:00
Lou Stella 4f6b198e9d Merge branch 'develop' into datasource_enrichment 2025-02-18 15:57:15 -06:00
Lou Stella 9b1c18343b Merge branch 'develop' into auditd_sourcetype_update 2025-02-18 15:00:34 -06:00
patel-bhavin be6b1698a2 Updated TAs 2025-02-05 06:57:54 +00:00
delgado-jacob 6954cddee2 Fix unintended spacing updates 2025-01-23 10:09:09 -07:00
delgado-jacob cbac872e41 Update version and modified date. Fix reference in detection. 2025-01-23 09:38:13 -07:00
delgado-jacob aa7112d6bc Add descriptions and mitre components to data sources 2025-01-21 17:00:15 -07:00
Nasreddine Bencherchali 4dabd5dbd7 Merge branch 'develop' into auditd_sourcetype_update 2025-01-14 12:29:10 +01:00
tccontre acbeeb7f23 linux_datasource_update 2024-12-06 09:28:19 +01:00
tccontre bc09282fb4 auditd_sourcetype_update 2024-09-24 16:54:19 +02:00
tccontre d0b5537cc5 auditd_data_source 2024-08-08 15:00:58 +02:00
Br3akp0int 35e2f0d0cc Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml 2024-08-08 14:56:03 +02:00