db8c7c8509
Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit.
2026-05-13 14:02:27 -07:00
063a6fc38b
Updated TAs ( #4026 )
...
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com >
2026-04-23 10:16:37 +05:30
6ee1a47e71
Updated TAs ( #4022 )
...
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com >
2026-04-20 12:18:40 +02:00
78d7f8cebd
Updated TAs ( #3832 )
...
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com >
2025-12-12 15:06:49 +01:00
637e44267d
Updated TAs ( #3782 )
...
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com >
2025-11-13 12:31:49 -08:00
e42da6eaf3
Automated Splunk TA Update 440 ( #3761 )
...
* Updated TAs
* Applink
* Fix - Windows Kerberos Local Successful Logon (#3763 )
* fixes?
* Update windows_svchost_exe_parent_process_anomaly.yml
revert
* manual test
* unicode
---------
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com >
2025-11-10 12:24:06 -08:00
63ef9cc053
updating sourcetype values to PascalCase
2025-07-10 13:21:47 -07:00
641c590df7
Merge branch 'develop' into output_normalization_endpoint
2025-03-19 15:10:33 +01:00
da5c9b9bbd
fix separator_value field
2025-03-18 11:37:35 -07:00
4c3f45bcbf
output normalization endpoint
2025-02-26 09:23:00 +01:00
6954cddee2
Fix unintended spacing updates
2025-01-23 10:09:09 -07:00
cbac872e41
Update version and modified date. Fix reference in detection.
2025-01-23 09:38:13 -07:00
aa7112d6bc
Add descriptions and mitre components to data sources
2025-01-21 17:00:15 -07:00
7bbed8dc3d
Updated TAs
2024-11-14 06:57:45 +00:00
1899784adb
Updated TAs
2024-10-30 06:57:49 +00:00
d5fb6c520c
update ymls so that they refer to the correct names
...
of datasources. this was mostly removing spaces
to convert "Sysmon Event ID N" to
"Sysmon EventID N". Also fix some ymls
that used the field "data_sources" when
it should be "data_source"
2024-09-26 14:48:44 -07:00
f479e762e6
Improve TA names to match the naming in Splunk
2024-07-31 09:58:03 +02:00
c0774b9762
Better data source handling
2024-07-24 13:25:59 +02:00
Eric McGinnis