10 Commits

Author SHA1 Message Date
Eric McGinnis db8c7c8509 Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit. 2026-05-13 14:02:27 -07:00
Bhavin Patel 063a6fc38b Updated TAs (#4026)
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com>
2026-04-23 10:16:37 +05:30
Bhavin Patel 6ee1a47e71 Updated TAs (#4022)
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com>
2026-04-20 12:18:40 +02:00
Andrei Banaru c6241660c7 Remove missing fields in Windows Event Log Cleared detection (#4001)
* fix: remove missing fields in Windows Event Log Cleared detection

* fix: source should be XmlWinEventLog:System

* update ds and output fields

* Update windows_event_log_security_1102.yml

---------

Co-authored-by: Andrei Banaru <a.banaru@iaea.org>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2026-04-16 10:52:16 +05:30
Bhavin Patel 78d7f8cebd Updated TAs (#3832)
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com>
2025-12-12 15:06:49 +01:00
Bhavin Patel 637e44267d Updated TAs (#3782)
Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com>
2025-11-13 12:31:49 -08:00
Bhavin Patel e42da6eaf3 Automated Splunk TA Update 440 (#3761)
* Updated TAs

* Applink

* Fix - Windows Kerberos Local Successful Logon (#3763)

* fixes?

* Update windows_svchost_exe_parent_process_anomaly.yml

revert

* manual test

* unicode

---------

Co-authored-by: patel-bhavin <7771446+patel-bhavin@users.noreply.github.com>
2025-11-10 12:24:06 -08:00
Bhavin Patel 63ef9cc053 updating sourcetype values to PascalCase 2025-07-10 13:21:47 -07:00
Patrick Bareiss ee813d6b39 output normalisation 2025-03-05 14:25:32 +01:00
research-bot 04c2812a7d updating windows data sources 2025-02-21 11:41:15 -08:00