15 Commits

Author SHA1 Message Date
Eric McGinnis db8c7c8509 Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit. 2026-05-13 14:02:27 -07:00
Nasreddine Bencherchali 11c909f725 Add YAML Formatting Job (#3889)
* Add YAML formatting and validation infrastructure

- Add yamlfmt configuration (.yamlfmt) with 4-space indent, LF line endings
- Add yamllint configuration (.yamllint) for syntax validation (detections/ only)
- Add pre-commit hook for automatic YAML formatting
- Add CI validation script with unified error output
- Add GitHub Actions workflow for PR validation
- Add documentation for setup and usage
- Support custom yamlfmt binary path via --yamlfmt-path flag

* comment yaml check from pre-commit

* apply yamlfmt

* Update yaml-validation.yml

* Update yaml-validation.yml

* application folder search formatting

* cloud folder search formatting

* web folder search formatting

* network folder search formatting

* endpoint folder search formatting

* resolve first conflict

* apply formatting

* remove additional pipe

* Update README.md

* update versions

* restore and update formatting (#3920)

---------

Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
2026-02-26 00:00:35 +05:30
Eric d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. 2025-05-02 14:10:46 -07:00
Patrick Bareiss 1c9debe9a6 update versions 2025-03-14 13:47:44 +01:00
Patrick Bareiss b52bac9b19 output normalization endpoint 2025-02-14 12:40:57 +01:00
research-bot 9b8328a26a updating version 2025-02-05 11:57:50 -08:00
research-bot 77a2d6c689 conflcits with rba migration 2025-01-21 18:24:18 -08:00
research-bot 3d646fa16d updating version 2025-01-21 14:34:51 -08:00
research-bot 17a1b2dbba minor space 2025-01-10 12:32:08 -08:00
pyth0n1c fdaa038eab Finish removing extra fields, or renaming
misnamed fields, in endpoint detections
2025-01-03 15:47:32 -08:00
research-bot 58c529961f remove drilldowns for Hunting detection, remove empty CVE 2024-11-20 12:02:20 -08:00
Michael Haag 94579d6cd8 fixor 2024-11-20 12:56:48 -07:00
Michael Haag 6e9c9173e6 one moar timee 2024-11-14 21:16:37 -07:00
Michael Haag 3e224d8326 Update windows_bitlockertogo_process_execution.yml 2024-11-14 09:22:12 -07:00
Michael Haag 317b01c532 Updates and moar 2024-11-13 13:51:21 -07:00