 Eric McGinnis
|
db8c7c8509
|
Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit.
|
2026-05-13 14:02:27 -07:00 |
|
|
Bhavin Patel
|
ba59855b1d
|
updating risk drilldowns (#4016)
* updating drilldows
* inspect failures
* updating versions
* updating versins
* chore: empty commit to trigger CI
|
2026-04-17 17:28:53 +05:30 |
|
|
Br3akp0int
|
7293d75700
|
Tagged Analytics Covering the Axios Compromise Post-Exploitation Activity (#3982)
---------
Co-authored-by: Nasreddine Bencherchali <nbencher@cisco.com>
|
2026-04-02 16:07:20 +00:00 |
|
|
Br3akp0int
|
ff78e2d159
|
gh0st (#3973)
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* gh0st
* small changes
* another update
* final fix
---------
Co-authored-by: Teoderick Contreras <tcontreras@splunk.com>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2026-03-30 19:46:33 +05:30 |
|
|
Br3akp0int
|
3da4f7958a
|
anomaly_standard_init_score (#3946)
Co-authored-by: Teoderick Contreras <tcontreras@splunk.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
|
2026-03-10 14:19:08 +05:30 |
|
|
Nasreddine Bencherchali
|
11c909f725
|
Add YAML Formatting Job (#3889)
* Add YAML formatting and validation infrastructure
- Add yamlfmt configuration (.yamlfmt) with 4-space indent, LF line endings
- Add yamllint configuration (.yamllint) for syntax validation (detections/ only)
- Add pre-commit hook for automatic YAML formatting
- Add CI validation script with unified error output
- Add GitHub Actions workflow for PR validation
- Add documentation for setup and usage
- Support custom yamlfmt binary path via --yamlfmt-path flag
* comment yaml check from pre-commit
* apply yamlfmt
* Update yaml-validation.yml
* Update yaml-validation.yml
* application folder search formatting
* cloud folder search formatting
* web folder search formatting
* network folder search formatting
* endpoint folder search formatting
* resolve first conflict
* apply formatting
* remove additional pipe
* Update README.md
* update versions
* restore and update formatting (#3920)
---------
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
|
2026-02-26 00:00:35 +05:30 |
|
|
Br3akp0int
|
edd6db09d9
|
Add New Analytics Covering SesameOp and PromptFlux (#3827)
---------
Co-authored-by: Teoderick Contreras <tcontreras@splunk.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
|
2026-01-08 00:58:33 +01:00 |
|
|
Br3akp0int
|
a52d560c80
|
lokibot (#3701)
* lokibot
* lokibot
* lokibot
---------
Co-authored-by: Teoderick Contreras <tcontreras@splunk.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
|
2025-10-10 18:32:18 +00:00 |
|
|
Bhavin Patel
|
6721794934
|
Update windows_process_execution_in_temp_dir.yml
|
2025-09-29 12:11:26 -07:00 |
|
|
Teoderick Contreras
|
b3c9f1a719
|
promptlock
|
2025-09-10 10:01:04 +02:00 |
|
|
Teoderick Contreras
|
06cb9fe29d
|
promptlock
|
2025-09-10 09:55:05 +02:00 |
|
|
Teoderick Contreras
|
ffa784db1e
|
path_wiper
|
2025-08-20 12:13:44 +02:00 |
|
|
Teoderick Contreras
|
dfac5c5239
|
xworm
|
2025-05-08 11:00:32 +02:00 |
|
|
Eric
|
d9960562b8
|
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.
|
2025-05-02 14:10:46 -07:00 |
|
|
Patrick Bareiss
|
1c9debe9a6
|
update versions
|
2025-03-14 13:47:44 +01:00 |
|
|
Patrick Bareiss
|
6a53921a8c
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-02-19 12:09:16 +01:00 |
|
|
Patrick Bareiss
|
e044e874ba
|
improvements
|
2025-02-18 08:55:49 +01:00 |
|
|
pyth0n1c
|
b9f5735bd3
|
Merge branch 'develop' into remove_type_and_subtype
|
2025-02-11 15:38:08 -08:00 |
|
|
Nasreddine Bencherchali
|
8b3d6685f0
|
CI fixes
|
2025-02-03 18:57:08 +01:00 |
|
|
tccontre
|
07cc1e4ca0
|
analytics_enhancement
|
2025-02-03 18:31:51 +01:00 |
|