409 Commits

Author SHA1 Message Date
ljstella c498d21841 Manual Review completion 2026-05-20 12:15:00 -04:00
Eric McGinnis 13f06b5e1d Complete porinting of playbooks. Fix references to old, removed detections
in playbooks that were previously unvalidated.
Add a MANUAL_REVIEW section, which is commented out,
for clarity and to allow CICD to run and pass on this content.
Renamed an existing playbook because it diverges from the name
of that playbook elsewhere.
2026-05-19 14:28:53 -07:00
Eric McGinnis 0a8c534612 Update playbooks to new format. 2026-05-19 11:12:49 -07:00
ljstella 7b6dab17f4 SOARHELP-6700 2026-04-28 10:47:57 -04:00
ljstella cac4a8812d Updating name to match 2025-07-07 13:01:07 -05:00
pyth0n1c d9fd704404 Merge branch 'develop' into develop 2025-07-07 09:31:01 -07:00
ljstella e2b479c16f Updated links in playbook yamls 2025-06-24 11:27:20 -05:00
Christian Cloutier 2298bf1557 Fix parsing issue 2025-06-20 14:26:45 -04:00
Christian Cloutier 8c7650575d Add missing GUIDs 2025-06-20 14:22:43 -04:00
Christian Cloutier 21802e0bed Added Playbooks from the CrowdStrike EDR Pack 2025-06-20 11:42:52 -04:00
ljstella 7d265c8efa Renaming file again, maybe this won't break 2025-01-30 09:15:53 -06:00
ljstella 41eb861904 Renaming again for a new reason 2025-01-30 09:04:37 -06:00
ljstella 857590e1f0 Renamed files and updated playbook field so site functions 2025-01-30 08:57:48 -06:00
ljstella 4e88794a21 Adding d3fend technique tag 2025-01-28 11:40:33 -06:00
Lou Stella a143d1daee Merge branch 'develop' into talos 2025-01-28 11:36:00 -06:00
Nasreddine Bencherchali fc93c664a9 rollback changes to risk_notable_import_data files 2025-01-23 15:45:44 +01:00
Tapish Jain c26d139776 adding the playbook files 2025-01-17 14:20:25 -08:00
Tapish Jain 3e8a43b4a3 Input playbook for the new Talos app 2025-01-17 13:51:45 -08:00
Tapish Jain 0e32902df2 Input playbook for the new Talos app 2025-01-17 13:41:30 -08:00
Nasreddine Bencherchali a8c3540aa8 typo fixes and some logic update 2025-01-08 14:46:37 +01:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Bhavin Patel 0c134526df Release Branch : v4.28.0 2024-03-27 16:36:00 +00:00
Bhavin Patel 7283ba3723 ESCU Release Branch v4.27.0 2024-03-20 20:01:18 +00:00
Bhavin Patel 046acb8871 ESCU v4.26.0 Release branch 2024-03-06 19:30:20 +00:00
Eric McGinnis 9fdf182033 Release v4.24.0 2024-02-14 23:54:00 +00:00
Bhavin Patel 0078f83d95 Release Branch ESCU 4.23.0 2024-01-30 20:52:05 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis c86a0bfea8 Fixed a handful of issues with observables and messages and spacing in content. 2023-10-23 19:49:17 +00:00
pyth0n1c 7ff09049e3 Fix the ids associated with a number of playbooks and fix incorrectly named referenced detections. Check with Playbook SME to understand the full implications of these changes. 2023-10-06 16:48:52 -07:00
pyth0n1c 3fce3dff3c contentctl validate throws errors
on the following playbooks. the first
had an invalid uuid (improper number
of characters). The second had unallowed
characters in the name (underscores).  I
will reach out to the devs for this content
to understand what implications these changes
may have.
2023-10-06 16:24:38 -07:00
srv-rr-gh-researchbt 1edd30be97 Branch was auto-updated. 2023-09-14 13:49:43 -07:00
Bhavin Patel f310833637 Merge pull request #2804 from ericli-splunk/ericli-snow-typo
Fix typos in ServiceNow_Related_Tickets_Search.yml
2023-09-12 17:13:53 -07:00
Bhavin Patel 64cf65a0c9 Merge pull request #2756 from splunk/Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug
Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug
2023-09-12 12:48:06 -07:00
Bhavin Patel f5b9e60ad1 Merge pull request #2803 from ericli-splunk/ericli-jira-playbook
Add playbook Jira_Related_Tickets_Search
2023-09-11 17:21:21 -07:00
Kelby Shelton cd6b8bc7ba Fixed automated enrichment to reference renamed playbooks 2023-09-08 14:20:10 -05:00
srv-rr-gh-researchbt 7d9a97ce06 Branch was auto-updated. 2023-09-06 08:53:53 -07:00
srv-rr-gh-researchbt f8c191b404 Branch was auto-updated. 2023-08-29 14:46:07 -07:00
Eric Li 0cb8955bb0 Update playbook to fix None assignee and support dispatch playbook 2023-08-23 14:20:20 -07:00
P4T12ICK 28754b8654 Update crowdstrike_malware_triage.yml 2023-08-23 14:19:58 +02:00
Eric Li 5efd19e4a9 Add drop None 2023-08-22 15:44:44 -07:00
Kelby Shelton 091ea2d21e Update apps for consistency 2023-08-22 14:30:48 -05:00
srv-rr-gh-researchbt 774b8946f8 Branch was auto-updated. 2023-08-18 10:34:13 -07:00
srv-rr-gh-researchbt 1f57c29c9f Branch was auto-updated. 2023-08-18 10:16:09 -07:00
srv-rr-gh-researchbt b680053f8e Branch was auto-updated. 2023-08-18 10:16:08 -07:00
srv-rr-gh-researchbt 3ed2643571 Branch was auto-updated. 2023-08-18 10:06:31 -07:00
srv-rr-gh-researchbt c025008c24 Branch was auto-updated. 2023-08-18 10:06:30 -07:00
srv-rr-gh-researchbt 752623dcb7 Branch was auto-updated. 2023-08-18 10:06:29 -07:00
P4T12ICK c28876dfa6 bug fix typo 2023-08-18 18:31:57 +02:00
srv-rr-gh-researchbt 6c28161dda Branch was auto-updated. 2023-08-17 15:31:06 -07:00
srv-rr-gh-researchbt 7f8a7d839a Branch was auto-updated. 2023-08-17 15:31:05 -07:00