ljstella
c498d21841
Manual Review completion
2026-05-20 12:15:00 -04:00
Eric McGinnis
13f06b5e1d
Complete porinting of playbooks. Fix references to old, removed detections
...
in playbooks that were previously unvalidated.
Add a MANUAL_REVIEW section, which is commented out,
for clarity and to allow CICD to run and pass on this content.
Renamed an existing playbook because it diverges from the name
of that playbook elsewhere.
2026-05-19 14:28:53 -07:00
Eric McGinnis
0a8c534612
Update playbooks to new format.
2026-05-19 11:12:49 -07:00
ljstella
7b6dab17f4
SOARHELP-6700
2026-04-28 10:47:57 -04:00
ljstella
cac4a8812d
Updating name to match
2025-07-07 13:01:07 -05:00
pyth0n1c
d9fd704404
Merge branch 'develop' into develop
2025-07-07 09:31:01 -07:00
ljstella
e2b479c16f
Updated links in playbook yamls
2025-06-24 11:27:20 -05:00
Christian Cloutier
2298bf1557
Fix parsing issue
2025-06-20 14:26:45 -04:00
Christian Cloutier
8c7650575d
Add missing GUIDs
2025-06-20 14:22:43 -04:00
Christian Cloutier
21802e0bed
Added Playbooks from the CrowdStrike EDR Pack
2025-06-20 11:42:52 -04:00
ljstella
7d265c8efa
Renaming file again, maybe this won't break
2025-01-30 09:15:53 -06:00
ljstella
41eb861904
Renaming again for a new reason
2025-01-30 09:04:37 -06:00
ljstella
857590e1f0
Renamed files and updated playbook field so site functions
2025-01-30 08:57:48 -06:00
ljstella
4e88794a21
Adding d3fend technique tag
2025-01-28 11:40:33 -06:00
Lou Stella
a143d1daee
Merge branch 'develop' into talos
2025-01-28 11:36:00 -06:00
Nasreddine Bencherchali
fc93c664a9
rollback changes to risk_notable_import_data files
2025-01-23 15:45:44 +01:00
Tapish Jain
c26d139776
adding the playbook files
2025-01-17 14:20:25 -08:00
Tapish Jain
3e8a43b4a3
Input playbook for the new Talos app
2025-01-17 13:51:45 -08:00
Tapish Jain
0e32902df2
Input playbook for the new Talos app
2025-01-17 13:41:30 -08:00
Nasreddine Bencherchali
a8c3540aa8
typo fixes and some logic update
2025-01-08 14:46:37 +01:00
Bhavin Patel
b0eaed8f75
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
Bhavin Patel
0c134526df
Release Branch : v4.28.0
2024-03-27 16:36:00 +00:00
Bhavin Patel
7283ba3723
ESCU Release Branch v4.27.0
2024-03-20 20:01:18 +00:00
Bhavin Patel
046acb8871
ESCU v4.26.0 Release branch
2024-03-06 19:30:20 +00:00
Eric McGinnis
9fdf182033
Release v4.24.0
2024-02-14 23:54:00 +00:00
Bhavin Patel
0078f83d95
Release Branch ESCU 4.23.0
2024-01-30 20:52:05 +00:00
Bhavin Patel
7fda817c23
Release 4.19.0
2024-01-10 17:21:34 +00:00
Eric McGinnis
c86a0bfea8
Fixed a handful of issues with observables and messages and spacing in content.
2023-10-23 19:49:17 +00:00
pyth0n1c
7ff09049e3
Fix the ids associated with a number of playbooks and fix incorrectly named referenced detections. Check with Playbook SME to understand the full implications of these changes.
2023-10-06 16:48:52 -07:00
pyth0n1c
3fce3dff3c
contentctl validate throws errors
...
on the following playbooks. the first
had an invalid uuid (improper number
of characters). The second had unallowed
characters in the name (underscores). I
will reach out to the devs for this content
to understand what implications these changes
may have.
2023-10-06 16:24:38 -07:00
srv-rr-gh-researchbt
1edd30be97
Branch was auto-updated.
2023-09-14 13:49:43 -07:00
Bhavin Patel
f310833637
Merge pull request #2804 from ericli-splunk/ericli-snow-typo
...
Fix typos in ServiceNow_Related_Tickets_Search.yml
2023-09-12 17:13:53 -07:00
Bhavin Patel
64cf65a0c9
Merge pull request #2756 from splunk/Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug
...
Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug
2023-09-12 12:48:06 -07:00
Bhavin Patel
f5b9e60ad1
Merge pull request #2803 from ericli-splunk/ericli-jira-playbook
...
Add playbook Jira_Related_Tickets_Search
2023-09-11 17:21:21 -07:00
Kelby Shelton
cd6b8bc7ba
Fixed automated enrichment to reference renamed playbooks
2023-09-08 14:20:10 -05:00
srv-rr-gh-researchbt
7d9a97ce06
Branch was auto-updated.
2023-09-06 08:53:53 -07:00
srv-rr-gh-researchbt
f8c191b404
Branch was auto-updated.
2023-08-29 14:46:07 -07:00
Eric Li
0cb8955bb0
Update playbook to fix None assignee and support dispatch playbook
2023-08-23 14:20:20 -07:00
P4T12ICK
28754b8654
Update crowdstrike_malware_triage.yml
2023-08-23 14:19:58 +02:00
Eric Li
5efd19e4a9
Add drop None
2023-08-22 15:44:44 -07:00
Kelby Shelton
091ea2d21e
Update apps for consistency
2023-08-22 14:30:48 -05:00
srv-rr-gh-researchbt
774b8946f8
Branch was auto-updated.
2023-08-18 10:34:13 -07:00
srv-rr-gh-researchbt
1f57c29c9f
Branch was auto-updated.
2023-08-18 10:16:09 -07:00
srv-rr-gh-researchbt
b680053f8e
Branch was auto-updated.
2023-08-18 10:16:08 -07:00
srv-rr-gh-researchbt
3ed2643571
Branch was auto-updated.
2023-08-18 10:06:31 -07:00
srv-rr-gh-researchbt
c025008c24
Branch was auto-updated.
2023-08-18 10:06:30 -07:00
srv-rr-gh-researchbt
752623dcb7
Branch was auto-updated.
2023-08-18 10:06:29 -07:00
P4T12ICK
c28876dfa6
bug fix typo
2023-08-18 18:31:57 +02:00
srv-rr-gh-researchbt
6c28161dda
Branch was auto-updated.
2023-08-17 15:31:06 -07:00
srv-rr-gh-researchbt
7f8a7d839a
Branch was auto-updated.
2023-08-17 15:31:05 -07:00