81607c596e
add_story_and_minor_fix
2022-03-17 16:41:29 +01:00
6f0ee68913
Refactored security content
2022-03-09 14:43:09 +01:00
d78bb53baa
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
5fbff3630e
merged with develop
2022-02-07 14:55:34 +01:00
e52d00b53d
updating docs and package bits [ci skip]
2022-01-31 20:04:12 +00:00
2fde5a7c08
Update disabling_folderoptions_windows_feature.yml
2022-01-28 10:55:06 +01:00
585ef9de39
reg_yml_analytics_updates_3
2022-01-28 10:00:46 +01:00
4fd8604b9a
removed SAAWS and automated_detection_testing flag
2022-01-27 09:50:45 +01:00
84092434a2
fixed more detections
2022-01-18 12:53:54 +01:00
57c1ef30dd
Merge pull request #1857 from splunk/RegistryDetectionFixes
...
Registry detection fixes
2021-12-01 15:41:01 -08:00
9f91279c51
Changed affected Registry.registry_value_name
...
fields to Registry.registry_value_data and changed
value from DWORD(0x...) to 0x...
This probably does not cover all the detections that
will need to be addressed in this fix, but is a good
initial pass to see if the fixes and new TA are working
properly.
2021-10-14 14:58:03 -07:00
3f01dc7409
Touched a number of detections to see if they
...
fail with the current sysmon TA before testing
against the sysmon TA update.
2021-10-14 14:24:25 -07:00
14e3597bf4
CARS_UPDATE_MITRE_ID_B4
...
CARS_UPDATE_MITRE_ID_B3
2021-10-13 11:13:24 +02:00
5e6e987fb7
resolved merge conflicts
2021-07-21 09:22:09 +02:00
44ea56053d
updating docs and package bits [ci skip]
2021-07-20 21:12:30 +00:00
2f33b99816
Merge branch 'develop' into Risky
2021-07-20 13:47:15 -06:00
3740535cca
updating docs and package bits [ci skip]
2021-07-20 17:49:09 +00:00
1c9f44bf37
Merge branch 'develop' into analytic_types
2021-07-20 16:46:34 +02:00
65a92a64e1
add analytic types to detections
2021-07-19 16:49:33 +02:00
b37882f7e7
Apger's second round of detection content updates
2021-07-14 20:58:54 -05:00
44f7892c19
RBA done
2021-07-14 15:43:38 -06:00
a40dc12832
updating docs and package bits [ci skip]
2021-04-15 19:40:20 +00:00
031a8a9945
Added detection testing service results inDisabling FolderOptions Windows Feature
2021-04-01 10:06:43 +00:00
c214e8dc53
def_evasion_detections
2021-03-31 14:42:47 +02:00
tccontre