7f38d4e78e
Merge pull request #2252 from splunk/fixing_incorrect_story
...
fixing incorrect story pointer
2022-06-21 15:47:05 -07:00
7816778eae
Removed the field "user" from the stats
...
line. It does not appear to exist in the raw
data and is not pulled into any field(s).
However, there is a field called userName
which, presumably, represents the same data.
2022-06-21 15:45:00 -07:00
056969eaae
Branch was auto-updated.
2022-06-21 15:28:42 -07:00
d671db062d
Branch was auto-updated.
2022-06-21 15:28:41 -07:00
b44da42de6
Branch was auto-updated.
2022-06-21 15:28:40 -07:00
6616463196
Branch was auto-updated.
2022-06-21 15:28:39 -07:00
6cbace8412
Branch was auto-updated.
2022-06-21 15:28:38 -07:00
72cf29295c
Branch was auto-updated.
2022-06-21 15:28:37 -07:00
e470e2b6d8
Merge pull request #2257 from splunk/2253_fix
...
Rundll32 LockWorkstation search
2022-06-21 18:28:11 -04:00
aa228e84be
hunting
2022-06-21 14:55:19 -07:00
d5d0868005
merge from develop
2022-06-21 14:53:25 -07:00
de30c530eb
Branch was auto-updated.
2022-06-21 14:46:29 -07:00
25e4a180b1
Branch was auto-updated.
2022-06-21 14:46:28 -07:00
88f26544e2
Branch was auto-updated.
2022-06-21 14:46:26 -07:00
e57a4a33b3
Branch was auto-updated.
2022-06-21 14:46:25 -07:00
c42c8acce2
Branch was auto-updated.
2022-06-21 14:46:22 -07:00
1f897f43c0
Branch was auto-updated.
2022-06-21 14:46:20 -07:00
6fc1b95369
Merge pull request #2258 from splunk/properly_detected_failed_attack_data_downloads
...
Properly detected failed attack data downloads
2022-06-21 14:46:03 -07:00
26f6bbfc92
Adding the URL_TOOLBOX app to
...
the application baseline.
2022-06-21 14:29:11 -07:00
6554d4a42b
Moved ssa___ test file from the tests/network directory to the tests/experimental/endpoint directory because that's where the corresponding detection resides.
2022-06-21 13:59:50 -07:00
5762b4e373
Updated the app baseline as well as
...
the python code for generating the
default config. Also updated the
print behavior for when files are
downloaded.
App baseline is now current, and
files are hosted on S3, as
of 06/21/2022.
2022-06-21 13:53:26 -07:00
575cd80e01
Updated observable & asset_type
2022-06-21 15:17:25 -05:00
6b06ab718b
Fixing a link to a dataset that has been moved.
2022-06-21 13:13:50 -07:00
e681b766c2
Fixing field name
2022-06-21 14:59:48 -05:00
c98d7b6855
Fix an issue where trying to download a file from attack_data that returns a 404 fails too late in the process, giving a nondescriptive error message and resulting in a bad filename being included in the detection failure manifest.
2022-06-21 12:52:32 -07:00
85f4f107a3
Changed to anomaly
2022-06-21 14:45:43 -05:00
a92a6f2546
map filter
2022-06-21 12:24:04 -07:00
8ca9ac7b57
adding urltoolbox and spl updates
2022-06-21 12:05:52 -07:00
2ea683be87
Merge branch 'develop' into inspired_2194
2022-06-21 11:04:27 -07:00
7bb299490f
model to detect risky commands
2022-06-21 17:47:31 +02:00
f45aadfb8e
model to detect risky commands
2022-06-21 17:43:49 +02:00
8228c36d18
model to detect risky commands
2022-06-21 15:39:48 +02:00
dc22c28425
azorult-sfx-package
2022-06-21 15:08:26 +02:00
693ee6c03d
model to detect risky commands
2022-06-21 14:55:46 +02:00
53bc5dcda4
fixing incorrect story pointer
2022-06-20 16:33:35 -04:00
79e7a23cd8
azorult-sfx-package
2022-06-20 16:40:54 +02:00
2cf31f78d7
azorult-sfx-package
2022-06-20 16:12:39 +02:00
56394444ce
fix
2022-06-17 13:09:37 -06:00
2788e8e63c
path fix
2022-06-17 10:22:24 -06:00
9a25da4387
T1218.007 - MSIExec
2022-06-17 09:36:34 -06:00
c4ec08000d
Branch was auto-updated.
2022-06-16 11:35:28 -07:00
7321d6d835
Branch was auto-updated.
2022-06-16 11:35:27 -07:00
fc06b83cf6
Merge pull request #2250 from splunk/fix_cve_tag
...
CVE Tag Fix
2022-06-16 14:35:07 -04:00
dbf1c52864
Update splunk_process_injection_forwarder_bundle_downloads.yml
2022-06-16 13:08:02 -05:00
333039e8ad
Branch was auto-updated.
2022-06-15 12:21:36 -07:00
0c2793af4d
Branch was auto-updated.
2022-06-15 12:21:35 -07:00
81180f53ca
Merge pull request #2248 from splunk/exp_unauth_assets_fix
...
Experimental Network search update
2022-06-15 15:21:11 -04:00
863259df93
Updated per #2235
2022-06-15 13:49:56 -05:00
e3509db49f
Branch was auto-updated.
2022-06-14 20:14:12 -07:00
df7ec18786
Branch was auto-updated.
2022-06-14 20:14:11 -07:00
Bhavin Patel