Commit Graph

20339 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 8ecc80a72d Branch was auto-updated. 2023-05-16 09:14:59 -07:00
Bhavin Patel 03a96d1e20 Merge pull request #2675 from splunk/PaperCuts
The Haag Mile: A Journey of Redemption
2023-05-16 09:14:31 -07:00
patel-bhavin 49680f9e51 underscore 2023-05-16 09:09:57 -07:00
Michael Haag c17d09140a Rename papercutng_suspicious_behavior_debug_log.yml to papercut_ng_suspicious_behavior_debug_log.yml 2023-05-16 09:12:01 -06:00
Michael Haag 0f0002b9cf Rename papercutng_remote_web_access_attempt.yml to papercut_ng_remote_web_access_attempt.yml 2023-05-16 09:11:38 -06:00
Michael Haag 08fc892017 name fixes 2023-05-16 09:10:59 -06:00
Michael Haag 07be57790b Update and rename windows_papercutng_spawn_shell.yml to windows_papercut_ng_spawn_shell.yml 2023-05-16 09:08:35 -06:00
patel-bhavin 7b27c93bad story renames 2023-05-15 15:11:32 -07:00
Michael Haag f2cb3b89b4 fixes 2023-05-15 15:16:34 -06:00
pyth0n1c b24394affd Push a new github_actions test config file 2023-05-15 13:54:53 -07:00
pyth0n1c 4b04df1ff8 Updated all app baselines in validate_args 2023-05-15 13:52:12 -07:00
srv-rr-gh-researchbt 6f55fa0fcf Branch was auto-updated. 2023-05-15 13:17:25 -07:00
srv-rr-gh-researchbt b810097375 Branch was auto-updated. 2023-05-15 13:17:14 -07:00
Bhavin Patel c01c31e5be Merge pull request #2621 from splunk/aws_exfil
Aws Exfil Detections
2023-05-15 13:16:54 -07:00
pyth0n1c 4ef47f2fcc Fix source and sourcetype of attack_data 2023-05-15 12:56:47 -07:00
patel-bhavin 5f1c38800a search text updates 2023-05-15 12:52:17 -07:00
pyth0n1c 9e535bb5f0 Update baseline to include
suricata ta.  TA required 
for testing new detections.
Also, remove some 
duplicates apps from the 
baseline.
2023-05-15 12:49:18 -07:00
Michael Haag f5e121b1eb The Haag Mile: A Journey of Redemption 2023-05-15 13:22:04 -06:00
srv-rr-gh-researchbt e306aecbe9 Branch was auto-updated. 2023-05-15 12:16:30 -07:00
srv-rr-gh-researchbt b09e5b7c6c Branch was auto-updated. 2023-05-15 12:16:19 -07:00
Bhavin Patel 7643758830 Merge pull request #2587 from splunk/joinopolis
HaagJoinopolis
2023-05-15 12:16:00 -07:00
srv-rr-gh-researchbt 6ad23c6bb2 Branch was auto-updated. 2023-05-15 11:25:41 -07:00
srv-rr-gh-researchbt 15a8da8dc8 Branch was auto-updated. 2023-05-15 11:25:40 -07:00
srv-rr-gh-researchbt b04d091888 Branch was auto-updated. 2023-05-15 11:25:30 -07:00
Bhavin Patel 0a9967ae35 Merge pull request #2674 from splunk/adfind
ADFind- fix up text
2023-05-15 11:25:07 -07:00
patel-bhavin e2b2ead939 fix up text 2023-05-15 10:40:51 -07:00
patel-bhavin 780392da42 fix up text 2023-05-15 10:29:38 -07:00
srv-rr-gh-researchbt 7b8cb47afb Branch was auto-updated. 2023-05-08 14:25:30 -07:00
srv-rr-gh-researchbt 6d2c5a47d0 Branch was auto-updated. 2023-05-08 14:25:29 -07:00
srv-rr-gh-researchbt cda9a509c7 Branch was auto-updated. 2023-05-08 14:25:28 -07:00
Bhavin Patel 04f29a6c73 Merge pull request #2667 from splunk/security_content_4_improvements
Security content 4 improvements
2023-05-08 14:25:04 -07:00
srv-rr-gh-researchbt baa829457d Branch was auto-updated. 2023-05-08 09:27:57 -07:00
srv-rr-gh-researchbt 1f84028952 Branch was auto-updated. 2023-05-08 09:27:55 -07:00
srv-rr-gh-researchbt a9a4ab6dde Branch was auto-updated. 2023-05-08 09:27:54 -07:00
srv-rr-gh-researchbt d4b9016fd7 Branch was auto-updated. 2023-05-08 09:27:53 -07:00
P4T12ICK 9c3f00efc8 Merge pull request #2608 from splunk/TR-2916
Splunk Identifier Activity Analysis
2023-05-08 18:27:32 +02:00
Lou Stella 7416bfbe8c changed yml ID 2023-05-08 11:11:42 -05:00
srv-rr-gh-researchbt 5399839842 Branch was auto-updated. 2023-05-08 08:50:53 -07:00
srv-rr-gh-researchbt 6b21ab6fe1 Branch was auto-updated. 2023-05-08 08:50:52 -07:00
srv-rr-gh-researchbt 787f0833e6 Branch was auto-updated. 2023-05-08 08:50:51 -07:00
srv-rr-gh-researchbt 1448cbf5b9 Branch was auto-updated. 2023-05-08 08:50:49 -07:00
srv-rr-gh-researchbt 772d1b1f89 Branch was auto-updated. 2023-05-08 08:50:48 -07:00
P4T12ICK 7eee8815b4 Merge pull request #2594 from splunk/TR2894
CrowdStrike OAuth API Identifier Activity Analysis
2023-05-08 17:50:22 +02:00
srv-rr-gh-researchbt bfb0ee6b98 Branch was auto-updated. 2023-05-08 08:36:38 -07:00
srv-rr-gh-researchbt b5553ed82c Branch was auto-updated. 2023-05-08 08:36:36 -07:00
srv-rr-gh-researchbt cc84bee83c Branch was auto-updated. 2023-05-08 08:36:35 -07:00
srv-rr-gh-researchbt 3d55f78502 Branch was auto-updated. 2023-05-08 08:36:33 -07:00
srv-rr-gh-researchbt 07aee1ec2a Branch was auto-updated. 2023-05-08 08:36:31 -07:00
srv-rr-gh-researchbt 6c35f820ca Branch was auto-updated. 2023-05-08 08:36:30 -07:00
P4T12ICK 34f4a5dceb Merge pull request #2595 from splunk/TR-2903
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00