srv-rr-gh-researchbt
|
8ecc80a72d
|
Branch was auto-updated.
|
2023-05-16 09:14:59 -07:00 |
|
Bhavin Patel
|
03a96d1e20
|
Merge pull request #2675 from splunk/PaperCuts
The Haag Mile: A Journey of Redemption
|
2023-05-16 09:14:31 -07:00 |
|
patel-bhavin
|
49680f9e51
|
underscore
|
2023-05-16 09:09:57 -07:00 |
|
Michael Haag
|
c17d09140a
|
Rename papercutng_suspicious_behavior_debug_log.yml to papercut_ng_suspicious_behavior_debug_log.yml
|
2023-05-16 09:12:01 -06:00 |
|
Michael Haag
|
0f0002b9cf
|
Rename papercutng_remote_web_access_attempt.yml to papercut_ng_remote_web_access_attempt.yml
|
2023-05-16 09:11:38 -06:00 |
|
Michael Haag
|
08fc892017
|
name fixes
|
2023-05-16 09:10:59 -06:00 |
|
Michael Haag
|
07be57790b
|
Update and rename windows_papercutng_spawn_shell.yml to windows_papercut_ng_spawn_shell.yml
|
2023-05-16 09:08:35 -06:00 |
|
patel-bhavin
|
7b27c93bad
|
story renames
|
2023-05-15 15:11:32 -07:00 |
|
Michael Haag
|
f2cb3b89b4
|
fixes
|
2023-05-15 15:16:34 -06:00 |
|
pyth0n1c
|
b24394affd
|
Push a new github_actions test config file
|
2023-05-15 13:54:53 -07:00 |
|
pyth0n1c
|
4b04df1ff8
|
Updated all app baselines in validate_args
|
2023-05-15 13:52:12 -07:00 |
|
srv-rr-gh-researchbt
|
6f55fa0fcf
|
Branch was auto-updated.
|
2023-05-15 13:17:25 -07:00 |
|
srv-rr-gh-researchbt
|
b810097375
|
Branch was auto-updated.
|
2023-05-15 13:17:14 -07:00 |
|
Bhavin Patel
|
c01c31e5be
|
Merge pull request #2621 from splunk/aws_exfil
Aws Exfil Detections
|
2023-05-15 13:16:54 -07:00 |
|
pyth0n1c
|
4ef47f2fcc
|
Fix source and sourcetype of attack_data
|
2023-05-15 12:56:47 -07:00 |
|
patel-bhavin
|
5f1c38800a
|
search text updates
|
2023-05-15 12:52:17 -07:00 |
|
pyth0n1c
|
9e535bb5f0
|
Update baseline to include
suricata ta. TA required
for testing new detections.
Also, remove some
duplicates apps from the
baseline.
|
2023-05-15 12:49:18 -07:00 |
|
Michael Haag
|
f5e121b1eb
|
The Haag Mile: A Journey of Redemption
|
2023-05-15 13:22:04 -06:00 |
|
srv-rr-gh-researchbt
|
e306aecbe9
|
Branch was auto-updated.
|
2023-05-15 12:16:30 -07:00 |
|
srv-rr-gh-researchbt
|
b09e5b7c6c
|
Branch was auto-updated.
|
2023-05-15 12:16:19 -07:00 |
|
Bhavin Patel
|
7643758830
|
Merge pull request #2587 from splunk/joinopolis
HaagJoinopolis
|
2023-05-15 12:16:00 -07:00 |
|
srv-rr-gh-researchbt
|
6ad23c6bb2
|
Branch was auto-updated.
|
2023-05-15 11:25:41 -07:00 |
|
srv-rr-gh-researchbt
|
15a8da8dc8
|
Branch was auto-updated.
|
2023-05-15 11:25:40 -07:00 |
|
srv-rr-gh-researchbt
|
b04d091888
|
Branch was auto-updated.
|
2023-05-15 11:25:30 -07:00 |
|
Bhavin Patel
|
0a9967ae35
|
Merge pull request #2674 from splunk/adfind
ADFind- fix up text
|
2023-05-15 11:25:07 -07:00 |
|
patel-bhavin
|
e2b2ead939
|
fix up text
|
2023-05-15 10:40:51 -07:00 |
|
patel-bhavin
|
780392da42
|
fix up text
|
2023-05-15 10:29:38 -07:00 |
|
srv-rr-gh-researchbt
|
7b8cb47afb
|
Branch was auto-updated.
|
2023-05-08 14:25:30 -07:00 |
|
srv-rr-gh-researchbt
|
6d2c5a47d0
|
Branch was auto-updated.
|
2023-05-08 14:25:29 -07:00 |
|
srv-rr-gh-researchbt
|
cda9a509c7
|
Branch was auto-updated.
|
2023-05-08 14:25:28 -07:00 |
|
Bhavin Patel
|
04f29a6c73
|
Merge pull request #2667 from splunk/security_content_4_improvements
Security content 4 improvements
|
2023-05-08 14:25:04 -07:00 |
|
srv-rr-gh-researchbt
|
baa829457d
|
Branch was auto-updated.
|
2023-05-08 09:27:57 -07:00 |
|
srv-rr-gh-researchbt
|
1f84028952
|
Branch was auto-updated.
|
2023-05-08 09:27:55 -07:00 |
|
srv-rr-gh-researchbt
|
a9a4ab6dde
|
Branch was auto-updated.
|
2023-05-08 09:27:54 -07:00 |
|
srv-rr-gh-researchbt
|
d4b9016fd7
|
Branch was auto-updated.
|
2023-05-08 09:27:53 -07:00 |
|
P4T12ICK
|
9c3f00efc8
|
Merge pull request #2608 from splunk/TR-2916
Splunk Identifier Activity Analysis
|
2023-05-08 18:27:32 +02:00 |
|
Lou Stella
|
7416bfbe8c
|
changed yml ID
|
2023-05-08 11:11:42 -05:00 |
|
srv-rr-gh-researchbt
|
5399839842
|
Branch was auto-updated.
|
2023-05-08 08:50:53 -07:00 |
|
srv-rr-gh-researchbt
|
6b21ab6fe1
|
Branch was auto-updated.
|
2023-05-08 08:50:52 -07:00 |
|
srv-rr-gh-researchbt
|
787f0833e6
|
Branch was auto-updated.
|
2023-05-08 08:50:51 -07:00 |
|
srv-rr-gh-researchbt
|
1448cbf5b9
|
Branch was auto-updated.
|
2023-05-08 08:50:49 -07:00 |
|
srv-rr-gh-researchbt
|
772d1b1f89
|
Branch was auto-updated.
|
2023-05-08 08:50:48 -07:00 |
|
P4T12ICK
|
7eee8815b4
|
Merge pull request #2594 from splunk/TR2894
CrowdStrike OAuth API Identifier Activity Analysis
|
2023-05-08 17:50:22 +02:00 |
|
srv-rr-gh-researchbt
|
bfb0ee6b98
|
Branch was auto-updated.
|
2023-05-08 08:36:38 -07:00 |
|
srv-rr-gh-researchbt
|
b5553ed82c
|
Branch was auto-updated.
|
2023-05-08 08:36:36 -07:00 |
|
srv-rr-gh-researchbt
|
cc84bee83c
|
Branch was auto-updated.
|
2023-05-08 08:36:35 -07:00 |
|
srv-rr-gh-researchbt
|
3d55f78502
|
Branch was auto-updated.
|
2023-05-08 08:36:33 -07:00 |
|
srv-rr-gh-researchbt
|
07aee1ec2a
|
Branch was auto-updated.
|
2023-05-08 08:36:31 -07:00 |
|
srv-rr-gh-researchbt
|
6c35f820ca
|
Branch was auto-updated.
|
2023-05-08 08:36:30 -07:00 |
|
P4T12ICK
|
34f4a5dceb
|
Merge pull request #2595 from splunk/TR-2903
Windows Defender ATP Identifier Activity Analysis
|
2023-05-08 17:36:06 +02:00 |
|