 Bhavin Patel
|
78cb19f63b
|
Branch was auto-updated.
|
2024-07-23 11:24:50 -07:00 |
|
|
Bhavin Patel
|
c0d5fd22e5
|
remove unused files
|
2024-07-23 13:20:04 -05:00 |
|
|
pyth0n1c
|
c25e135941
|
Update splunk_risky_commands file. Remove
unused Other Metadata Column and associated
empty rows. Remap YML file to point to new one.
Fix quoting issue leading to poorly formatted
line 16.
|
2024-07-22 14:44:17 -07:00 |
|
|
Lou Stella
|
7fbd13a3dc
|
Release v4.35.0
|
2024-07-01 17:26:50 +00:00 |
|
|
Bhavin Patel
|
b0eaed8f75
|
ESCU Release v4.31.0
|
2024-05-08 16:05:40 +00:00 |
|
|
Bhavin Patel
|
72e29c764f
|
ESCU Release Branch - v4.30.0
|
2024-04-17 20:44:56 +00:00 |
|
|
Bhavin Patel
|
7283ba3723
|
ESCU Release Branch v4.27.0
|
2024-03-20 20:01:18 +00:00 |
|
|
Bhavin Patel
|
046acb8871
|
ESCU v4.26.0 Release branch
|
2024-03-06 19:30:20 +00:00 |
|
|
Bhavin Patel
|
3d280b788a
|
Release v4.21.0
|
2024-01-22 22:40:14 +00:00 |
|
|
Bhavin Patel
|
7fda817c23
|
Release 4.19.0
|
2024-01-10 17:21:34 +00:00 |
|
|
Eric McGinnis
|
06a8a487ac
|
Release v4.18.0
|
2023-12-20 16:18:23 +00:00 |
|
|
Bhavin Patel
|
71fad8cc55
|
4.17.0 release branch
|
2023-12-06 18:40:13 +00:00 |
|
|
Eric McGinnis
|
186f27cfe0
|
Push new search to address SVD updates
|
2023-11-22 22:11:06 +00:00 |
|
|
Bhavin Patel
|
196d618f2f
|
Release v4.15.0
|
2023-11-01 19:24:56 +00:00 |
|
|
mvelazco
|
a20f6b726b
|
adding new detection - diamond ticket
|
2023-10-06 15:46:36 -04:00 |
|
|
pyth0n1c
|
732aec3f95
|
Delete detection and migrate
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
|
2023-09-28 14:51:28 -07:00 |
|
|
pyth0n1c
|
70d84aa982
|
Fix format of lookup file - remove spaces that caused parsing issues.
|
2023-08-30 07:58:07 -07:00 |
|
|
pyth0n1c
|
9a2229329d
|
Another detections update. Matching release dates in files with real release date.
|
2023-08-29 16:44:36 -07:00 |
|
|
pyth0n1c
|
d838ab5435
|
updates to lookups, created new lookup, refined detection
|
2023-08-23 14:49:33 -07:00 |
|
|
pyth0n1c
|
acc83e574d
|
more detection and documentation updates
|
2023-08-22 16:07:12 -07:00 |
|
|
Bhavin Patel
|
0ae18ce9a8
|
spl duplicate and fixes
|
2023-07-28 14:34:00 -05:00 |
|
|
pyth0n1c
|
5946620449
|
Fixing quotation marks that SHOULD have
been included in a field but were removed.
|
2023-06-27 13:02:02 -07:00 |
|
|
pyth0n1c
|
a9dc524ad9
|
Make changes to lookup validation to
ensure that the structure of .csv files,
along with their quoting and number of
fields, is correct.
|
2023-06-27 12:07:55 -07:00 |
|
|
Bhavin Patel
|
7cbe7c87c9
|
Update previously_seen_api_calls_from_user_roles.yml
|
2023-06-12 15:40:37 -07:00 |
|
|
Bhavin Patel
|
266a2a775b
|
adding lookups
|
2023-06-12 15:26:27 -07:00 |
|
|
srv-rr-gh-researchbt
|
0e192e2b8a
|
Branch was auto-updated.
|
2023-06-12 15:10:08 -07:00 |
|
|
Namratha Sreekanta
|
0782930137
|
Adding missing lookup files
|
2023-06-12 13:56:20 -07:00 |
|
|
patel-bhavin
|
30ad4d6eab
|
only kvstore conversion
|
2023-05-22 17:35:13 -07:00 |
|
|
srv-rr-gh-researchbt
|
d57aaa64aa
|
Branch was auto-updated.
|
2023-05-02 15:02:50 -07:00 |
|
|
mvelazco
|
39a1645e69
|
adding new detection
|
2023-04-25 17:04:46 -04:00 |
|
|
mvelazco
|
1841df5e4f
|
adding detection
|
2023-04-25 16:11:37 -04:00 |
|
|
pyth0n1c
|
44875375e2
|
Removed a duplicate macro
|
2023-04-14 15:35:45 -07:00 |
|
|
Michael Haag
|
89dff5cb65
|
dns
|
2023-03-30 12:15:41 -06:00 |
|
|
Bhavin Patel
|
3caf195760
|
Merge pull request #2569 from VatsalJagani/madusa-ransomware
Added medusa ransomware file extension and note file names.
|
2023-03-20 17:16:29 -05:00 |
|
|
Vatsal Jagani
|
06b9231ed5
|
Code review change. Made change in the right file.
|
2023-03-20 22:04:10 +05:30 |
|
|
Vatsal Jagani
|
cf14595674
|
Made ransomware notes lookup case insensitive.
|
2023-03-14 18:38:43 +05:30 |
|
|
Vatsal Jagani
|
0ed1ee7b97
|
Added medusa ransomware file extension and note file names.
|
2023-03-14 18:35:46 +05:30 |
|
|
srv-rr-gh-researchbt
|
0fcad2ae1a
|
Branch was auto-updated.
|
2023-02-14 09:35:22 -08:00 |
|
|
pyth0n1c
|
e6c5fbd101
|
added all detections for release, still need to update dataset links
|
2023-02-14 06:46:13 -08:00 |
|
|
mvelazco
|
4f2307f6c6
|
renaming advanced audit policy guids lookup
|
2023-02-13 12:03:49 -05:00 |
|
|
srv-rr-gh-researchbt
|
dd6812dcc2
|
Branch was auto-updated.
|
2023-02-07 10:39:55 -08:00 |
|
|
ksharad-splunk
|
3a4568bc3d
|
Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.yml
|
2023-02-07 15:34:47 +01:00 |
|
|
ksharad-splunk
|
918f54262d
|
Delete __mlspl_detect_suspicious_filenames_using_pretrained_model_in_dsdl.mlmodel
|
2023-02-07 15:34:23 +01:00 |
|
|
Kumar Sharad
|
e9ed13ea31
|
Detection name update
|
2023-02-07 15:31:48 +01:00 |
|
|
Kumar Sharad
|
87d5b60b0a
|
Detect suspicious Filename updates
|
2023-01-27 17:23:58 +01:00 |
|
|
dluxtron
|
cc55d3abb5
|
Adding detection for disabling audit policy on a DC
|
2023-01-26 13:01:37 +10:00 |
|
|
srv-rr-gh-researchbt
|
a9242d7e60
|
Branch was auto-updated.
|
2023-01-24 12:37:52 -08:00 |
|
|
srv-rr-gh-researchbt
|
1acbc9eabe
|
Branch was auto-updated.
|
2023-01-24 12:36:10 -08:00 |
|
|
srv-rr-gh-researchbt
|
59954ea010
|
Branch was auto-updated.
|
2023-01-24 12:36:04 -08:00 |
|
|
srv-rr-gh-researchbt
|
4562759834
|
Branch was auto-updated.
|
2023-01-24 11:18:52 -08:00 |
|