Commit Graph

23231 Commits

Author SHA1 Message Date
patel-bhavin 5b4074dd23 hti update 2022-10-14 15:36:28 -07:00
Namratha Sreekanta 2100ef6fd1 changing the wiki link in the dga detection 2022-10-14 14:18:11 -07:00
srv-rr-gh-researchbt 1580dfc67e Branch was auto-updated. 2022-10-14 12:33:39 -07:00
srv-rr-gh-researchbt 60c6c7f7b3 Branch was auto-updated. 2022-10-14 12:33:38 -07:00
srv-rr-gh-researchbt b04681c854 Branch was auto-updated. 2022-10-14 12:33:36 -07:00
srv-rr-gh-researchbt 40e4218968 Branch was auto-updated. 2022-10-14 12:33:35 -07:00
srv-rr-gh-researchbt 945fb121a7 Branch was auto-updated. 2022-10-14 12:33:34 -07:00
srv-rr-gh-researchbt 39fcc04762 Branch was auto-updated. 2022-10-14 12:33:33 -07:00
srv-rr-gh-researchbt 090b1ae9e8 Branch was auto-updated. 2022-10-14 12:33:32 -07:00
srv-rr-gh-researchbt 7ad1e041d7 Branch was auto-updated. 2022-10-14 12:33:31 -07:00
srv-rr-gh-researchbt f6050057f1 Branch was auto-updated. 2022-10-14 12:33:30 -07:00
srv-rr-gh-researchbt 2b8f8f071b Branch was auto-updated. 2022-10-14 12:33:29 -07:00
srv-rr-gh-researchbt 2a2ee9e576 Branch was auto-updated. 2022-10-14 12:33:29 -07:00
srv-rr-gh-researchbt c3713043d9 Branch was auto-updated. 2022-10-14 12:33:28 -07:00
srv-rr-gh-researchbt c23c0e4498 Branch was auto-updated. 2022-10-14 12:33:27 -07:00
research bot be4daa969c Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-10-14 19:33:11 +00:00
Bhavin Patel 7ab9b56f72 Update gcp_unusual_number_of_failed_authentications_from_ip.yml 2022-10-14 12:20:52 -07:00
Bhavin Patel ec4829ad7f Update gcp_multiple_users_failing_to_authenticate_from_ip.yml 2022-10-14 12:20:23 -07:00
Michael Haag c8f1c87203 update 2022-10-14 13:12:10 -06:00
Michael Haag d7f115f0c7 Update fortinet_appliance_auth_bypass.yml 2022-10-14 13:08:10 -06:00
mvelazco ecda6231c9 gitignore fix 2022-10-14 15:06:12 -04:00
mvelazco 7bada443b3 Merge branch 'gcp_account_takeover' of github.com:splunk/security_content into gcp_account_takeover 2022-10-14 15:03:56 -04:00
mvelazco 744bc50190 adding 4 GCP account takeover detections 2022-10-14 15:03:54 -04:00
Bhavin Patel b1bb130cd9 Merge pull request #2407 from splunk/fix_api_update_error
Fix generate API
v3.50.0
2022-10-14 11:50:47 -07:00
Michael Haag 5e6be8b499 Update fortinet_appliance_auth_bypass.yml 2022-10-14 12:49:28 -06:00
Michael Haag 363677cc71 Update cve_2022_40684_fortinet_appliance_auth_bypass.yml 2022-10-14 12:26:35 -06:00
Michael Haag aad3a35478 Drop a Forti 2022-10-14 12:19:26 -06:00
Michael Haag b2ddf3a6c8 updates 2022-10-14 11:38:42 -06:00
tccontre 0867949d4d Update windows_mshta_execution_in_registry.yml 2022-10-14 17:51:37 +02:00
tccontre 6da0d7913a Update windows_mshta_execution_in_registry.test.yml 2022-10-14 17:50:56 +02:00
tccontre b886ffa10f Update windows_mshta_execution_in_registry.yml 2022-10-14 11:47:18 +02:00
tccontre 0295a489d4 Update windows_mshta_execution_in_registry.test.yml 2022-10-14 11:14:07 +02:00
tccontre b5cf28dff5 Update windows_mshta_execution_in_registry.yml 2022-10-14 11:13:52 +02:00
tccontre b67c3bf8ce Update windows_mshta_execution_in_registry.test.yml 2022-10-14 10:45:52 +02:00
tccontre 93cc5d602c Update windows_mshta_execution_in_registry.yml 2022-10-14 10:45:39 +02:00
tccontre 135e12500f mshta_reg 2022-10-14 10:28:30 +02:00
patel-bhavin 56abcaeb12 new sourcetype 2022-10-13 18:07:01 -07:00
patel-bhavin 62b75ad9a4 ignore lookups.db.db files 2022-10-13 16:52:13 -07:00
patel-bhavin ab378d6705 addo_test 2022-10-13 16:47:29 -07:00
patel-bhavin 7ec46bd832 spl updates 2022-10-13 16:33:32 -07:00
patel-bhavin 92f0ff7f5f gcp_stdev 2022-10-13 15:58:37 -07:00
Michael Haag 78c1d290c5 Update ssa___windows_exchange_powershell_module_usage.yml 2022-10-13 15:10:26 -06:00
Michael Haag 5ad0c5b3d6 BA 2022-10-13 14:59:54 -06:00
pyth0n1c 08fa572d42 Bump all of the actions versions,
if required
2022-10-13 13:19:08 -07:00
pyth0n1c 6b8d2ac69c Fixed missing creation of api archive 2022-10-13 12:49:16 -07:00
pyth0n1c 9a9b290f83 Ensure that all the folders in dist
are updated on tag. Upload the
API_Content artifact as well as
part of a test and as part of
a release
2022-10-13 12:39:45 -07:00
d1vious 6adef20ca0 updated with the correct dataset 2022-10-13 14:57:17 -04:00
d1vious 43faff68da updated given feedback 2022-10-13 13:58:10 -04:00
pyth0n1c 7056578d21 Fix generate API. Also, return nonzero error
code when contentctl action raises an
uncaught error
2022-10-13 10:08:12 -07:00
patel-bhavin cd70fb50e7 adding gcp configs 2022-10-12 18:09:41 -07:00