srv-rr-gh-researchbt
|
8be90125f5
|
Branch was auto-updated.
|
2023-08-17 08:54:39 -07:00 |
|
srv-rr-gh-researchbt
|
f6971e44c5
|
Branch was auto-updated.
|
2023-08-17 08:54:38 -07:00 |
|
Lou Stella
|
5f6968715e
|
Merge pull request #2809 from splunk/ssa_escalation_Aug16
SSA Regex Bugfixes
v4.9.1
|
2023-08-17 10:54:23 -05:00 |
|
Lou Stella
|
45c6fda795
|
Version bumps
|
2023-08-17 10:47:29 -05:00 |
|
Lou Stella
|
1832570a39
|
Swap back to regex with new escapes
|
2023-08-17 10:36:36 -05:00 |
|
Lou Stella
|
2410b52d7a
|
Regenerated for testing
|
2023-08-17 10:12:34 -05:00 |
|
Lou Stella
|
74a3891f78
|
Running mass conversion
|
2023-08-17 10:12:04 -05:00 |
|
Lou Stella
|
779b5aea63
|
Switch to using like
|
2023-08-17 10:10:59 -05:00 |
|
Lou Stella
|
2b77ace7e0
|
code change
|
2023-08-17 10:10:32 -05:00 |
|
tccontre
|
8320e6bb55
|
fix_susp_copy_from_system32
|
2023-08-17 10:49:41 +02:00 |
|
Lou Stella
|
e74457dfab
|
adding generated non-functioning regex
|
2023-08-16 15:58:22 -05:00 |
|
Lou Stella
|
0052fd4a61
|
adding converted version
|
2023-08-16 15:55:34 -05:00 |
|
Lou Stella
|
937beacded
|
Adding updated full regex
|
2023-08-16 15:55:02 -05:00 |
|
Lou Stella
|
d4eb301111
|
push for troulbeshooting
|
2023-08-16 15:42:17 -05:00 |
|
Lou Stella
|
3045c568d0
|
Manual edit to remove extra escaping that seems to break the detection
|
2023-08-16 15:34:48 -05:00 |
|
Lou Stella
|
024be40b55
|
Updated regex again
|
2023-08-16 15:34:17 -05:00 |
|
Lou Stella
|
7efd991ae8
|
pushing to share for troubleshooting
|
2023-08-16 14:44:18 -05:00 |
|
Lou Stella
|
649304fe95
|
tweak regex because tool supplies case insensitivity
|
2023-08-16 13:49:46 -05:00 |
|
Lou Stella
|
ffed36c532
|
generated detection
|
2023-08-16 13:38:03 -05:00 |
|
Lou Stella
|
868bf4984a
|
Updated regex, removed duplicate pwsh
|
2023-08-16 13:13:39 -05:00 |
|
tccontre
|
bcb28ec561
|
Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug
|
2023-08-16 17:30:08 +02:00 |
|
Kelby Shelton
|
2dba7fc17c
|
Updated ymls
|
2023-08-16 10:16:36 -05:00 |
|
tccontre
|
d0b0099973
|
minor_fix_long_cmdline
|
2023-08-16 16:30:01 +02:00 |
|
Lou Stella
|
6dfa8e6f45
|
Resolved feedback
|
2023-08-14 10:41:39 -05:00 |
|
Lou Stella
|
00448a64de
|
Fixed dispatch and feedback
|
2023-08-14 10:36:23 -05:00 |
|
Lou Stella
|
3a2eeb36d2
|
fix dispatch
|
2023-08-14 10:33:30 -05:00 |
|
Lou Stella
|
3142916b80
|
Resolved feedback
|
2023-08-14 10:30:52 -05:00 |
|
Lou Stella
|
c56d1a92ef
|
Resolved feedback
|
2023-08-14 10:13:54 -05:00 |
|
tccontre
|
1171a8d0b1
|
warzone_rat2
|
2023-08-14 16:38:27 +02:00 |
|
P4T12ICK
|
3d55d6061b
|
Improved windows powershell hidden detection
|
2023-08-14 12:46:35 +02:00 |
|
P4T12ICK
|
e120a617b3
|
converted detections to SPL2
|
2023-08-10 11:46:46 +02:00 |
|
Eric Li
|
90f7a714d6
|
Fix typos in ServiceNow_Related_Tickets_Search.yml
|
2023-08-09 17:11:38 -07:00 |
|
Eric Li
|
f1bc527581
|
Add yml
|
2023-08-09 17:05:46 -07:00 |
|
Eric Li
|
730fbcaa10
|
Add playbook Jira_Related_Tickets_Search
|
2023-08-09 16:46:38 -07:00 |
|
P4T12ICK
|
5403306928
|
delete tmp folder
|
2023-08-09 17:56:37 +02:00 |
|
srv-rr-gh-researchbt
|
da38b956cc
|
Branch was auto-updated.
|
2023-08-09 08:50:16 -07:00 |
|
srv-rr-gh-researchbt
|
aef1887c4f
|
Branch was auto-updated.
|
2023-08-09 08:50:15 -07:00 |
|
srv-rr-gh-researchbt
|
c6608714a0
|
Branch was auto-updated.
|
2023-08-09 08:50:13 -07:00 |
|
srv-rr-gh-researchbt
|
5d8ebd9794
|
Branch was auto-updated.
|
2023-08-09 08:50:12 -07:00 |
|
srv-rr-gh-researchbt
|
a0eaf1ca40
|
Branch was auto-updated.
|
2023-08-09 08:50:11 -07:00 |
|
srv-rr-gh-researchbt
|
b1f4cede7c
|
Branch was auto-updated.
|
2023-08-09 08:50:10 -07:00 |
|
srv-rr-gh-researchbt
|
e368059936
|
Branch was auto-updated.
|
2023-08-09 08:50:07 -07:00 |
|
srv-rr-gh-researchbt
|
fd27db631c
|
Branch was auto-updated.
|
2023-08-09 08:50:06 -07:00 |
|
srv-rr-gh-researchbt
|
850f40cc99
|
Branch was auto-updated.
|
2023-08-09 08:50:03 -07:00 |
|
srv-rr-gh-researchbt
|
55a2094f7b
|
Branch was auto-updated.
|
2023-08-09 08:50:02 -07:00 |
|
srv-rr-gh-researchbt
|
555709d325
|
Branch was auto-updated.
|
2023-08-09 08:50:01 -07:00 |
|
srv-rr-gh-researchbt
|
4eb29855c7
|
Branch was auto-updated.
|
2023-08-09 08:49:58 -07:00 |
|
research bot
|
e17ab01225
|
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
|
2023-08-09 15:49:37 +00:00 |
|
P4T12ICK
|
da3d925adf
|
converted detections to SPL2
|
2023-08-09 14:11:24 +02:00 |
|
P4T12ICK
|
01aec84d9a
|
converted detections to SPL2
|
2023-08-09 11:42:41 +02:00 |
|