Commit Graph

23231 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 8be90125f5 Branch was auto-updated. 2023-08-17 08:54:39 -07:00
srv-rr-gh-researchbt f6971e44c5 Branch was auto-updated. 2023-08-17 08:54:38 -07:00
Lou Stella 5f6968715e Merge pull request #2809 from splunk/ssa_escalation_Aug16
SSA Regex Bugfixes
v4.9.1
2023-08-17 10:54:23 -05:00
Lou Stella 45c6fda795 Version bumps 2023-08-17 10:47:29 -05:00
Lou Stella 1832570a39 Swap back to regex with new escapes 2023-08-17 10:36:36 -05:00
Lou Stella 2410b52d7a Regenerated for testing 2023-08-17 10:12:34 -05:00
Lou Stella 74a3891f78 Running mass conversion 2023-08-17 10:12:04 -05:00
Lou Stella 779b5aea63 Switch to using like 2023-08-17 10:10:59 -05:00
Lou Stella 2b77ace7e0 code change 2023-08-17 10:10:32 -05:00
tccontre 8320e6bb55 fix_susp_copy_from_system32 2023-08-17 10:49:41 +02:00
Lou Stella e74457dfab adding generated non-functioning regex 2023-08-16 15:58:22 -05:00
Lou Stella 0052fd4a61 adding converted version 2023-08-16 15:55:34 -05:00
Lou Stella 937beacded Adding updated full regex 2023-08-16 15:55:02 -05:00
Lou Stella d4eb301111 push for troulbeshooting 2023-08-16 15:42:17 -05:00
Lou Stella 3045c568d0 Manual edit to remove extra escaping that seems to break the detection 2023-08-16 15:34:48 -05:00
Lou Stella 024be40b55 Updated regex again 2023-08-16 15:34:17 -05:00
Lou Stella 7efd991ae8 pushing to share for troubleshooting 2023-08-16 14:44:18 -05:00
Lou Stella 649304fe95 tweak regex because tool supplies case insensitivity 2023-08-16 13:49:46 -05:00
Lou Stella ffed36c532 generated detection 2023-08-16 13:38:03 -05:00
Lou Stella 868bf4984a Updated regex, removed duplicate pwsh 2023-08-16 13:13:39 -05:00
tccontre bcb28ec561 Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug 2023-08-16 17:30:08 +02:00
Kelby Shelton 2dba7fc17c Updated ymls 2023-08-16 10:16:36 -05:00
tccontre d0b0099973 minor_fix_long_cmdline 2023-08-16 16:30:01 +02:00
Lou Stella 6dfa8e6f45 Resolved feedback 2023-08-14 10:41:39 -05:00
Lou Stella 00448a64de Fixed dispatch and feedback 2023-08-14 10:36:23 -05:00
Lou Stella 3a2eeb36d2 fix dispatch 2023-08-14 10:33:30 -05:00
Lou Stella 3142916b80 Resolved feedback 2023-08-14 10:30:52 -05:00
Lou Stella c56d1a92ef Resolved feedback 2023-08-14 10:13:54 -05:00
tccontre 1171a8d0b1 warzone_rat2 2023-08-14 16:38:27 +02:00
P4T12ICK 3d55d6061b Improved windows powershell hidden detection 2023-08-14 12:46:35 +02:00
P4T12ICK e120a617b3 converted detections to SPL2 2023-08-10 11:46:46 +02:00
Eric Li 90f7a714d6 Fix typos in ServiceNow_Related_Tickets_Search.yml 2023-08-09 17:11:38 -07:00
Eric Li f1bc527581 Add yml 2023-08-09 17:05:46 -07:00
Eric Li 730fbcaa10 Add playbook Jira_Related_Tickets_Search 2023-08-09 16:46:38 -07:00
P4T12ICK 5403306928 delete tmp folder 2023-08-09 17:56:37 +02:00
srv-rr-gh-researchbt da38b956cc Branch was auto-updated. 2023-08-09 08:50:16 -07:00
srv-rr-gh-researchbt aef1887c4f Branch was auto-updated. 2023-08-09 08:50:15 -07:00
srv-rr-gh-researchbt c6608714a0 Branch was auto-updated. 2023-08-09 08:50:13 -07:00
srv-rr-gh-researchbt 5d8ebd9794 Branch was auto-updated. 2023-08-09 08:50:12 -07:00
srv-rr-gh-researchbt a0eaf1ca40 Branch was auto-updated. 2023-08-09 08:50:11 -07:00
srv-rr-gh-researchbt b1f4cede7c Branch was auto-updated. 2023-08-09 08:50:10 -07:00
srv-rr-gh-researchbt e368059936 Branch was auto-updated. 2023-08-09 08:50:07 -07:00
srv-rr-gh-researchbt fd27db631c Branch was auto-updated. 2023-08-09 08:50:06 -07:00
srv-rr-gh-researchbt 850f40cc99 Branch was auto-updated. 2023-08-09 08:50:03 -07:00
srv-rr-gh-researchbt 55a2094f7b Branch was auto-updated. 2023-08-09 08:50:02 -07:00
srv-rr-gh-researchbt 555709d325 Branch was auto-updated. 2023-08-09 08:50:01 -07:00
srv-rr-gh-researchbt 4eb29855c7 Branch was auto-updated. 2023-08-09 08:49:58 -07:00
research bot e17ab01225 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-08-09 15:49:37 +00:00
P4T12ICK da3d925adf converted detections to SPL2 2023-08-09 14:11:24 +02:00
P4T12ICK 01aec84d9a converted detections to SPL2 2023-08-09 11:42:41 +02:00