2f6a056f55
Branch was auto-updated.
2023-10-09 17:12:31 -07:00
58f0ead8af
Merge pull request #2878 from splunk/stevend_2777
...
StevenD PR is certified!
2023-10-09 17:12:13 -07:00
ec99881ca0
Branch was auto-updated.
2023-10-09 16:02:25 -07:00
4355110365
Merge pull request #2881 from splunk/fixes_for_contentctl_migration
...
Fixes for contentctl migration
2023-10-09 15:58:59 -07:00
3e07515de2
adding analytic story
2023-10-09 15:14:35 -04:00
02859139c6
update detection
2023-10-09 14:21:01 -04:00
92b6c09fc5
updating detection
2023-10-09 13:52:36 -04:00
f6786d9dcd
fixing detection
2023-10-09 11:45:21 -04:00
6ba29754a6
Meaningless commit to
...
the release branch so that
we can open a PR
2023-10-06 17:03:13 -07:00
7ff09049e3
Fix the ids associated with a number of playbooks and fix incorrectly named referenced detections. Check with Playbook SME to understand the full implications of these changes.
2023-10-06 16:48:52 -07:00
3fce3dff3c
contentctl validate throws errors
...
on the following playbooks. the first
had an invalid uuid (improper number
of characters). The second had unallowed
characters in the name (underscores). I
will reach out to the devs for this content
to understand what implications these changes
may have.
2023-10-06 16:24:38 -07:00
9a67bbd26a
Update two detections to use IN()
2023-10-06 15:54:41 -05:00
1612821676
update for data
2023-10-06 13:10:30 -07:00
a20f6b726b
adding new detection - diamond ticket
2023-10-06 15:46:36 -04:00
49d175146f
updating files and metadata
2023-10-06 10:15:47 -07:00
d40d319dfb
Reconvert from sigma with new logic
2023-10-05 16:51:23 -05:00
6fd0f7724f
selectively lowercase eval'd fields
2023-10-05 16:50:34 -05:00
c1e0211cfe
launch.json config for debugging convert
2023-10-05 16:48:53 -05:00
762d9c6180
Branch was auto-updated.
2023-10-05 08:47:36 -07:00
694452bc71
Merge pull request #2874 from splunk/conflu
...
CVE-2023-22515
2023-10-05 08:47:11 -07:00
f512d5dab8
convert sigma values to lowercase
2023-10-05 08:16:26 -07:00
c668947873
Add lower to evals
2023-10-04 18:06:19 -05:00
e4e5b9141e
Branch was auto-updated.
2023-10-04 15:53:05 -07:00
7c756fcbd5
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
2023-10-04 22:52:39 +00:00
c0d4524654
Branch was auto-updated.
2023-10-04 15:26:37 -07:00
169c3af096
Merge pull request #2876 from splunk/njrat_spell
...
NjRAT spell error
2023-10-04 15:26:16 -07:00
07518ecaea
updates
2023-10-04 15:22:26 -07:00
21ab7dfcc2
Merge pull request #2875 from splunk/dependabot/pip/gitpython-3.1.35
2023-10-04 21:38:50 +00:00
5d6e133292
Branch was auto-updated.
2023-10-04 14:31:49 -07:00
033deb6c1c
Branch was auto-updated.
2023-10-04 14:31:42 -07:00
acaed15515
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
2023-10-04 21:31:21 +00:00
46f1c2484c
Bump gitpython from 3.1.33 to 3.1.35
...
Bumps [gitpython](https://github.com/gitpython-developers/GitPython ) from 3.1.33 to 3.1.35.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases )
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES )
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.33...3.1.35 )
---
updated-dependencies:
- dependency-name: gitpython
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-04 20:59:26 +00:00
2c2e10e1db
Merge pull request #2868 from splunk/dependabot/pip/pytest-7.4.2
2023-10-04 20:58:50 +00:00
0ef217d698
Merge pull request #2867 from splunk/dependabot/pip/jsonschema-4.19.1
2023-10-04 20:58:29 +00:00
a6d64b7e0d
Branch was auto-updated.
2023-10-04 13:51:38 -07:00
8efa7b57b1
Branch was auto-updated.
2023-10-04 13:51:37 -07:00
48f85987cf
Branch was auto-updated.
2023-10-04 13:51:35 -07:00
f7dcab2ed4
Merge pull request #2862 from splunk/release_v4.13.0
...
Release Branch 4.13.0
2023-10-04 13:51:15 -07:00
6a652765f4
CVE-2023-22515
2023-10-04 14:43:26 -06:00
9f5fdae162
Merge pull request #2873 from splunk/fix_duplicate_uuid
...
Update uuid with new one
2023-10-03 17:33:16 -07:00
3d21822873
Update uuid with new one
2023-10-03 17:31:15 -07:00
393efa390f
updating the lolbins to lowercase
2023-10-03 15:25:03 -07:00
fe821f3328
Merge pull request #2872 from splunk/add_process_path_to_detection
...
add process_path to tstats output
2023-10-03 15:21:46 -07:00
ca2a81b55d
add process_path to tstats output
2023-10-03 14:02:04 -07:00
b28e03b1c7
enrichment
2023-10-03 12:12:57 -07:00
54fec22efc
Merge pull request #2870 from splunk/new_ba_splv2_detection
...
New BA detection with status : validation
2023-10-03 12:06:39 -07:00
8f6e67c614
adding new detection
2023-10-03 09:43:22 -07:00
87835aded9
Update dev_ssa version of detection as well.
2023-10-02 16:47:50 -07:00
a23eb85f4f
Removed printout from python code. Committed detection in dist with status validation.
2023-10-02 16:45:06 -07:00
95f836d4f6
Support for 'status: validation' to be used ONLY for BA Detections. If this is used with a non-ba detection, an exception will be generated.
2023-10-02 16:42:39 -07:00
srv-rr-gh-researchbt