patel-bhavin
df0fa82b13
minor
2023-05-01 12:09:30 -07:00
patel-bhavin
6a5b6acea5
carry over
2023-05-01 12:07:20 -07:00
srv-rr-gh-researchbt
e5c96b4329
Branch was auto-updated.
2023-05-01 11:59:15 -07:00
srv-rr-gh-researchbt
f0885fa488
Branch was auto-updated.
2023-05-01 11:59:14 -07:00
srv-rr-gh-researchbt
5a9f5fdbb6
Branch was auto-updated.
2023-05-01 11:59:13 -07:00
srv-rr-gh-researchbt
5dd621c967
Branch was auto-updated.
2023-05-01 11:59:12 -07:00
srv-rr-gh-researchbt
8c29635b26
Branch was auto-updated.
2023-05-01 11:59:12 -07:00
srv-rr-gh-researchbt
d3b2ecb5cd
Branch was auto-updated.
2023-05-01 11:59:11 -07:00
srv-rr-gh-researchbt
2a72972b6f
Branch was auto-updated.
2023-05-01 11:59:10 -07:00
srv-rr-gh-researchbt
743294ad50
Branch was auto-updated.
2023-05-01 11:59:09 -07:00
srv-rr-gh-researchbt
0e799764f5
Branch was auto-updated.
2023-05-01 11:59:09 -07:00
srv-rr-gh-researchbt
f8160adfcf
Branch was auto-updated.
2023-05-01 11:59:08 -07:00
srv-rr-gh-researchbt
0efafd346a
Branch was auto-updated.
2023-05-01 11:59:07 -07:00
srv-rr-gh-researchbt
ad7fe54218
Branch was auto-updated.
2023-05-01 11:59:06 -07:00
srv-rr-gh-researchbt
54b1323b5e
Branch was auto-updated.
2023-05-01 11:59:05 -07:00
srv-rr-gh-researchbt
b875cfdab0
Branch was auto-updated.
2023-05-01 11:59:04 -07:00
srv-rr-gh-researchbt
be637cb05c
Branch was auto-updated.
2023-05-01 11:59:01 -07:00
srv-rr-gh-researchbt
888221caba
Branch was auto-updated.
2023-05-01 11:59:00 -07:00
srv-rr-gh-researchbt
dc78551b3f
Branch was auto-updated.
2023-05-01 11:59:00 -07:00
srv-rr-gh-researchbt
6f2ae390a3
Branch was auto-updated.
2023-05-01 11:58:59 -07:00
srv-rr-gh-researchbt
d77dd1311a
Branch was auto-updated.
2023-05-01 11:58:58 -07:00
mvelazco
3907ef5572
Merge pull request #2635 from splunk/schedule_mltk
...
fix MLTK scheduling
2023-05-01 14:58:41 -04:00
srv-rr-gh-researchbt
ffbdf2a74b
Branch was auto-updated.
2023-05-01 11:44:46 -07:00
srv-rr-gh-researchbt
337766f904
Branch was auto-updated.
2023-05-01 11:44:45 -07:00
srv-rr-gh-researchbt
19bb5dcf70
Branch was auto-updated.
2023-05-01 11:44:44 -07:00
srv-rr-gh-researchbt
0279d259bd
Branch was auto-updated.
2023-05-01 11:44:42 -07:00
srv-rr-gh-researchbt
b303c4d5bd
Branch was auto-updated.
2023-05-01 11:44:41 -07:00
srv-rr-gh-researchbt
2821624441
Branch was auto-updated.
2023-05-01 11:44:40 -07:00
srv-rr-gh-researchbt
9c0bf31a86
Branch was auto-updated.
2023-05-01 11:44:36 -07:00
srv-rr-gh-researchbt
40040f91ae
Branch was auto-updated.
2023-05-01 11:44:35 -07:00
srv-rr-gh-researchbt
054d4b3fe5
Branch was auto-updated.
2023-05-01 11:44:34 -07:00
srv-rr-gh-researchbt
95d11a3f06
Branch was auto-updated.
2023-05-01 11:44:33 -07:00
srv-rr-gh-researchbt
d603c93d07
Branch was auto-updated.
2023-05-01 11:44:32 -07:00
srv-rr-gh-researchbt
b3597c9d76
Branch was auto-updated.
2023-05-01 11:44:31 -07:00
srv-rr-gh-researchbt
073a5c4f2b
Branch was auto-updated.
2023-05-01 11:44:30 -07:00
srv-rr-gh-researchbt
5baff0b09a
Branch was auto-updated.
2023-05-01 11:44:29 -07:00
srv-rr-gh-researchbt
c6a50e7c7a
Branch was auto-updated.
2023-05-01 11:44:28 -07:00
srv-rr-gh-researchbt
ce0c25cd3c
Branch was auto-updated.
2023-05-01 11:44:27 -07:00
srv-rr-gh-researchbt
668be684d6
Branch was auto-updated.
2023-05-01 11:44:26 -07:00
srv-rr-gh-researchbt
1c8a9a1a02
Branch was auto-updated.
2023-05-01 11:44:25 -07:00
srv-rr-gh-researchbt
ca921b256b
Branch was auto-updated.
2023-05-01 11:44:24 -07:00
srv-rr-gh-researchbt
a04dcd047d
Branch was auto-updated.
2023-05-01 11:44:23 -07:00
Bhavin Patel
c22fc6b876
Merge pull request #2636 from splunk/RIR
...
Create active_directory_lateral_movement_identified.yml
2023-05-01 11:44:04 -07:00
Michael Haag
de98be7dd3
Create steal_or_forge_authentication_certificates_behavior_identified.yml
2023-05-01 11:36:38 -06:00
P4T12ICK
fdd6c6534a
update attackcti dependency
2023-05-01 16:26:51 +02:00
P4T12ICK
600ceb8937
Add BA detection schema and validator
2023-05-01 15:16:42 +02:00
Kelby Shelton
6542f1afa3
Fixed reference to different playbook.
2023-04-29 16:56:39 -05:00
Kelby Shelton
b1688fd2ec
Made required changes. See description.
...
Playbook is failing when only some reputation results were returned.
These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.
2023-04-29 16:43:09 -05:00
Kelby Shelton
5c3d8b4125
Rename playbooks and minor grammatical changes in .yml
2023-04-29 16:06:17 -05:00
Kelby Shelton
a0ad583a55
Fixed bug with scoring and changed categories to classifications
2023-04-28 20:29:24 -05:00