Commit Graph

23231 Commits

Author SHA1 Message Date
patel-bhavin df0fa82b13 minor 2023-05-01 12:09:30 -07:00
patel-bhavin 6a5b6acea5 carry over 2023-05-01 12:07:20 -07:00
srv-rr-gh-researchbt e5c96b4329 Branch was auto-updated. 2023-05-01 11:59:15 -07:00
srv-rr-gh-researchbt f0885fa488 Branch was auto-updated. 2023-05-01 11:59:14 -07:00
srv-rr-gh-researchbt 5a9f5fdbb6 Branch was auto-updated. 2023-05-01 11:59:13 -07:00
srv-rr-gh-researchbt 5dd621c967 Branch was auto-updated. 2023-05-01 11:59:12 -07:00
srv-rr-gh-researchbt 8c29635b26 Branch was auto-updated. 2023-05-01 11:59:12 -07:00
srv-rr-gh-researchbt d3b2ecb5cd Branch was auto-updated. 2023-05-01 11:59:11 -07:00
srv-rr-gh-researchbt 2a72972b6f Branch was auto-updated. 2023-05-01 11:59:10 -07:00
srv-rr-gh-researchbt 743294ad50 Branch was auto-updated. 2023-05-01 11:59:09 -07:00
srv-rr-gh-researchbt 0e799764f5 Branch was auto-updated. 2023-05-01 11:59:09 -07:00
srv-rr-gh-researchbt f8160adfcf Branch was auto-updated. 2023-05-01 11:59:08 -07:00
srv-rr-gh-researchbt 0efafd346a Branch was auto-updated. 2023-05-01 11:59:07 -07:00
srv-rr-gh-researchbt ad7fe54218 Branch was auto-updated. 2023-05-01 11:59:06 -07:00
srv-rr-gh-researchbt 54b1323b5e Branch was auto-updated. 2023-05-01 11:59:05 -07:00
srv-rr-gh-researchbt b875cfdab0 Branch was auto-updated. 2023-05-01 11:59:04 -07:00
srv-rr-gh-researchbt be637cb05c Branch was auto-updated. 2023-05-01 11:59:01 -07:00
srv-rr-gh-researchbt 888221caba Branch was auto-updated. 2023-05-01 11:59:00 -07:00
srv-rr-gh-researchbt dc78551b3f Branch was auto-updated. 2023-05-01 11:59:00 -07:00
srv-rr-gh-researchbt 6f2ae390a3 Branch was auto-updated. 2023-05-01 11:58:59 -07:00
srv-rr-gh-researchbt d77dd1311a Branch was auto-updated. 2023-05-01 11:58:58 -07:00
mvelazco 3907ef5572 Merge pull request #2635 from splunk/schedule_mltk
fix MLTK scheduling
2023-05-01 14:58:41 -04:00
srv-rr-gh-researchbt ffbdf2a74b Branch was auto-updated. 2023-05-01 11:44:46 -07:00
srv-rr-gh-researchbt 337766f904 Branch was auto-updated. 2023-05-01 11:44:45 -07:00
srv-rr-gh-researchbt 19bb5dcf70 Branch was auto-updated. 2023-05-01 11:44:44 -07:00
srv-rr-gh-researchbt 0279d259bd Branch was auto-updated. 2023-05-01 11:44:42 -07:00
srv-rr-gh-researchbt b303c4d5bd Branch was auto-updated. 2023-05-01 11:44:41 -07:00
srv-rr-gh-researchbt 2821624441 Branch was auto-updated. 2023-05-01 11:44:40 -07:00
srv-rr-gh-researchbt 9c0bf31a86 Branch was auto-updated. 2023-05-01 11:44:36 -07:00
srv-rr-gh-researchbt 40040f91ae Branch was auto-updated. 2023-05-01 11:44:35 -07:00
srv-rr-gh-researchbt 054d4b3fe5 Branch was auto-updated. 2023-05-01 11:44:34 -07:00
srv-rr-gh-researchbt 95d11a3f06 Branch was auto-updated. 2023-05-01 11:44:33 -07:00
srv-rr-gh-researchbt d603c93d07 Branch was auto-updated. 2023-05-01 11:44:32 -07:00
srv-rr-gh-researchbt b3597c9d76 Branch was auto-updated. 2023-05-01 11:44:31 -07:00
srv-rr-gh-researchbt 073a5c4f2b Branch was auto-updated. 2023-05-01 11:44:30 -07:00
srv-rr-gh-researchbt 5baff0b09a Branch was auto-updated. 2023-05-01 11:44:29 -07:00
srv-rr-gh-researchbt c6a50e7c7a Branch was auto-updated. 2023-05-01 11:44:28 -07:00
srv-rr-gh-researchbt ce0c25cd3c Branch was auto-updated. 2023-05-01 11:44:27 -07:00
srv-rr-gh-researchbt 668be684d6 Branch was auto-updated. 2023-05-01 11:44:26 -07:00
srv-rr-gh-researchbt 1c8a9a1a02 Branch was auto-updated. 2023-05-01 11:44:25 -07:00
srv-rr-gh-researchbt ca921b256b Branch was auto-updated. 2023-05-01 11:44:24 -07:00
srv-rr-gh-researchbt a04dcd047d Branch was auto-updated. 2023-05-01 11:44:23 -07:00
Bhavin Patel c22fc6b876 Merge pull request #2636 from splunk/RIR
Create active_directory_lateral_movement_identified.yml
2023-05-01 11:44:04 -07:00
Michael Haag de98be7dd3 Create steal_or_forge_authentication_certificates_behavior_identified.yml 2023-05-01 11:36:38 -06:00
P4T12ICK fdd6c6534a update attackcti dependency 2023-05-01 16:26:51 +02:00
P4T12ICK 600ceb8937 Add BA detection schema and validator 2023-05-01 15:16:42 +02:00
Kelby Shelton 6542f1afa3 Fixed reference to different playbook. 2023-04-29 16:56:39 -05:00
Kelby Shelton b1688fd2ec Made required changes. See description.
Playbook is failing when only some reputation results were returned.

These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.
2023-04-29 16:43:09 -05:00
Kelby Shelton 5c3d8b4125 Rename playbooks and minor grammatical changes in .yml 2023-04-29 16:06:17 -05:00
Kelby Shelton a0ad583a55 Fixed bug with scoring and changed categories to classifications 2023-04-28 20:29:24 -05:00