Commit Graph

23231 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 277e179ba8 Branch was auto-updated. 2023-03-19 23:45:46 -07:00
P4T12ICK 8bb1cb2f0f Merge pull request #2575 from splunk/playbook_spelling_fix
Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml
2023-03-20 07:45:29 +01:00
Lou Stella fb92555b55 Update CrowdStrike_OAuth_API_Device_Attribute_Lookup.yml 2023-03-19 20:30:47 -05:00
mvelazco 2c866381b5 adding datamodel tag 2023-03-17 15:14:09 -04:00
mvelazco 2a32bc9694 adding new detection 2023-03-17 14:17:07 -04:00
pyth0n1c 17324da23f Allow us to commit/write back to
the branch given the permissions 
changes when we have tagged to
create a release.
2023-03-17 10:58:07 -07:00
srv-rr-gh-researchbt 1233209de8 Branch was auto-updated. 2023-03-17 05:23:37 -07:00
P4T12ICK 0956ec8da1 add customer_uid to detection report 2023-03-17 13:22:55 +01:00
Michael Haag b4e22c20a9 fix 2023-03-16 15:54:47 -06:00
Michael Haag 88c58f5821 JOIN 2023-03-16 15:17:20 -06:00
mvelazco 7ccc45422e adding detection 2023-03-16 15:46:57 -04:00
Michael Haag 8bbd291aa6 shipments 2023-03-16 12:30:58 -06:00
srv-rr-gh-researchbt 6df9693a76 Branch was auto-updated. 2023-03-16 02:05:00 -07:00
P4T12ICK 66d6dec65f merged with develop 2023-03-16 10:04:38 +01:00
srv-rr-gh-researchbt ab28004b7e Branch was auto-updated. 2023-03-16 01:45:49 -07:00
P4T12ICK 3641d0cff0 merged with develop 2023-03-16 09:45:09 +01:00
P4T12ICK 153b2d44ae merged with develop 2023-03-16 09:44:35 +01:00
srv-rr-gh-researchbt faf877bd73 Branch was auto-updated. 2023-03-15 12:55:25 -07:00
P4T12ICK 5316ece6e0 improvements ssa detections 2023-03-15 20:54:59 +01:00
srv-rr-gh-researchbt 449643aa0d Branch was auto-updated. 2023-03-15 01:37:29 -07:00
P4T12ICK cf199e49b9 improvements ssa detections 2023-03-15 09:36:56 +01:00
srv-rr-gh-researchbt fc08810ecb Branch was auto-updated. 2023-03-14 09:20:27 -07:00
Rod Soto 57b4410041 Merge pull request #2571 from splunk/update_import_applocker_policy
Update windows_powershell_import_applocker_policy.yml
2023-03-14 09:20:03 -07:00
tccontre f2ceb2520f Update windows_powershell_import_applocker_policy.yml
add mitre attack id for windows powershell import applocker policy related to defense evasion
2023-03-14 16:51:19 +01:00
Vatsal Jagani cf14595674 Made ransomware notes lookup case insensitive. 2023-03-14 18:38:43 +05:30
Vatsal Jagani 0ed1ee7b97 Added medusa ransomware file extension and note file names. 2023-03-14 18:35:46 +05:30
Michael Haag 0c446faa13 OKTAAA 2023-03-10 06:33:07 -07:00
Michael Haag 6eb57e394e Haag is Back 🎆 2023-03-10 06:21:30 -07:00
research bot 8d99c53eaa Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-03-07 23:41:43 +00:00
pyth0n1c 1ee5360e2e Merge pull request #2564 from splunk/appinspect_361
search formatting errors causing app inspect failure
v3.61.0
2023-03-07 15:24:14 -08:00
patel-bhavin bc6044ab63 spl update 2023-03-07 14:53:21 -08:00
patel-bhavin 6db4dbc689 one more time 2023-03-07 14:34:30 -08:00
patel-bhavin 7f8f6fc65d updating yml error 2023-03-07 14:19:27 -08:00
patel-bhavin 749e244270 search formatting errors 2023-03-07 13:48:44 -08:00
srv-rr-gh-researchbt 2b716b4519 Branch was auto-updated. 2023-03-07 02:55:32 -08:00
P4T12ICK 163d1eb15b improved detection 2023-03-07 11:55:09 +01:00
srv-rr-gh-researchbt e4f20a958a Branch was auto-updated. 2023-03-07 02:27:52 -08:00
P4T12ICK 517ab37092 improved sigma converter 2023-03-07 11:27:12 +01:00
srv-rr-gh-researchbt 3c274b385a Branch was auto-updated. 2023-03-07 01:02:46 -08:00
P4T12ICK 031297f62c wip 2023-03-07 10:02:22 +01:00
srv-rr-gh-researchbt 437afdb242 Branch was auto-updated. 2023-03-07 00:25:22 -08:00
P4T12ICK 77b26cd6ac wip 2023-03-07 09:25:00 +01:00
srv-rr-gh-researchbt e5a3abaedb Branch was auto-updated. 2023-03-07 00:20:09 -08:00
P4T12ICK 788359e169 wip 2023-03-07 09:19:42 +01:00
Bhavin Patel d736063e85 Merge pull request #2561 from splunk/dynamic_attribute_lookup
Dynamic Attribute Lookup
2023-03-06 14:41:11 -08:00
srv-rr-gh-researchbt 0734c91ca5 Branch was auto-updated. 2023-03-06 14:31:20 -08:00
Bhavin Patel 1452afa0ca Merge pull request #2562 from splunk/automated_enrichment_playbook
Adding Automated Enrichment playbook
2023-03-06 14:31:03 -08:00
Lou Stella 2ac91962fc Adding Automated Enrichment playbook 2023-03-06 15:37:40 -06:00
srv-rr-gh-researchbt eb9b9d9b0e Branch was auto-updated. 2023-03-06 11:15:38 -08:00
Bhavin Patel f4eb6d7062 Merge pull request #2550 from splunk/dynamic_related_tickets
Dynamic Related Tickets and Where To Find Them
2023-03-06 11:15:19 -08:00