Commit Graph

314 Commits

Author SHA1 Message Date
patel-bhavin 5b1f68be81 Updated TAs 2025-05-06 06:57:44 +00:00
Bhavin Patel 72e1c0611c Merge branch 'develop' into auto-ta-update-250 2025-05-05 15:05:26 -07:00
Bhavin Patel fcb1c407cd add dest to output_field 2025-05-05 11:07:20 -07:00
Teoderick Contreras 8b9a070ec1 linux_syscall_auditd_update 2025-05-05 10:09:54 +02:00
patel-bhavin 15ed5d18f2 Updated TAs 2025-04-29 06:57:56 +00:00
Bhavin Patel 524136ee6c adding data sources 2025-04-17 14:42:15 -07:00
Bhavin Patel 12e6cc7d7a Merge branch 'develop' into csftd_third_batch 2025-04-17 12:49:38 -07:00
Bhavin Patel fad66d2e11 Merge branch 'develop' into csftd_second_batch 2025-04-17 11:04:31 -07:00
Nasreddine Bencherchali d57b1686fd Merge branch 'develop' into csftd_second_batch 2025-04-17 18:06:46 +02:00
Nasreddine Bencherchali f98fe82f49 Merge branch 'develop' into csftd_third_batch 2025-04-17 18:06:43 +02:00
Bhavin Patel 52f23c270d Merge branch 'develop' into auto-ta-update-238 2025-04-17 08:54:31 -07:00
Bhavin Patel b0e980d207 revert linux TA 2025-04-17 08:53:14 -07:00
patel-bhavin 5cff3894ed Updated TAs 2025-04-17 06:58:05 +00:00
Nasreddine Bencherchali 6b64604903 resolve review comments 2025-04-17 00:22:13 +02:00
Nasreddine Bencherchali b9d06c166f update fields to cim and add output fields 2025-04-16 20:37:37 +02:00
Nasreddine Bencherchali 82d6f1ea84 update fields to cim and add output fields 2025-04-16 20:20:01 +02:00
Nasreddine Bencherchali 56cc3f5928 update fields to cim and add output fields 2025-04-16 19:57:13 +02:00
Nasreddine Bencherchali 96294957a3 add datasource and corresponding field 2025-04-16 17:19:21 +02:00
Nasreddine Bencherchali 953c8d59da Merge branch 'develop' into csftd_first_batch 2025-04-09 16:34:47 +02:00
Nasreddine Bencherchali e9caa0de7c cisco secure firewall detections - second batch 2025-04-09 12:33:51 +02:00
Nasreddine Bencherchali 53e3105db8 Merge branch 'develop' into csftd_first_batch 2025-04-03 20:59:14 +02:00
Bhavin Patel 49d75bbc36 Merge branch 'develop' into firewall_win_events 2025-04-03 10:44:21 -07:00
Bhavin Patel 6b1ad9369a revert powershell change and use fillnull 2025-04-03 09:10:34 -07:00
Nasreddine Bencherchali 9c8db54662 Update cisco_secure_firewall_threat_defense_connection_event.yml 2025-04-03 14:36:11 +02:00
Nasreddine Bencherchali f39a6d9a50 cisco secure firewall detections - first batch 2025-04-03 14:21:27 +02:00
Bhavin Patel 70a04d7ca0 Merge branch 'develop' into firewall_win_events 2025-04-02 13:23:42 -07:00
Bhavin Patel 3bf27db466 updating data source and search since Path is not availble in this dataset 2025-04-02 12:58:26 -07:00
Bhavin Patel c85370b142 Merge branch 'develop' into firewall_win_events 2025-04-01 12:44:49 -07:00
Teoderick Contreras 0fd302beb5 firewall_win_events 2025-04-01 09:50:11 +02:00
Patrick Bareiss 7541027f8e Merge branch 'develop' into output_normalization_endpoint 2025-04-01 09:41:58 +02:00
Bhavin Patel 26c1b2eb30 Update linux_secure.yml 2025-03-28 09:51:59 -07:00
patel-bhavin b3be9906eb Updated TAs 2025-03-28 06:58:23 +00:00
Bhavin Patel 20256391ee updating a new detection 2025-03-27 10:45:17 -07:00
Bhavin Patel f14fd8dc50 Merge branch 'develop' into output_normalization_endpoint 2025-03-27 10:23:42 -07:00
Bhavin Patel 76ef391ac3 updating title to full name 2025-03-26 12:04:02 -07:00
Bhavin Patel 1e1700cd4d Merge branch 'develop' into output_normalization_endpoint 2025-03-26 10:04:43 -07:00
Bhavin Patel 09f12546fb Merge branch 'develop' into output_normalization_o365 2025-03-25 10:42:52 -07:00
ljstella 843ab78068 Revert linux TA 2025-03-25 09:46:21 -05:00
patel-bhavin 5886f46ba5 Updated TAs 2025-03-25 06:58:01 +00:00
Bhavin Patel 4e537d286a Merge branch 'develop' into output_normalization_endpoint 2025-03-24 15:04:33 -07:00
Teoderick Contreras 1bf9bd3eb3 firewall_win_events 2025-03-21 13:42:40 +01:00
Bhavin Patel 753cf9e3f5 Update linux_secure.yml 2025-03-20 09:42:10 -07:00
patel-bhavin d3f6dc856d Updated TAs 2025-03-20 06:58:09 +00:00
Patrick Bareiss 641c590df7 Merge branch 'develop' into output_normalization_endpoint 2025-03-19 15:10:33 +01:00
P4T12ICK f243d22f61 Merge branch 'develop' into output_normalization_o365 2025-03-19 15:02:08 +01:00
delgado-jacob 4b70500f07 Merge remote-tracking branch 'origin/datasource_enrichment' into datasource_enrichment 2025-03-18 14:29:50 -07:00
delgado-jacob 6488af7c57 Add Zeek TA, fix detection source list 2025-03-18 14:29:30 -07:00
Bhavin Patel ebe5db35ae Merge branch 'develop' into datasource_enrichment 2025-03-18 12:55:17 -07:00
delgado-jacob da5c9b9bbd fix separator_value field 2025-03-18 11:37:35 -07:00
Patrick Bareiss 3122cbbc8b output improvements 2025-03-18 12:56:30 +01:00