 Eric
|
d9960562b8
|
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.
|
2025-05-02 14:10:46 -07:00 |
|
|
Eric
|
170ed93d9d
|
Merge branch 'develop' into fix_bad_attack_data_paths
|
2025-04-29 16:54:17 -07:00 |
|
|
pyth0n1c
|
aa3187d61e
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-18 10:13:12 -07:00 |
|
|
Bhavin Patel
|
eae0a4ed66
|
updating spls to match with output from data sources
|
2025-04-17 14:49:05 -07:00 |
|
|
Bhavin Patel
|
5b7cfdb7d3
|
updating versions
|
2025-04-16 16:45:16 -07:00 |
|
|
Bhavin Patel
|
1cbf9d3d2d
|
updating and testing aws detections
|
2025-04-09 16:06:07 -07:00 |
|
|
Bhavin Patel
|
b6b55499db
|
Merge branch 'develop' into aws_bedrock
|
2025-04-09 14:38:00 -07:00 |
|
|
Bhavin Patel
|
d28418800b
|
fix with validate
|
2025-04-03 17:13:18 -07:00 |
|
|
Bhavin Patel
|
032dbfda68
|
adding kb detection
|
2025-04-03 16:55:45 -07:00 |
|
|
Bhavin Patel
|
1b2f69d137
|
adding new detection file
|
2025-04-03 12:13:43 -07:00 |
|
|
Bhavin Patel
|
70174e8318
|
update detection
|
2025-04-01 12:45:27 -07:00 |
|
|
Eric
|
fc2be9e0b7
|
fix pass at attack data name fixes
|
2025-03-31 17:05:54 -07:00 |
|
|
Bhavin Patel
|
96bd1501b6
|
update inspect failures
|
2025-03-27 10:54:24 -07:00 |
|
|
Bhavin Patel
|
1e1700cd4d
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-26 10:04:43 -07:00 |
|
|
Bhavin Patel
|
7a9ebda18f
|
delete guardrail
|
2025-03-25 17:38:14 -07:00 |
|
|
Bhavin Patel
|
428413f23b
|
adding two bedrock detections
|
2025-03-25 17:02:16 -07:00 |
|
|
Bhavin Patel
|
63380103e5
|
udpate date format
|
2025-03-25 12:07:17 -07:00 |
|
|
Bhavin Patel
|
87eeec65a6
|
updating dates and verrsion
|
2025-03-25 11:21:38 -07:00 |
|
|
Patrick Bareiss
|
641c590df7
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-19 15:10:33 +01:00 |
|
|
P4T12ICK
|
f243d22f61
|
Merge branch 'develop' into output_normalization_o365
|
2025-03-19 15:02:08 +01:00 |
|
|
Bhavin Patel
|
ea3fa4daf6
|
updating search
|
2025-03-18 14:52:30 -07:00 |
|
|
Patrick Bareiss
|
81e0801829
|
rerun CI
|
2025-03-18 13:55:20 +01:00 |
|
|
Patrick Bareiss
|
3122cbbc8b
|
output improvements
|
2025-03-18 12:56:30 +01:00 |
|
|
Patrick Bareiss
|
33461bfe7c
|
improvements
|
2025-03-18 08:13:17 +01:00 |
|
|
P4T12ICK
|
029788ae05
|
Merge branch 'develop' into output_normalization_o365
|
2025-03-18 08:09:11 +01:00 |
|
|
Patrick Bareiss
|
8415182547
|
improvements
|
2025-03-18 08:08:43 +01:00 |
|
|
Bhavin Patel
|
3819c6864d
|
updating detections
|
2025-03-17 19:14:58 -07:00 |
|
|
Bhavin Patel
|
276d45b485
|
Merge branch 'develop' into nterl0k-T1552-sus-o365-searches
|
2025-03-17 16:47:27 -07:00 |
|
|
Patrick Bareiss
|
136df93521
|
Merge branch 'develop' into output_normalization_o365
|
2025-03-17 19:33:08 +01:00 |
|
|
Patrick Bareiss
|
a0d8dff5c4
|
O365 output normalization
|
2025-03-17 19:29:23 +01:00 |
|
|
Patrick Bareiss
|
850a172af4
|
bug fix
|
2025-03-17 13:02:18 +01:00 |
|
|
Patrick Bareiss
|
13f692c052
|
version bump
|
2025-03-17 12:28:56 +01:00 |
|
|
Patrick Bareiss
|
1120cea9a0
|
Improve data source validation
|
2025-03-17 12:24:08 +01:00 |
|
|
Patrick Bareiss
|
18eded0a7c
|
bump version
|
2025-03-14 14:12:58 +01:00 |
|
|
Patrick Bareiss
|
a7f5db9f55
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-14 14:05:39 +01:00 |
|
|
Bhavin Patel
|
34dc8eb775
|
Merge branch 'develop' into output_normalization_azure_ad
|
2025-03-13 12:08:26 -07:00 |
|
|
Bhavin Patel
|
9b112cabc6
|
Merge branch 'develop' into output_normalization_aws
|
2025-03-13 11:10:04 -07:00 |
|
|
Patrick Bareiss
|
abf3c5f1d9
|
improvements
|
2025-03-13 11:49:06 +01:00 |
|
|
Bhavin Patel
|
dad3892103
|
Merge branch 'develop' into output_normalization_azure_ad
|
2025-03-12 09:54:45 -07:00 |
|
|
Steven Dick
|
2332b3cc9a
|
Merge branch 'splunk:develop' into nterl0k-T1552-sus-o365-searches
|
2025-03-12 08:00:44 -04:00 |
|
|
Bhavin Patel
|
60ba75f2a8
|
Merge branch 'develop' into nterl0k-T1552-sus-o365-searches
|
2025-03-11 13:25:48 -07:00 |
|
|
Bhavin Patel
|
d5feba1042
|
drilldown update- minor
|
2025-03-11 13:22:04 -07:00 |
|
|
P4T12ICK
|
1f3447817f
|
Merge branch 'develop' into output_normalization_aws
|
2025-03-11 12:01:45 +01:00 |
|
|
Bhavin Patel
|
6ff8fe0fb3
|
Merge branch 'develop' into susmailrule
|
2025-03-07 09:26:12 -08:00 |
|
|
Simon
|
ce6d61a75b
|
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-03 13:35:26 +01:00 |
|
|
P4T12ICK
|
da8a7a2816
|
Merge branch 'develop' into output_normalization_aws
|
2025-03-03 08:17:01 +01:00 |
|
|
☕️
|
ff7729e418
|
Merge branch 'develop' into susmailrule
|
2025-03-01 01:10:19 +00:00 |
|
|
research-bot
|
d813729588
|
updating test section as both dataset need to be indexed together
|
2025-02-28 14:29:32 -08:00 |
|
|
Bhavin Patel
|
cf52e66778
|
Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 11:52:31 -08:00 |
|
|
Steven Dick
|
1e9a8c8f20
|
Update o365_email_suspicious_search_behavior.yml
|
2025-02-27 12:10:30 -05:00 |
|