 Eric
|
d9960562b8
|
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.
|
2025-05-02 14:10:46 -07:00 |
|
|
Bhavin Patel
|
7742f511b3
|
Merge branch 'develop' into deprecate_rmm_hunt
|
2025-05-01 11:53:34 -07:00 |
|
|
Bhavin Patel
|
4d1ff91ee3
|
updated messaging
|
2025-04-30 12:24:55 -07:00 |
|
|
Bhavin Patel
|
884eede4ce
|
updating search
|
2025-04-30 12:14:30 -07:00 |
|
|
Nasreddine Bencherchali
|
1dc4f1c45a
|
bump versions
|
2025-04-24 19:53:19 +02:00 |
|
|
Nasreddine Bencherchali
|
60164de4e7
|
updates and tunings
|
2025-04-24 15:15:09 +02:00 |
|
|
Bhavin Patel
|
bf3fe8b361
|
remove yamls and update mapping
|
2025-04-15 15:19:48 -07:00 |
|
|
Bhavin Patel
|
23219463dc
|
Merge branch 'develop' into jp_paranoid
|
2025-04-02 12:07:51 -07:00 |
|
|
Michael Haag
|
6c40990600
|
fixes
|
2025-04-01 15:05:10 -06:00 |
|
|
Patrick Bareiss
|
7541027f8e
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-04-01 09:41:58 +02:00 |
|
|
Bhavin Patel
|
6408f290aa
|
Merge branch 'develop' into jp_paranoid
|
2025-03-28 13:38:11 -07:00 |
|
|
Bhavin Patel
|
12356f996f
|
updating detection to previous
|
2025-03-28 11:39:59 -07:00 |
|
|
Bhavin Patel
|
3f274b9b83
|
deprecate and add new
|
2025-03-28 11:32:34 -07:00 |
|
|
Bhavin Patel
|
25a3239716
|
clean up
|
2025-03-26 13:49:53 -07:00 |
|
|
Bhavin Patel
|
e5b05500d7
|
deprecating the old one
|
2025-03-26 13:45:26 -07:00 |
|
|
Bhavin Patel
|
c345f920ed
|
adding gitkeep for empty folders
|
2025-03-17 18:04:26 -07:00 |
|
|
Bhavin Patel
|
7f3276c872
|
Merge branch 'develop' into remove_detections
|
2025-03-17 14:38:06 -07:00 |
|
|
P4T12ICK
|
fd9c3f69c5
|
Merge branch 'develop' into output_normalization_aws
|
2025-02-27 09:59:00 +01:00 |
|
|
research-bot
|
2fe8bc5638
|
remove 152 public detections
|
2025-02-26 10:39:51 -08:00 |
|
|
Patrick Bareiss
|
e96239166e
|
Merge branch 'develop' into output_normalization_aws
|
2025-02-26 09:35:23 +01:00 |
|
|
Patrick Bareiss
|
e098dc93c2
|
version bump
|
2025-02-26 09:24:11 +01:00 |
|
|
Patrick Bareiss
|
77cbb835ce
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-21 09:37:10 +01:00 |
|
|
Patrick Bareiss
|
41e69bd182
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-21 09:24:24 +01:00 |
|
|
Patrick Bareiss
|
3c9145b8dd
|
bug fixes
|
2025-02-21 09:21:33 +01:00 |
|
|
Bhavin Patel
|
2ab27cd8c5
|
Update suspicious_event_log_service_behavior.yml
|
2025-02-19 11:22:59 +01:00 |
|
|
Nasreddine Bencherchali
|
805d75c84d
|
fix: deprecate 2b85aa3d-f5f6-4c2e-a081-a09f6e1c2e40
|
2025-02-19 11:22:56 +01:00 |
|
|
Patrick Bareiss
|
60e55f95c5
|
version bump
|
2025-02-18 11:18:15 +01:00 |
|
|
Patrick Bareiss
|
e6ec9a99c5
|
version bump
|
2025-02-18 11:11:15 +01:00 |
|
|
Patrick Bareiss
|
a75adf9558
|
Revert "version bump"
This reverts commit 1a3f332ac7.
|
2025-02-18 10:18:06 +01:00 |
|
|
Patrick Bareiss
|
0a4e58f9cf
|
version bump
|
2025-02-18 10:06:29 +01:00 |
|
|
Patrick Bareiss
|
1a3f332ac7
|
version bump
|
2025-02-18 09:57:11 +01:00 |
|
|
Patrick Bareiss
|
e2bc6c1a66
|
Merge branch 'develop' into output_normalization_aws
|
2025-02-18 09:50:28 +01:00 |
|
|
Patrick Bareiss
|
3563fdd417
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-18 09:38:19 +01:00 |
|
|
Patrick Bareiss
|
d03cb62686
|
Merge branch 'data_source_improvements_2' of github.com:splunk/security_content into data_source_improvements_2
|
2025-02-18 09:13:25 +01:00 |
|
|
Patrick Bareiss
|
9e588b51b9
|
Merge branch 'develop' into data_source_improvements_2
|
2025-02-18 09:08:28 +01:00 |
|
|
pyth0n1c
|
b9f5735bd3
|
Merge branch 'develop' into remove_type_and_subtype
|
2025-02-11 15:38:08 -08:00 |
|
|
Bhavin Patel
|
a7cc4a8602
|
Merge branch 'develop' into rdp_brute
|
2025-02-11 10:04:33 -08:00 |
|
|
Bhavin Patel
|
8e0c230a81
|
Update detections/deprecated/remote_desktop_network_bruteforce.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:03:58 -08:00 |
|
|
research-bot
|
15ab58b798
|
updating descirption
|
2025-02-10 14:02:05 -08:00 |
|
|
pyth0n1c
|
45599e0b18
|
Clean up MITRE Tagging. When a type is defined, such as T1003, DO NOT allow a subtype such as T1003.001 to be defined. Remove the generic type T1003 and keep the subtype T1003.001. However, it is acceptable for a subtype to be defined or for a type to be defined separately. It is also okay for multiple subtypes to be defined.
|
2025-02-10 12:28:22 -08:00 |
|
|
tccontre
|
51ae906f15
|
analytics_enhancement
|
2025-02-10 09:39:53 +01:00 |
|
|
tccontre
|
67844bec4e
|
analytics_enhancement
|
2025-02-10 09:36:32 +01:00 |
|
|
research-bot
|
6fc70aa599
|
version bump
|
2025-02-07 11:13:01 -08:00 |
|
|
Patrick Bareiss
|
e0d36949fc
|
Merge branch 'develop' into data_source_improvements_2
|
2025-02-07 13:31:21 +01:00 |
|
|
tccontre
|
1ed454b5bc
|
analytics_enhancement
|
2025-02-07 09:56:32 +01:00 |
|
|
tccontre
|
f33a18e9cf
|
analytics_enhancement
|
2025-02-07 09:49:06 +01:00 |
|
|
Br3akp0int
|
f97787306f
|
Update suspicious_driver_loaded_path.yml
|
2025-02-06 17:02:59 +01:00 |
|
|
Br3akp0int
|
2f48e04006
|
Merge branch 'develop' into analytics_enhancement
|
2025-02-06 16:58:21 +01:00 |
|
|
Patrick Bareiss
|
d7171f0d6e
|
version bump
|
2025-02-06 15:59:50 +01:00 |
|
|
Patrick Bareiss
|
b6a28b6dd4
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-06 15:53:20 +01:00 |
|