15 Commits

Author	SHA1	Message	Date
Eric	d9960562b8	Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.	2025-05-02 14:10:46 -07:00
Patrick Bareiss	1c9debe9a6	update versions	2025-03-14 13:47:44 +01:00
Patrick Bareiss	e044e874ba	improvements	2025-02-18 08:55:49 +01:00
pyth0n1c	fdaa038eab	Finish removing extra fields, or renaming ... misnamed fields, in endpoint detections	2025-01-03 15:47:32 -08:00
ljstella	189cc59547	endpoint: remove rba from hunting	2024-11-15 11:01:30 -06:00
ljstella	bc14854c55	endpoint: more typefixes	2024-11-15 10:36:13 -06:00
ljstella	c9186e0b7d	endpoint: lowercase rba types	2024-11-15 10:16:37 -06:00
ljstella	514123089d	endpoint detection score field rename	2024-11-15 09:49:53 -06:00
ljstella	f88eb16c6f	endpoint detection score fix	2024-11-15 09:34:59 -06:00
ljstella	92cc97a5a7	endpoint first pass	2024-11-14 15:44:51 -06:00
research-bot	7eafc7cd60	updating sysmon to XML	2024-11-01 13:40:43 -07:00
research-bot	d1c7e1b6e5	udpating sysmon source	2024-10-30 18:42:30 -07:00
Bhavin Patel	385ac7adc1	remove end hours	2024-10-23 17:52:24 -07:00
Bhavin Patel	e2bff20247	updating detections	2024-10-17 08:21:25 -07:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00