Commit Graph

331 Commits

Author SHA1 Message Date
Eric d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. 2025-05-02 14:10:46 -07:00
Nasreddine Bencherchali 60164de4e7 updates and tunings 2025-04-24 15:15:09 +02:00
Bhavin Patel f37ca5fc68 update message formatting 2025-04-22 12:05:49 -07:00
Bhavin Patel 4a1547b9c9 updating message 2025-04-22 11:51:26 -07:00
Bhavin Patel 0c729cc37d Merge branch 'develop' into integration_v5.4.0 2025-04-21 13:44:34 -07:00
Bhavin Patel 366474792d Update cisco_secure_firewall___rare_snort_rule_triggered.yml 2025-04-21 12:52:17 -07:00
Bhavin Patel 5bd5a53938 updating searches 2025-04-21 12:13:42 -07:00
Eric a219deb751 Merge branch 'develop' into water 2025-04-21 10:25:16 -07:00
Bhavin Patel 949b59900f Merge branch 'develop' into water 2025-04-18 10:11:56 -07:00
Michael Haag 19221004d3 round 2 2025-04-18 10:22:37 -06:00
Michael Haag 8ca79f3f56 Merge branch 'develop' into cactus 2025-04-18 09:33:17 -06:00
Bhavin Patel e78f39612b updates to rba and such 2025-04-17 13:59:44 -07:00
Bhavin Patel 12e6cc7d7a Merge branch 'develop' into csftd_third_batch 2025-04-17 12:49:38 -07:00
Michael Haag e913143339 Water Gamayun 2025-04-17 11:26:37 -06:00
Nasreddine Bencherchali f9ed7b08cd Update cisco_secure_firewall___rare_snort_rule_triggered.yml 2025-04-17 19:02:49 +02:00
Nasreddine Bencherchali 4ab93da45e rename file 2025-04-17 18:56:09 +02:00
Bhavin Patel db78bba4cd update to RBA section 2025-04-17 09:48:48 -07:00
Nasreddine Bencherchali d57b1686fd Merge branch 'develop' into csftd_second_batch 2025-04-17 18:06:46 +02:00
Nasreddine Bencherchali f98fe82f49 Merge branch 'develop' into csftd_third_batch 2025-04-17 18:06:43 +02:00
Bhavin Patel 704e9ccdd7 missed a threat object 2025-04-16 16:51:46 -07:00
Bhavin Patel 7fdcb4e7e0 adding drilldown 2025-04-16 16:31:04 -07:00
Bhavin Patel b6f87ba697 make it production 2025-04-16 16:26:45 -07:00
Bhavin Patel 226dabdf34 fillnull for url 2025-04-16 16:09:07 -07:00
Bhavin Patel de93d96862 updating RBA 2025-04-16 15:45:14 -07:00
Nasreddine Bencherchali 4c8c3cea78 update risk objects type 2025-04-17 00:24:46 +02:00
Nasreddine Bencherchali 9cd220fea1 update risk object type 2025-04-17 00:24:00 +02:00
Nasreddine Bencherchali 6b64604903 resolve review comments 2025-04-17 00:22:13 +02:00
Nasreddine Bencherchali b9d06c166f update fields to cim and add output fields 2025-04-16 20:37:37 +02:00
Nasreddine Bencherchali 82d6f1ea84 update fields to cim and add output fields 2025-04-16 20:20:01 +02:00
Nasreddine Bencherchali 56cc3f5928 update fields to cim and add output fields 2025-04-16 19:57:13 +02:00
Nasreddine Bencherchali ddaea9b0b7 add new rules and fix filter macro 2025-04-09 13:11:56 +02:00
Nasreddine Bencherchali 901b2b2b2c fix ci error again 2025-04-09 12:47:06 +02:00
Nasreddine Bencherchali 3069c54188 Update cisco_secure_firewall___binary_file_type_download.yml 2025-04-09 12:41:25 +02:00
Nasreddine Bencherchali ae9090517d fix ci errors 2025-04-09 12:39:07 +02:00
Nasreddine Bencherchali e9caa0de7c cisco secure firewall detections - second batch 2025-04-09 12:33:51 +02:00
Nasreddine Bencherchali 2392ffd68d Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml 2025-04-08 17:12:31 +02:00
Nasreddine Bencherchali 25dae36d17 Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml 2025-04-03 17:19:17 +02:00
Nasreddine Bencherchali d2a7f6faf8 fix typo in count 2025-04-03 16:28:27 +02:00
Nasreddine Bencherchali 2d5a194803 remove filter error 2025-04-03 15:04:12 +02:00
Nasreddine Bencherchali 20275c2f10 rename files 2025-04-03 15:02:45 +02:00
Nasreddine Bencherchali a8c4f40a9a update attack data source 2025-04-03 14:58:26 +02:00
Nasreddine Bencherchali cbe3aa7923 update rba and filter macros 2025-04-03 14:47:30 +02:00
Nasreddine Bencherchali c156e2bb8d update macro name 2025-04-03 14:26:51 +02:00
Nasreddine Bencherchali 0f084c4fb7 update lookup name 2025-04-03 14:24:53 +02:00
Nasreddine Bencherchali f39a6d9a50 cisco secure firewall detections - first batch 2025-04-03 14:21:27 +02:00
Bhavin Patel 0d831661a6 updating detections with conflicts 2025-04-02 11:41:46 -07:00
Patrick Bareiss 03859564c8 rebase with develop 2025-04-01 09:42:07 +02:00
Patrick Bareiss 7541027f8e Merge branch 'develop' into output_normalization_endpoint 2025-04-01 09:41:58 +02:00
Bhavin Patel c7d11e0852 udpating msg 2025-03-28 11:41:56 -07:00
Bhavin Patel 135c3633d8 updating detection 2025-03-28 11:37:43 -07:00