 Bhavin Patel
|
262d492358
|
Merge pull request #3479 from splunk/integration_v5.4.0
Integration fixes - v5.4.0
|
2025-04-21 14:12:34 -07:00 |
|
|
Bhavin Patel
|
0c729cc37d
|
Merge branch 'develop' into integration_v5.4.0
|
2025-04-21 13:44:34 -07:00 |
|
|
Bhavin Patel
|
d85a312259
|
Merge pull request #3472 from splunk/water
Haag's Ruse: The MSC EvilTwin Detector - Unmasking Path Manipulators & Digital Spies
|
2025-04-21 13:37:44 -07:00 |
|
|
Bhavin Patel
|
b5258b99e4
|
Update detect_psexec_with_accepteula_flag.yml
|
2025-04-21 13:00:03 -07:00 |
|
|
Bhavin Patel
|
366474792d
|
Update cisco_secure_firewall___rare_snort_rule_triggered.yml
|
2025-04-21 12:52:17 -07:00 |
|
|
Bhavin Patel
|
bd617e1211
|
Update windows_powershell_invoke_restmethod_ip_information_collection.yml
fix threat object
|
2025-04-21 12:27:30 -07:00 |
|
|
Bhavin Patel
|
5bd5a53938
|
updating searches
|
2025-04-21 12:13:42 -07:00 |
|
|
Eric
|
a219deb751
|
Merge branch 'develop' into water
|
2025-04-21 10:25:16 -07:00 |
|
|
Michael Haag
|
677fe6a7f9
|
Update windows_msc_eviltwin_directory_path_manipulation.yml
|
2025-04-21 10:25:39 -06:00 |
|
|
Bhavin Patel
|
078b89e774
|
Merge pull request #3475 from splunk/dep_cli
Deprecate CLI updates
|
2025-04-18 13:56:23 -07:00 |
|
|
Bhavin Patel
|
067eb13fe1
|
Merge branch 'develop' into dep_cli
|
2025-04-18 13:48:27 -07:00 |
|
|
Bhavin Patel
|
482cdc2ee9
|
Merge pull request #3462 from splunk/crushingit
Haag's Crushed Shell: A Tale of CrushFTP Exploitation
|
2025-04-18 13:48:18 -07:00 |
|
|
Bhavin Patel
|
f26d6beda1
|
updating yaml
|
2025-04-18 13:42:29 -07:00 |
|
|
Bhavin Patel
|
93a1b752fe
|
updating this detection
|
2025-04-18 13:35:11 -07:00 |
|
|
Bhavin Patel
|
426d54d99d
|
updating cli flags
|
2025-04-18 13:29:32 -07:00 |
|
|
Bhavin Patel
|
bb2045cce0
|
Merge branch 'develop' into crushingit
|
2025-04-18 12:45:18 -07:00 |
|
|
Michael Haag
|
9f8f28c0b5
|
Update crushftp_max_simultaneous_users_from_ip.yml
|
2025-04-18 13:27:09 -06:00 |
|
|
Michael Haag
|
95049154e9
|
Update crushftp_authentication_bypass_exploitation.yml
|
2025-04-18 13:25:39 -06:00 |
|
|
pyth0n1c
|
e5e7fc032c
|
Merge pull request #3465 from splunk/remove_v5.4.0
Removed/ Deprecated content update for v5.4.0
|
2025-04-18 10:57:26 -07:00 |
|
|
Michael Haag
|
6bd0f5ab8f
|
Update windows_shell_process_from_crushftp.yml
|
2025-04-18 11:28:32 -06:00 |
|
|
Bhavin Patel
|
614721e681
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-18 10:26:39 -07:00 |
|
|
Bhavin Patel
|
3bf8bc509c
|
Merge pull request #3404 from splunk/cactus
Haag's Last Shadow: The Cactus Ransomware Chronicles
|
2025-04-18 10:25:23 -07:00 |
|
|
pyth0n1c
|
aa3187d61e
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-18 10:13:12 -07:00 |
|
|
Bhavin Patel
|
949b59900f
|
Merge branch 'develop' into water
|
2025-04-18 10:11:56 -07:00 |
|
|
Bhavin Patel
|
9ae046285e
|
Merge branch 'develop' into cactus
|
2025-04-18 09:52:02 -07:00 |
|
|
Bhavin Patel
|
a62ab6a00a
|
Merge pull request #3453 from splunk/aws_bedrock
AWS Bedrock detections
|
2025-04-18 09:51:02 -07:00 |
|
|
Michael Haag
|
19221004d3
|
round 2
|
2025-04-18 10:22:37 -06:00 |
|
|
Michael Haag
|
32962c745b
|
versions
|
2025-04-18 10:00:01 -06:00 |
|
|
Michael Haag
|
8ca79f3f56
|
Merge branch 'develop' into cactus
|
2025-04-18 09:33:17 -06:00 |
|
|
Bhavin Patel
|
5fb923447c
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-17 15:00:24 -07:00 |
|
|
Bhavin Patel
|
eae0a4ed66
|
updating spls to match with output from data sources
|
2025-04-17 14:49:05 -07:00 |
|
|
Bhavin Patel
|
524136ee6c
|
adding data sources
|
2025-04-17 14:42:15 -07:00 |
|
|
Bhavin Patel
|
5e6418ee6e
|
Merge branch 'develop' into aws_bedrock
|
2025-04-17 14:24:55 -07:00 |
|
|
Bhavin Patel
|
001da6a900
|
Merge pull request #3468 from splunk/csftd_third_batch
Cisco Secure Firewall Detections - Intrusion Event Based
|
2025-04-17 14:23:47 -07:00 |
|
|
Bhavin Patel
|
e78f39612b
|
updates to rba and such
|
2025-04-17 13:59:44 -07:00 |
|
|
Bhavin Patel
|
0bdaf9647e
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-17 13:27:58 -07:00 |
|
|
Bhavin Patel
|
12e6cc7d7a
|
Merge branch 'develop' into csftd_third_batch
|
2025-04-17 12:49:38 -07:00 |
|
|
Bhavin Patel
|
3842a6fc75
|
Merge pull request #3451 from splunk/csftd_second_batch
Cisco Secure Firewall Detections - File Event Based
|
2025-04-17 12:49:23 -07:00 |
|
|
Bhavin Patel
|
8e6d4c69bf
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-17 12:00:27 -07:00 |
|
|
Bhavin Patel
|
fad66d2e11
|
Merge branch 'develop' into csftd_second_batch
|
2025-04-17 11:04:31 -07:00 |
|
|
Bhavin Patel
|
5c026c7c70
|
Merge pull request #3469 from splunk/storm
The Haag Identity: Storm-2460 CLFS Zero Day
|
2025-04-17 10:58:40 -07:00 |
|
|
Michael Haag
|
c418996d5f
|
Update windows_msc_eviltwin_directory_path_manipulation.yml
|
2025-04-17 11:53:17 -06:00 |
|
|
Bhavin Patel
|
4b73c303c8
|
Merge branch 'develop' into storm
|
2025-04-17 10:47:02 -07:00 |
|
|
Michael Haag
|
d868a62c23
|
Create windows_powershell_invoke_restmethod_ip_information_collection.yml
|
2025-04-17 11:45:42 -06:00 |
|
|
Michael Haag
|
e913143339
|
Water Gamayun
|
2025-04-17 11:26:37 -06:00 |
|
|
Bhavin Patel
|
22485da816
|
Merge pull request #3471 from splunk/auto-ta-update-238
Automated Splunk TA Update 238
|
2025-04-17 10:05:43 -07:00 |
|
|
Bhavin Patel
|
bc6635d225
|
Merge branch 'develop' into storm
|
2025-04-17 10:04:45 -07:00 |
|
|
Nasreddine Bencherchali
|
bcd5dd3fb2
|
Merge branch 'develop' into auto-ta-update-238
|
2025-04-17 19:04:44 +02:00 |
|
|
Bhavin Patel
|
0699bacf84
|
Merge pull request #3470 from splunk/earth
Ground Control to Major Haag: Earth Alux
|
2025-04-17 10:04:10 -07:00 |
|
|
Nasreddine Bencherchali
|
f9ed7b08cd
|
Update cisco_secure_firewall___rare_snort_rule_triggered.yml
|
2025-04-17 19:02:49 +02:00 |
|