 Patrick Bareiss
|
9cf102e081
|
improvements to endpoint detections
|
2025-03-31 11:49:18 +02:00 |
|
|
Patrick Bareiss
|
05cacaa655
|
Data source endpoint output normalization improvements
|
2025-03-28 10:50:30 +01:00 |
|
|
pyth0n1c
|
580a0873f2
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-27 14:53:31 -07:00 |
|
|
pyth0n1c
|
8d5975884c
|
Merge pull request #3430 from splunk/cisco_ai
bug in cisco detection
|
2025-03-27 14:52:57 -07:00 |
|
|
Bhavin Patel
|
c009a27c12
|
add back manual_test
|
2025-03-27 14:01:20 -07:00 |
|
|
Bhavin Patel
|
5000fe16cb
|
reverrt ctl
|
2025-03-27 13:41:17 -07:00 |
|
|
Bhavin Patel
|
cdd70a10aa
|
test with local data
|
2025-03-27 13:32:37 -07:00 |
|
|
Bhavin Patel
|
9e547de754
|
revert link
|
2025-03-27 12:30:55 -07:00 |
|
|
Bhavin Patel
|
f6d1ec5dc6
|
updating to verbose unit test
|
2025-03-27 12:11:59 -07:00 |
|
|
Bhavin Patel
|
eb5cfd4907
|
Empty commit
|
2025-03-27 12:10:22 -07:00 |
|
|
Bhavin Patel
|
cda8da91ac
|
updating detections version
|
2025-03-27 11:27:43 -07:00 |
|
|
Bhavin Patel
|
96bd1501b6
|
update inspect failures
|
2025-03-27 10:54:24 -07:00 |
|
|
Bhavin Patel
|
20256391ee
|
updating a new detection
|
2025-03-27 10:45:17 -07:00 |
|
|
Bhavin Patel
|
f14fd8dc50
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-27 10:23:42 -07:00 |
|
|
Bhavin Patel
|
1c949f6a6f
|
Merge pull request #3426 from splunk/cim_bug
Update CIM app title
|
2025-03-27 08:25:20 -07:00 |
|
|
P4T12ICK
|
b96e63d86e
|
Merge branch 'develop' into cim_bug
|
2025-03-27 07:25:51 +01:00 |
|
|
pyth0n1c
|
1d2d0352ed
|
Merge pull request #3428 from splunk/fix-bad-attack-data-link
Update living_off_the_land_detection.yml attack_data
|
2025-03-26 14:37:47 -07:00 |
|
|
pyth0n1c
|
17b1fd44c7
|
Update living_off_the_land_detection.yml attack_data
We did not catch this previously because it is a correlation search, so the links are not checked. I found this manually.
|
2025-03-26 14:08:52 -07:00 |
|
|
Bhavin Patel
|
13800a7ec1
|
Merge pull request #3412 from splunk/cisco_ai_defense
Cisco AI defense - Move to prod
|
2025-03-26 14:01:00 -07:00 |
|
|
Bhavin Patel
|
ea0b365690
|
Merge branch 'develop' into cisco_ai_defense
|
2025-03-26 13:44:06 -07:00 |
|
|
Bhavin Patel
|
eaf9ad89ea
|
Merge pull request #3408 from splunk/process-injection-detection-enhanced
0xC0FFEEEE - process injection into commonly abused processes
|
2025-03-26 13:29:55 -07:00 |
|
|
Bhavin Patel
|
88d699f518
|
Merge branch 'develop' into cisco_ai_defense
|
2025-03-26 12:40:28 -07:00 |
|
|
Bhavin Patel
|
377efcc0b0
|
updating name
|
2025-03-26 12:39:02 -07:00 |
|
|
Bhavin Patel
|
76ef391ac3
|
updating title to full name
|
2025-03-26 12:04:02 -07:00 |
|
|
Bhavin Patel
|
e7e5dcbc03
|
Merge branch 'develop' into process-injection-detection-enhanced
|
2025-03-26 11:05:22 -07:00 |
|
|
Bhavin Patel
|
1e1700cd4d
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-26 10:04:43 -07:00 |
|
|
Bhavin Patel
|
0f102fcfcd
|
Merge pull request #3325 from splunk/output_normalization_o365
o365 detections output normalization
|
2025-03-25 13:56:31 -07:00 |
|
|
Bhavin Patel
|
63380103e5
|
udpate date format
|
2025-03-25 12:07:17 -07:00 |
|
|
Bhavin Patel
|
87eeec65a6
|
updating dates and verrsion
|
2025-03-25 11:21:38 -07:00 |
|
|
Bhavin Patel
|
09f12546fb
|
Merge branch 'develop' into output_normalization_o365
|
2025-03-25 10:42:52 -07:00 |
|
|
Bhavin Patel
|
5768076812
|
Merge pull request #3420 from splunk/auto-ta-update-215
Automated Splunk TA Update 215
|
2025-03-25 09:01:24 -07:00 |
|
|
ljstella
|
843ab78068
|
Revert linux TA
|
2025-03-25 09:46:21 -05:00 |
|
|
patel-bhavin
|
5886f46ba5
|
Updated TAs
|
2025-03-25 06:58:01 +00:00 |
|
|
Bhavin Patel
|
4e537d286a
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-24 15:04:33 -07:00 |
|
|
Bhavin Patel
|
b186cc921e
|
Merge pull request #3409 from splunk/auto-ta-update-210
Automated Splunk TA Update 210
|
2025-03-24 15:03:24 -07:00 |
|
|
Bhavin Patel
|
5bb6ac53b3
|
Empty commit
|
2025-03-24 14:41:21 -07:00 |
|
|
Bhavin Patel
|
cacaa8ac07
|
yaml update
|
2025-03-21 11:58:12 -07:00 |
|
|
Bhavin Patel
|
30135a6a15
|
dd udpate
|
2025-03-21 11:56:19 -07:00 |
|
|
Bhavin Patel
|
20f1307ddf
|
updating date
|
2025-03-21 11:54:35 -07:00 |
|
|
Bhavin Patel
|
912238a4a4
|
move to prodcution after testing
|
2025-03-21 11:54:03 -07:00 |
|
|
Bhavin Patel
|
753cf9e3f5
|
Update linux_secure.yml
|
2025-03-20 09:42:10 -07:00 |
|
|
Patrick Bareiss
|
fe7b219c61
|
update
|
2025-03-20 14:55:46 +01:00 |
|
|
Patrick Bareiss
|
367edbd572
|
small improvement
|
2025-03-20 14:41:33 +01:00 |
|
|
Patrick Bareiss
|
6650542f5a
|
bug fix
|
2025-03-20 08:13:52 +01:00 |
|
|
patel-bhavin
|
d3f6dc856d
|
Updated TAs
|
2025-03-20 06:58:09 +00:00 |
|
|
Michael Haag
|
feb0f44dad
|
updates
|
2025-03-19 10:25:30 -06:00 |
|
|
Michael Haag
|
e38e283413
|
Add new detection for process injection into commonly abused processes
Replacing #3389
|
2025-03-19 10:19:14 -06:00 |
|
|
Patrick Bareiss
|
99bf5f0189
|
bug fix
|
2025-03-19 15:27:23 +01:00 |
|
|
Patrick Bareiss
|
641c590df7
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-19 15:10:33 +01:00 |
|
|
P4T12ICK
|
f243d22f61
|
Merge branch 'develop' into output_normalization_o365
|
2025-03-19 15:02:08 +01:00 |
|