patel-bhavin
bf024f9334
remove risk_other
2023-05-08 18:09:28 -07:00
P4T12ICK
9c3f00efc8
Merge pull request #2608 from splunk/TR-2916
...
Splunk Identifier Activity Analysis
2023-05-08 18:27:32 +02:00
Lou Stella
7416bfbe8c
changed yml ID
2023-05-08 11:11:42 -05:00
srv-rr-gh-researchbt
1448cbf5b9
Branch was auto-updated.
2023-05-08 08:50:49 -07:00
P4T12ICK
7eee8815b4
Merge pull request #2594 from splunk/TR2894
...
CrowdStrike OAuth API Identifier Activity Analysis
2023-05-08 17:50:22 +02:00
srv-rr-gh-researchbt
b5553ed82c
Branch was auto-updated.
2023-05-08 08:36:36 -07:00
srv-rr-gh-researchbt
cc84bee83c
Branch was auto-updated.
2023-05-08 08:36:35 -07:00
P4T12ICK
34f4a5dceb
Merge pull request #2595 from splunk/TR-2903
...
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00
Lou Stella
7ebe42725a
Resolved Kelby's findings
2023-05-04 14:35:44 -05:00
Lou Stella
d220cf41a5
Addressed Kelby's Findings
2023-05-04 14:17:57 -05:00
Lou Stella
c5ea510e8f
Addressed Kelby's points
2023-05-04 13:55:12 -05:00
srv-rr-gh-researchbt
18298d91c9
Branch was auto-updated.
2023-05-03 12:09:50 -07:00
srv-rr-gh-researchbt
367e116829
Branch was auto-updated.
2023-05-03 12:09:49 -07:00
srv-rr-gh-researchbt
5882117183
Branch was auto-updated.
2023-05-03 12:09:48 -07:00
Bhavin Patel
0c76f0139e
Merge pull request #2663 from splunk/revert-2662-deprecate_pth
...
Revert "deprecate Pth"
2023-05-03 12:09:28 -07:00
patel-bhavin
8ef2a73122
mionr
2023-05-03 11:58:17 -07:00
patel-bhavin
63abc37beb
deprecated note update
2023-05-03 11:57:27 -07:00
Bhavin Patel
444dde5d66
Revert "deprecate Pth"
2023-05-03 11:51:24 -07:00
srv-rr-gh-researchbt
215ab12345
Branch was auto-updated.
2023-05-03 11:50:28 -07:00
srv-rr-gh-researchbt
5f44b4ca50
Branch was auto-updated.
2023-05-03 11:50:27 -07:00
srv-rr-gh-researchbt
fbb094e28c
Branch was auto-updated.
2023-05-03 11:50:26 -07:00
Bhavin Patel
799a636a73
Merge pull request #2662 from splunk/deprecate_pth
...
deprecate Pth
2023-05-03 11:50:06 -07:00
patel-bhavin
ae89db26ea
deprecate this
2023-05-03 11:44:31 -07:00
srv-rr-gh-researchbt
691cb7eb11
Branch was auto-updated.
2023-05-03 09:41:10 -07:00
srv-rr-gh-researchbt
524547ab82
Branch was auto-updated.
2023-05-03 09:41:09 -07:00
srv-rr-gh-researchbt
e44677cb73
Branch was auto-updated.
2023-05-03 09:41:08 -07:00
Bhavin Patel
9a442a3bd1
Merge pull request #2648 from splunk/ba_detection_spec
...
Add BA detection schema and validator
2023-05-03 09:41:01 -07:00
Bhavin Patel
9f120ad765
Merge pull request #2647 from splunk/bug_fixes_sec_cont_4
...
Improve Detection Validation
2023-05-03 09:40:39 -07:00
P4T12ICK
44b98b61c1
improved detections
2023-05-03 15:13:10 +02:00
srv-rr-gh-researchbt
713b50350d
Branch was auto-updated.
2023-05-02 15:23:36 -07:00
srv-rr-gh-researchbt
a35648eb74
Branch was auto-updated.
2023-05-02 15:23:35 -07:00
srv-rr-gh-researchbt
2ee69fb765
Branch was auto-updated.
2023-05-02 15:23:34 -07:00
srv-rr-gh-researchbt
6c3c4876e8
Branch was auto-updated.
2023-05-02 15:23:33 -07:00
srv-rr-gh-researchbt
fd50f2738b
Branch was auto-updated.
2023-05-02 15:23:32 -07:00
research bot
9b995551aa
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
2023-05-02 22:23:11 +00:00
srv-rr-gh-researchbt
4aac79147d
Branch was auto-updated.
2023-05-02 15:02:47 -07:00
srv-rr-gh-researchbt
e2df0d4c9e
Branch was auto-updated.
2023-05-02 15:02:46 -07:00
srv-rr-gh-researchbt
0e5329d54c
Branch was auto-updated.
2023-05-02 15:02:45 -07:00
srv-rr-gh-researchbt
b954ccf537
Branch was auto-updated.
2023-05-02 15:02:44 -07:00
srv-rr-gh-researchbt
295dbced77
Branch was auto-updated.
2023-05-02 15:02:43 -07:00
Bhavin Patel
c80c0aecec
Merge pull request #2661 from splunk/security_content_4_phase_2
...
SmokeTest part 2
v4.1.0
2023-05-02 15:02:17 -07:00
patel-bhavin
e51757ca9f
conflicts
2023-05-02 14:56:38 -07:00
pyth0n1c
aac32ae63c
Update detection-smoketesting.yml
...
Update the smoketest workflow so
that it only runs nightly instead of
on every push. This workflow takes
a very long time to run (about 1 hour)
so we don't want to run it all the time.
2023-05-02 14:48:17 -07:00
pyth0n1c
5912e876a8
Update windows_ad_domain_replication_acl_addition.yml
...
Revert syntax changes so that this search
continues to fail smoketesting. This way, we
know to come back and update it.
2023-05-02 14:47:11 -07:00
pyth0n1c
6323c28e96
Rename detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml to detect_suspicious_processnames_using_a_pretrained_model_in_dsdl.yml
...
Updated name of filter and name of search file.
Did not touch the apply or name of the search
because these two run other lookups + we cannot
change the name of a search once it has been deployed.
2023-05-02 14:45:57 -07:00
srv-rr-gh-researchbt
283f7b32f2
Branch was auto-updated.
2023-05-02 12:58:45 -07:00
srv-rr-gh-researchbt
1c71bc0b16
Branch was auto-updated.
2023-05-02 12:58:44 -07:00
srv-rr-gh-researchbt
c450eb5b28
Branch was auto-updated.
2023-05-02 12:58:43 -07:00
srv-rr-gh-researchbt
6f8d21cb96
Branch was auto-updated.
2023-05-02 12:58:42 -07:00
srv-rr-gh-researchbt
30b88e1862
Branch was auto-updated.
2023-05-02 12:58:41 -07:00