Commit Graph

20195 Commits

Author SHA1 Message Date
patel-bhavin bf024f9334 remove risk_other 2023-05-08 18:09:28 -07:00
P4T12ICK 9c3f00efc8 Merge pull request #2608 from splunk/TR-2916
Splunk Identifier Activity Analysis
2023-05-08 18:27:32 +02:00
Lou Stella 7416bfbe8c changed yml ID 2023-05-08 11:11:42 -05:00
srv-rr-gh-researchbt 1448cbf5b9 Branch was auto-updated. 2023-05-08 08:50:49 -07:00
P4T12ICK 7eee8815b4 Merge pull request #2594 from splunk/TR2894
CrowdStrike OAuth API Identifier Activity Analysis
2023-05-08 17:50:22 +02:00
srv-rr-gh-researchbt b5553ed82c Branch was auto-updated. 2023-05-08 08:36:36 -07:00
srv-rr-gh-researchbt cc84bee83c Branch was auto-updated. 2023-05-08 08:36:35 -07:00
P4T12ICK 34f4a5dceb Merge pull request #2595 from splunk/TR-2903
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00
Lou Stella 7ebe42725a Resolved Kelby's findings 2023-05-04 14:35:44 -05:00
Lou Stella d220cf41a5 Addressed Kelby's Findings 2023-05-04 14:17:57 -05:00
Lou Stella c5ea510e8f Addressed Kelby's points 2023-05-04 13:55:12 -05:00
srv-rr-gh-researchbt 18298d91c9 Branch was auto-updated. 2023-05-03 12:09:50 -07:00
srv-rr-gh-researchbt 367e116829 Branch was auto-updated. 2023-05-03 12:09:49 -07:00
srv-rr-gh-researchbt 5882117183 Branch was auto-updated. 2023-05-03 12:09:48 -07:00
Bhavin Patel 0c76f0139e Merge pull request #2663 from splunk/revert-2662-deprecate_pth
Revert "deprecate Pth"
2023-05-03 12:09:28 -07:00
patel-bhavin 8ef2a73122 mionr 2023-05-03 11:58:17 -07:00
patel-bhavin 63abc37beb deprecated note update 2023-05-03 11:57:27 -07:00
Bhavin Patel 444dde5d66 Revert "deprecate Pth" 2023-05-03 11:51:24 -07:00
srv-rr-gh-researchbt 215ab12345 Branch was auto-updated. 2023-05-03 11:50:28 -07:00
srv-rr-gh-researchbt 5f44b4ca50 Branch was auto-updated. 2023-05-03 11:50:27 -07:00
srv-rr-gh-researchbt fbb094e28c Branch was auto-updated. 2023-05-03 11:50:26 -07:00
Bhavin Patel 799a636a73 Merge pull request #2662 from splunk/deprecate_pth
deprecate Pth
2023-05-03 11:50:06 -07:00
patel-bhavin ae89db26ea deprecate this 2023-05-03 11:44:31 -07:00
srv-rr-gh-researchbt 691cb7eb11 Branch was auto-updated. 2023-05-03 09:41:10 -07:00
srv-rr-gh-researchbt 524547ab82 Branch was auto-updated. 2023-05-03 09:41:09 -07:00
srv-rr-gh-researchbt e44677cb73 Branch was auto-updated. 2023-05-03 09:41:08 -07:00
Bhavin Patel 9a442a3bd1 Merge pull request #2648 from splunk/ba_detection_spec
Add BA detection schema and validator
2023-05-03 09:41:01 -07:00
Bhavin Patel 9f120ad765 Merge pull request #2647 from splunk/bug_fixes_sec_cont_4
Improve Detection Validation
2023-05-03 09:40:39 -07:00
P4T12ICK 44b98b61c1 improved detections 2023-05-03 15:13:10 +02:00
srv-rr-gh-researchbt 713b50350d Branch was auto-updated. 2023-05-02 15:23:36 -07:00
srv-rr-gh-researchbt a35648eb74 Branch was auto-updated. 2023-05-02 15:23:35 -07:00
srv-rr-gh-researchbt 2ee69fb765 Branch was auto-updated. 2023-05-02 15:23:34 -07:00
srv-rr-gh-researchbt 6c3c4876e8 Branch was auto-updated. 2023-05-02 15:23:33 -07:00
srv-rr-gh-researchbt fd50f2738b Branch was auto-updated. 2023-05-02 15:23:32 -07:00
research bot 9b995551aa Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-05-02 22:23:11 +00:00
srv-rr-gh-researchbt 4aac79147d Branch was auto-updated. 2023-05-02 15:02:47 -07:00
srv-rr-gh-researchbt e2df0d4c9e Branch was auto-updated. 2023-05-02 15:02:46 -07:00
srv-rr-gh-researchbt 0e5329d54c Branch was auto-updated. 2023-05-02 15:02:45 -07:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
srv-rr-gh-researchbt 295dbced77 Branch was auto-updated. 2023-05-02 15:02:43 -07:00
Bhavin Patel c80c0aecec Merge pull request #2661 from splunk/security_content_4_phase_2
SmokeTest part 2
v4.1.0
2023-05-02 15:02:17 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
pyth0n1c aac32ae63c Update detection-smoketesting.yml
Update the smoketest workflow so
that it only runs nightly instead of
on every push.  This workflow takes
a very long time to run (about 1 hour)
so we don't want to run it all the time.
2023-05-02 14:48:17 -07:00
pyth0n1c 5912e876a8 Update windows_ad_domain_replication_acl_addition.yml
Revert syntax changes so that this search 
continues to fail smoketesting. This way, we
know to come back and update it.
2023-05-02 14:47:11 -07:00
pyth0n1c 6323c28e96 Rename detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml to detect_suspicious_processnames_using_a_pretrained_model_in_dsdl.yml
Updated name of filter and name of search file.
Did not touch the apply or name of the search
because these two run other lookups + we cannot
change the name of a search once it has been deployed.
2023-05-02 14:45:57 -07:00
srv-rr-gh-researchbt 283f7b32f2 Branch was auto-updated. 2023-05-02 12:58:45 -07:00
srv-rr-gh-researchbt 1c71bc0b16 Branch was auto-updated. 2023-05-02 12:58:44 -07:00
srv-rr-gh-researchbt c450eb5b28 Branch was auto-updated. 2023-05-02 12:58:43 -07:00
srv-rr-gh-researchbt 6f8d21cb96 Branch was auto-updated. 2023-05-02 12:58:42 -07:00
srv-rr-gh-researchbt 30b88e1862 Branch was auto-updated. 2023-05-02 12:58:41 -07:00