Commit Graph

6075 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 7e159e8d58 Update detect_html_help_using_infotech_storage_handlers.yml 2024-03-11 19:09:24 -04:00
Bhavin Patel 046acb8871 ESCU v4.26.0 Release branch 2024-03-06 19:30:20 +00:00
Bhavin Patel 8789ae1419 ESCU 4.25.0 Release branch 2024-02-22 17:14:23 +00:00
Teoderick Contreras 6fc27752dd US-bug-fix 2024-02-15 18:24:15 +00:00
Eric McGinnis 9fdf182033 Release v4.24.0 2024-02-14 23:54:00 +00:00
Bhavin Patel 0078f83d95 Release Branch ESCU 4.23.0 2024-01-30 20:52:05 +00:00
Bhavin Patel 69716532c1 Revert "Merge branch 'bypass-win-defender2' into 'develop'" 2024-01-29 20:49:04 +00:00
Teoderick Contreras eec968f561 bypass-win-defender2 2024-01-29 20:36:20 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Bhavin Patel 12975a222d Updating text 2023-12-06 19:54:40 +00:00
Bhavin Patel 71fad8cc55 4.17.0 release branch 2023-12-06 18:40:13 +00:00
Bhavin Patel f3372e03c2 Release branch v4.16.0 2023-11-16 20:33:10 +00:00
Bhavin Patel 196d618f2f Release v4.15.0 2023-11-01 19:24:56 +00:00
Bhavin Patel a1e441c54e Getting develop branch ready in gitlab 2023-10-23 22:55:52 +00:00
Eric McGinnis c86a0bfea8 Fixed a handful of issues with observables and messages and spacing in content. 2023-10-23 19:49:17 +00:00
Bhavin Patel bf7abc8ebf updated with proper format 2023-10-13 13:32:37 -07:00
Bhavin Patel fdd1067803 updated descriptions 2023-10-13 13:26:36 -07:00
Bhavin Patel 07f2c0ea2d macros error 2023-10-13 11:55:25 -07:00
srv-rr-gh-researchbt 33c8026de5 Branch was auto-updated. 2023-10-13 11:48:44 -07:00
Michael Haag 39d89dc747 macro 2023-10-13 12:32:19 -06:00
srv-rr-gh-researchbt f06d7fcff3 Branch was auto-updated. 2023-10-12 11:47:01 -07:00
Bhavin Patel e324b3d0cf Merge pull request #2879 from splunk/Diamond_Ticket
Diamond Ticket
2023-10-12 11:46:42 -07:00
Bhavin Patel fb66f993c9 update source 2023-10-12 11:15:44 -07:00
Bhavin Patel b97b5458cb Merge branch 'release_v4.14.0' into update_50_detections 2023-10-11 12:05:13 -07:00
Gowthamaraj rajendran 724221f82b Manually update the .yml 2023-10-10 19:29:33 -07:00
Michael Haag 981ef0caf9 Trust this 2023-10-10 16:26:22 -06:00
Michael Haag a1315040ee Create windows_registry_sip_provider_modification.yml 2023-10-10 14:27:49 -06:00
Michael Haag 63c370e748 Sip Happens: Stirring Up the Crypto with a New Module 2023-10-10 14:13:09 -06:00
mvelazco 3e07515de2 adding analytic story 2023-10-09 15:14:35 -04:00
mvelazco 02859139c6 update detection 2023-10-09 14:21:01 -04:00
mvelazco 92b6c09fc5 updating detection 2023-10-09 13:52:36 -04:00
mvelazco f6786d9dcd fixing detection 2023-10-09 11:45:21 -04:00
Bhavin Patel 1612821676 update for data 2023-10-06 13:10:30 -07:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
Bhavin Patel 49d175146f updating files and metadata 2023-10-06 10:15:47 -07:00
Bhavin Patel fe821f3328 Merge pull request #2872 from splunk/add_process_path_to_detection
add process_path to tstats output
2023-10-03 15:21:46 -07:00
pyth0n1c ca2a81b55d add process_path to tstats output 2023-10-03 14:02:04 -07:00
srv-rr-gh-researchbt ab5e3e2cf6 Branch was auto-updated. 2023-10-02 09:12:47 -07:00
Michael Haag a3d1907490 fixes 2023-10-01 09:42:31 -06:00
Michael Haag 17ca5971d3 WS_FTP 2023-10-01 09:39:59 -06:00
pyth0n1c 31bc1a0820 Minor search fixes for
observables
2023-09-29 14:17:05 -07:00
pyth0n1c 56abb40647 More observable fixes, including renaming fields
in searchers.
2023-09-29 13:19:47 -07:00
Gowthamaraj rajendran 64096b6e44 Edit parsing 2023-09-29 12:11:01 -07:00
Gowthamaraj rajendran 8cd1076f87 Update 50 detections 2023-09-29 11:57:39 -07:00
Bhavin Patel 54ce1f7f1d Merge branch 'release_v4.13.0' into obs_fix_25 2023-09-28 17:47:52 -07:00
Bhavin Patel 1813ce39ac Merge branch 'release_v4.13.0' into sysmon_fix 2023-09-28 12:38:50 -07:00
Bhavin Patel e5a814e78e remove script block from message 2023-09-28 11:12:02 -07:00
Bhavin Patel 2270cac53c Update get_aduser_with_powershell_script_block.yml 2023-09-28 11:09:47 -07:00
Bhavin Patel 5bdfd1f170 Update get_addefaultdomainpasswordpolicy_with_powershell_script_block.yml 2023-09-28 11:08:30 -07:00