admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,436 Commits 697 Branches 195 Tags
scheduling_experiments
Commit Graph

11391 Commits

Author SHA1 Message Date
Bhavin Patel fd9bc712c2 Merge branch 'develop' into remove_510 2025-07-15 11:53:50 -07:00
Nasreddine Bencherchali ad398c0707 small tweaks 2025-07-10 16:43:54 +02:00
Nasreddine Bencherchali 909693a201 update action value to alight with new ta ver 2025-07-10 16:41:49 +02:00
Bhavin Patel 3666bfa9f4 prep for next release 2025-07-09 11:25:06 -07:00
Bhavin Patel 9bc9e5f649 adding parent process name 2025-07-08 09:15:47 -07:00
Bhavin Patel 149b362602 updating spl 2025-07-08 09:09:17 -07:00
Bhavin Patel 41a54d10a8 updating from integration failures 2025-07-07 18:56:41 -07:00
Bhavin Patel cccea2183d Merge branch 'develop' into falcon_update 2025-07-07 13:57:23 -07:00
Bhavin Patel e344c2ad06 updating the eval 2025-07-07 13:14:30 -07:00
Bhavin Patel e9d1bceb00 pushing update 2025-07-07 11:58:50 -07:00
Bhavin Patel 3826785ee2 updating eval 2025-07-07 11:49:21 -07:00
Nasreddine Bencherchali 80092eceb1 Merge branch 'develop' into nvm-batch1 2025-07-07 20:46:28 +02:00
Bhavin Patel 5b825ab466 Merge branch 'develop' into cs_events 2025-07-07 10:09:37 -07:00
Nasreddine Bencherchali 61f635161e update by clause 2025-07-07 18:51:58 +02:00
Nasreddine Bencherchali 584ed27ec4 Update attacker_tools_on_endpoint.yml 2025-07-07 17:22:35 +02:00
Nasreddine Bencherchali 91c6bd2d13 Apply suggestion from @nasbench 2025-07-07 17:18:19 +02:00
Bhavin Patel ba171477f3 Merge branch 'develop' into bec_rule_update 2025-07-07 08:15:49 -07:00
Nasreddine Bencherchali fda81f65cc Merge branch 'develop' into nvm-batch1 2025-07-07 17:14:48 +02:00
Bhavin Patel 254d92ebc9 Merge branch 'develop' into cs_events 2025-07-07 07:58:47 -07:00
Bhavin Patel b67fb01202 Merge branch 'develop' into refactor-attacker_tools_on_endpoint 2025-07-07 07:56:47 -07:00
Nasreddine Bencherchali 8ffb683440 Merge branch 'develop' into nvm-batch1 2025-07-07 01:23:13 +02:00
Nasreddine Bencherchali afe0991589 fix incorrect names and filter macros 2025-07-06 03:00:43 +02:00
Nasreddine Bencherchali e3bfb2da07 the final countdown 2025-07-06 02:57:39 +02:00
Nasreddine Bencherchali 879259dd8b map existing rclone analytic and add a dedicated nvm one 2025-07-04 02:21:13 +02:00
sventec 7723704e17 add author tag 2025-07-03 19:32:26 -04:00
Nasreddine Bencherchali e151b4e1ae Merge branch 'develop' into nvm-batch1 2025-07-04 00:33:26 +02:00
Nasreddine Bencherchali 6b72dcb76f fix ci issues 2025-07-04 00:07:36 +02:00
Nasreddine Bencherchali 0ab6a67556 lemme add a couple more rules 2025-07-04 00:04:39 +02:00
Bhavin Patel e6e3145dc0 updating description 2025-07-03 14:26:07 -07:00
Bhavin Patel 65a097a8cc Merge branch 'develop' into cs_events 2025-07-03 10:36:27 -07:00
Bhavin Patel f04d3879c7 Merge branch 'develop' into bec_rule_update 2025-07-03 10:35:17 -07:00
sventec 1132d0d4ec refactor: attacker_tools_on_endpoint performance 
refactor attacker_tools_on_endpoint to improve search performance, using
the same paradigm as detect_remote_access_software_usage_process.
 2025-07-03 10:37:56 -04:00
0xC0FFEEEE a278863c13 remove unneccesary json normalization 2025-07-03 09:17:50 +01:00
Nasreddine Bencherchali b80d4fe2af Update cisco_nvm___non_network_binary_making_network_connection.yml 2025-07-03 01:14:13 +02:00
Nasreddine Bencherchali 029b912b8c fix ci error with name and filter macro 2025-07-03 00:38:21 +02:00
Nasreddine Bencherchali 375dc32251 oh wow, much detection 2025-07-03 00:32:11 +02:00
Bhavin Patel cd073f9273 minor fixes 2025-07-02 12:25:53 -07:00
Bhavin Patel 130d322497 make it a TTP and adding $ to the message 2025-07-02 12:19:02 -07:00
Bhavin Patel cdfc690acd remove detections 2025-07-01 14:53:45 -07:00
Bhavin Patel 1fb8c8e155 adding a new data source file 2025-07-01 14:53:16 -07:00
Bhavin Patel 4d846877d5 Merge branch 'develop' into cs_events 2025-07-01 14:20:59 -07:00
Nasreddine Bencherchali 6527190e18 up version for ci overlords 2025-07-01 23:18:54 +02:00
Bhavin Patel 983b3b9263 updating SPL syntax and comment the inputlookup for testing 2025-07-01 14:17:53 -07:00
Nasreddine Bencherchali b90359fd46 fix rba and filter macro issue 2025-07-01 23:11:48 +02:00
Nasreddine Bencherchali 75ec47e99a add new detections, story and other cool things 2025-07-01 23:04:48 +02:00
Bhavin Patel 6b8761b5a6 comment out manual test for unit-testing 2025-07-01 13:27:26 -07:00
Bhavin Patel 7a4699098b updating formatting of spl and update risk_message as it is not present in the spl 2025-07-01 13:26:21 -07:00
Bhavin Patel e09fcea176 Merge branch 'develop' into linux_auditd_daemon_update 2025-07-01 10:55:46 -07:00
0xC0FFEEEE 3ba50a2d97 Add support for Set-InboxRule 2025-07-01 16:42:06 +01:00
Nasreddine Bencherchali 8d10847fbc Merge branch 'develop' into nvm-batch1 2025-07-01 00:08:17 +02:00