Commit Graph

20833 Commits

Author SHA1 Message Date
Bhavin Patel a0a3afce56 update SPL 2023-06-12 16:48:50 -07:00
Bhavin Patel 480c1c1e05 validate fix 2023-06-12 16:12:08 -07:00
Bhavin Patel 559639d2c0 testing via attack_Data 2023-06-12 16:09:11 -07:00
Bhavin Patel 1543f639a1 testing webshell detection 2023-06-12 16:07:26 -07:00
Bhavin Patel 0e9b8a5643 Merge pull request #2686 from splunk/kvstory
KVstore update
2023-06-12 15:47:48 -07:00
Bhavin Patel 7cbe7c87c9 Update previously_seen_api_calls_from_user_roles.yml 2023-06-12 15:40:37 -07:00
Bhavin Patel 266a2a775b adding lookups 2023-06-12 15:26:27 -07:00
srv-rr-gh-researchbt 0e192e2b8a Branch was auto-updated. 2023-06-12 15:10:08 -07:00
Bhavin Patel 39d6fdd658 Merge pull request #2660 from splunk/dns_data_exfiltration_detection
Detect DNS Data Exfiltration using pretrained model in DSDL
2023-06-12 15:09:41 -07:00
srv-rr-gh-researchbt 910c4e7c85 Branch was auto-updated. 2023-06-12 14:54:35 -07:00
srv-rr-gh-researchbt 4aa2ed738b Branch was auto-updated. 2023-06-12 14:54:17 -07:00
Bhavin Patel 51a9729171 Merge pull request #2651 from splunk/steven_Test
Steven Dick - new detections
2023-06-12 14:53:53 -07:00
Bhavin Patel bc1871025a Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml 2023-06-12 14:41:43 -07:00
Bhavin Patel 21bd725eaa yaml fix 2023-06-12 14:23:18 -07:00
Bhavin Patel 4293a508af Update detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml
Triggering CI
2023-06-12 14:16:38 -07:00
Bhavin Patel 9e31186154 Update detect_rtlo_in_file_name.yml
double quotes
2023-06-12 14:06:53 -07:00
Namratha Sreekanta f435b50a77 Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection 2023-06-12 13:56:33 -07:00
Namratha Sreekanta 0782930137 Adding missing lookup files 2023-06-12 13:56:20 -07:00
srv-rr-gh-researchbt 546fc04483 Branch was auto-updated. 2023-06-12 11:45:36 -07:00
srv-rr-gh-researchbt 7f3870e809 Branch was auto-updated. 2023-06-12 11:45:30 -07:00
srv-rr-gh-researchbt 853944ebd2 Branch was auto-updated. 2023-06-12 11:45:19 -07:00
Bhavin Patel f5f8568763 Merge pull request #2695 from splunk/ssainyoureyes
The Order of The Haag
2023-06-12 11:44:58 -07:00
srv-rr-gh-researchbt 9ae2d3de5f Branch was auto-updated. 2023-06-12 11:29:19 -07:00
srv-rr-gh-researchbt 60a2842cab Branch was auto-updated. 2023-06-12 11:29:08 -07:00
srv-rr-gh-researchbt 25a7456979 Branch was auto-updated. 2023-06-12 11:29:07 -07:00
srv-rr-gh-researchbt 84e308fdb2 Branch was auto-updated. 2023-06-12 11:29:03 -07:00
Bhavin Patel 4b113e9b0d Merge pull request #2684 from splunk/aws_asl_detections
ASL detections
2023-06-12 11:28:41 -07:00
Bhavin Patel 4c2f54a0dc Update detect_rtlo_in_process.yml 2023-06-12 10:58:03 -07:00
Bhavin Patel af3fe52811 Update detect_rtlo_in_file_name.yml 2023-06-12 10:57:39 -07:00
Bhavin Patel 2a217a7c0a Update detect_rtlo_in_file_name.yml 2023-06-12 10:55:39 -07:00
Namratha Sreekanta b3447c98c6 Merge branch 'dns_data_exfiltration_detection' of ssh://github.com/splunk/security_content into dns_data_exfiltration_detection 2023-06-08 14:00:36 -07:00
Namratha Sreekanta 05885bc6f2 changing the search 2023-06-08 14:00:28 -07:00
srv-rr-gh-researchbt dee7da94dd Branch was auto-updated. 2023-06-08 13:41:33 -07:00
srv-rr-gh-researchbt 1f1211c1c3 Branch was auto-updated. 2023-06-08 13:41:29 -07:00
srv-rr-gh-researchbt c84bb3d1f1 Branch was auto-updated. 2023-06-08 13:41:23 -07:00
srv-rr-gh-researchbt 1ef396d6cb Branch was auto-updated. 2023-06-08 13:41:19 -07:00
srv-rr-gh-researchbt b75e3cfef7 Branch was auto-updated. 2023-06-08 13:41:18 -07:00
Bhavin Patel f46c009d3a Merge pull request #2712 from splunk/improve_detection_specificity_2
improve specificity of detection
2023-06-08 13:40:58 -07:00
pyth0n1c dc13c17d7a improve specificity 2023-06-08 13:16:51 -07:00
srv-rr-gh-researchbt 7aa3b14c2f Branch was auto-updated. 2023-06-08 13:05:12 -07:00
srv-rr-gh-researchbt 028a1ee77f Branch was auto-updated. 2023-06-08 13:05:11 -07:00
srv-rr-gh-researchbt 69d56fbea2 Branch was auto-updated. 2023-06-08 13:05:07 -07:00
srv-rr-gh-researchbt fb78070a74 Branch was auto-updated. 2023-06-08 13:05:00 -07:00
srv-rr-gh-researchbt c51a3221cc Branch was auto-updated. 2023-06-08 13:04:56 -07:00
Bhavin Patel 1b16c6b3fb Merge pull request #2711 from splunk/revert_direct_commit_to_develop
Revert to previous version in develop. This ammends an unintentional …
2023-06-08 13:04:34 -07:00
Namratha Sreekanta bc20c9c2c0 addressing review feedback 2023-06-08 12:43:07 -07:00
pyth0n1c 84af2e0f6b Update splunk_http_response_splitting_via_rest_spl_command.yml 2023-06-08 12:19:11 -07:00
pyth0n1c 7831c8ae20 Revert to previous version in develop. This ammends an unintentional commit directly to develop. 2023-06-08 12:12:11 -07:00
srv-rr-gh-researchbt 1e0d0b589e Branch was auto-updated. 2023-06-08 12:08:45 -07:00
srv-rr-gh-researchbt d5b62ed2c0 Branch was auto-updated. 2023-06-08 12:08:45 -07:00