Commit Graph

284 Commits

Author SHA1 Message Date
Bhavin Patel 0bb378b19b updating drilldowns 2024-10-24 14:13:05 -07:00
Bhavin Patel 8b03f3d58f updating all detections with quotes 2024-10-24 14:08:37 -07:00
Bhavin Patel 7bc11be7dc updating drilldown_formatting 2024-10-23 18:25:39 -07:00
Bhavin Patel 385ac7adc1 remove end hours 2024-10-23 17:52:24 -07:00
Bhavin Patel e2bff20247 updating detections 2024-10-17 08:21:25 -07:00
Bhavin Patel cf169b3de0 adding drilldowns to all 2024-09-30 22:04:57 +05:30
pyth0n1c 1adb62d0f4 bump version and date 2024-09-27 13:59:31 -07:00
pyth0n1c 9906bc45fe Fix erroneous datasource name in detection 2024-09-26 14:55:54 -07:00
pyth0n1c 5b75e85ef8 second pass at fixing whitespace and related update fields 2024-09-24 16:53:25 -07:00
pyth0n1c b43bb4fb4e Fix dates, fields with spaces, and update verisons for many detections 2024-09-24 16:37:44 -07:00
research-bot 37dd520eea updating join 2024-08-26 11:26:03 +05:30
Bhavin Patel 113618a41d updating data source 2024-08-22 21:49:40 +05:30
Michael Haag c5165cef6a 👀 2024-08-22 10:07:04 -06:00
Michael Haag 5665f6d880 Update ivanti_vtm_new_account_creation.yml 2024-08-22 10:04:08 -06:00
Michael Haag b2772bb026 Update ivanti_vtm_new_account_creation.yml 2024-08-22 10:00:44 -06:00
Michael Haag 77f0a76383 data sourced 2024-08-22 09:54:44 -06:00
Bhavin Patel c440a0ec91 Update ivanti_vtm_new_account_creation.yml 2024-08-22 11:05:39 +05:30
Bhavin Patel 34d8142a98 Branch was auto-updated. 2024-08-21 14:58:11 +05:30
Michael Haag f49bda41ed Update ivanti_vtm_new_account_creation.yml 2024-08-20 10:56:26 -06:00
Michael Haag 39f4e3dadc Guardians of the Haaglaxy
## Story
- Ivanti Virtual Traffic Manager CVE-2024-7593

## Analytic
- Ivanti VTM New Account Creation
2024-08-20 10:53:01 -06:00
Bhavin Patel 68c44c76a9 updating observables 2024-08-19 13:53:39 +05:30
dluxtron ec1c527d17 updating detections 2024-08-08 15:48:37 +10:00
Bhavin Patel d74e6f7991 updating app on S3 and merge conflicts 2024-08-01 14:37:10 -07:00
pyth0n1c 0d82fcb0d2 Fix merge conflicts 2024-07-24 15:26:40 -07:00
Patrick b3f2bb4682 merged with develop 2024-07-24 13:48:22 +02:00
Bhavin Patel 2629cf330a Release v4.36.0 - Draft release branch (Manual) 2024-07-17 18:03:56 +00:00
Bhavin Patel 2413b6c078 remove yamls 2024-07-17 10:18:03 -07:00
Patrick 87108a5aac Improved data sources 2024-07-17 14:41:50 +02:00
Bhavin Patel e8a2eaccf0 Branch was auto-updated. 2024-07-16 18:57:21 -07:00
Bhavin Patel 40248a397a updating data source files 2024-07-16 08:11:24 -07:00
Patrick 9e0d8426c1 improved data source field 2024-07-16 14:06:31 +02:00
dluxtron d375c32991 Updating the distributed pwd spray detection 2024-07-12 09:33:44 +10:00
dluxtron 65cdbcbaf8 updating descriptions 2024-07-11 18:06:51 +10:00
dluxtron 48e0fb2451 updating detections 2024-07-02 13:16:44 +10:00
dluxtron 8f951e80b0 updating detections 2024-07-02 13:00:04 +10:00
dluxtron 6a6fe2b59d Revert "Adding pwd spray detection"
This reverts commit 9cb3d6cc34.
2024-07-02 12:36:27 +10:00
dluxtron 62565d205c Revert "Adding new detections"
This reverts commit a10332f69a.
2024-07-02 12:35:23 +10:00
dluxtron 3791f25b6b Adding new detections 2024-07-02 12:03:46 +10:00
dluxtron 05ee579469 adding AD ACL and GPO related detections 2024-07-02 11:52:21 +10:00
dluxtron a10332f69a Adding new detections 2024-07-02 10:43:29 +10:00
dluxtron 9cb3d6cc34 Adding pwd spray detection 2024-07-02 09:50:34 +10:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00
Bhavin Patel 66fcb8be3e v4.33.0 - BUg fixes 2024-06-06 16:34:39 +00:00
Bhavin Patel 7539e88c4c Release Branch v4.33.0 2024-06-05 21:05:06 +00:00
Bhavin Patel 6c5446cfbc Release Branch - ESCU v4.32.0 2024-05-22 16:47:39 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Bhavin Patel 72e29c764f ESCU Release Branch - v4.30.0 2024-04-17 20:44:56 +00:00
Bhavin Patel 0c134526df Release Branch : v4.28.0 2024-03-27 16:36:00 +00:00
Bhavin Patel 7283ba3723 ESCU Release Branch v4.27.0 2024-03-20 20:01:18 +00:00