Bhavin Patel
|
332f641d93
|
updating for testing
|
2025-07-30 08:26:32 -05:00 |
|
Lou Stella
|
6ac8e21af5
|
Merge pull request #3622 from splunk/auto-ta-update-341
Automated Splunk TA Update 341
|
2025-07-29 08:03:19 -05:00 |
|
patel-bhavin
|
391fedba18
|
Updated TAs
|
2025-07-29 07:01:46 +00:00 |
|
Bhavin Patel
|
775402fecc
|
Merge pull request #3618 from 0xC0FFEEEE/bec_rule_threshold
O365 BEC Email Hiding Rule Created (again)
|
2025-07-28 12:45:06 -07:00 |
|
Bhavin Patel
|
e9735eb6bd
|
Merge branch 'develop' into bec_rule_threshold
|
2025-07-28 11:10:33 -07:00 |
|
pyth0n1c
|
b62c21bda0
|
Merge pull request #3620 from splunk/contentctl_attack_data_cache
configure contentctl.yml to use attack data cache
|
2025-07-24 15:26:02 -07:00 |
|
pyth0n1c
|
f94e0cc080
|
Merge branch 'develop' into contentctl_attack_data_cache
|
2025-07-24 15:23:33 -07:00 |
|
Bhavin Patel
|
59c0aef06e
|
Merge branch 'develop' into bec_rule_threshold
|
2025-07-24 14:32:03 -07:00 |
|
Tessa Georgen
|
a599512e15
|
configure contentctl.yml to use attack data cache
|
2025-07-24 15:45:53 -04:00 |
|
0xC0FFEEEE
|
3ccf82c437
|
update risk message
|
2025-07-24 09:00:34 +01:00 |
|
Bhavin Patel
|
1562bec708
|
Merge pull request #3619 from splunk/ctl_511
version bump for 5.11.0
|
2025-07-23 15:11:25 -07:00 |
|
Bhavin Patel
|
5031206e56
|
version bump for next release
|
2025-07-23 13:20:07 -07:00 |
|
Lou Stella
|
aca4613bcb
|
Merge pull request #3616 from splunk/auto-ta-update-334
Automated Splunk TA Update 334
|
2025-07-23 12:51:18 -05:00 |
|
0xC0FFEEEE
|
1032077679
|
Add rule name to risk message
|
2025-07-23 09:42:34 +01:00 |
|
0xC0FFEEEE
|
afefa1506c
|
use correct drilldown field
|
2025-07-23 09:41:21 +01:00 |
|
0xC0FFEEEE
|
43fa38ef77
|
Add threshold filter
Accidentally removed during testing of previous SPL update
|
2025-07-23 09:39:53 +01:00 |
|
patel-bhavin
|
6755ee0a5a
|
Updated TAs
|
2025-07-22 07:01:02 +00:00 |
|
Bhavin Patel
|
e8883750af
|
Merge pull request #3615 from splunk/data_source_bug
minor fix to data source
v5.10.0
|
2025-07-21 15:06:47 -07:00 |
|
Bhavin Patel
|
d3082fc262
|
minor
|
2025-07-21 14:43:12 -07:00 |
|
Bhavin Patel
|
483c7d2d12
|
Merge pull request #3613 from splunk/sharepoint
Sharing is Caring: A story of CVE-2025-53770
|
2025-07-21 14:20:15 -07:00 |
|
Bhavin Patel
|
299f54a1e7
|
Merge branch 'develop' into sharepoint
|
2025-07-21 14:04:54 -07:00 |
|
Bhavin Patel
|
6d8a08fc91
|
Merge pull request #3609 from splunk/quasar_and_loader
quasar_and_loader
|
2025-07-21 14:04:44 -07:00 |
|
Michael Haag
|
227216ec39
|
Create windows_sharepoint_spinstall0_webshell_file_creation.yml
|
2025-07-21 13:57:05 -06:00 |
|
Michael Haag
|
f6a5de35a4
|
Merge branch 'sharepoint' of https://github.com/splunk/security_content into sharepoint
|
2025-07-21 13:11:44 -06:00 |
|
Michael Haag
|
4e3598c522
|
Update windows_sharepoint_toolpane_endpoint_exploitation_attempt.yml
|
2025-07-21 13:11:43 -06:00 |
|
Nasreddine Bencherchali
|
1075307e29
|
Update detections/network/windows_gather_victim_network_info_through_ip_check_web_services.yml
|
2025-07-21 21:01:20 +02:00 |
|
Bhavin Patel
|
955b4af394
|
Merge branch 'develop' into quasar_and_loader
|
2025-07-21 11:20:16 -07:00 |
|
Bhavin Patel
|
5c707ed2fa
|
Merge branch 'develop' into sharepoint
|
2025-07-21 10:33:38 -07:00 |
|
Bhavin Patel
|
db45a47e94
|
Merge pull request #3602 from splunk/duo_detections_1
Cisco Duo Detections
|
2025-07-21 10:29:12 -07:00 |
|
Bhavin Patel
|
e434b1ac3f
|
remove extraquote
|
2025-07-21 09:44:10 -07:00 |
|
Bhavin Patel
|
65291ca170
|
Merge branch 'develop' into duo_detections_1
|
2025-07-21 09:03:48 -07:00 |
|
Michael Haag
|
c5838d60da
|
Create windows_sharepoint_spinstall0_get_request.yml
|
2025-07-21 09:28:05 -06:00 |
|
Nasreddine Bencherchali
|
0329943742
|
Merge pull request #3614 from splunk/missing-ds
Add Missing DS
|
2025-07-21 16:53:53 +02:00 |
|
Nasreddine Bencherchali
|
b96739ccd4
|
Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml
|
2025-07-21 16:37:38 +02:00 |
|
Nasreddine Bencherchali
|
5e76f21e6f
|
Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml
|
2025-07-21 16:34:06 +02:00 |
|
Patrick Bareiss
|
034c2a7bf6
|
feedback review
|
2025-07-21 09:47:20 +02:00 |
|
Michael Haag
|
13b49f5456
|
Sharing is Caring: A story of CVE-2025-53770
|
2025-07-20 17:03:37 -06:00 |
|
Bhavin Patel
|
efc331be05
|
Merge branch 'develop' into duo_detections_1
|
2025-07-18 13:50:53 -07:00 |
|
Bhavin Patel
|
f3505b9a33
|
Merge branch 'develop' into quasar_and_loader
|
2025-07-18 12:17:52 -07:00 |
|
Bhavin Patel
|
84d8f198b2
|
Merge pull request #3610 from splunk/esxi_detections
Esxi detections
|
2025-07-18 12:17:37 -07:00 |
|
Raven Tait
|
8e02ae92a9
|
Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections
|
2025-07-18 14:56:31 -04:00 |
|
Raven Tait
|
c7974920c3
|
add output_fields to datasource
|
2025-07-18 14:56:30 -04:00 |
|
Bhavin Patel
|
c30632444c
|
Merge branch 'develop' into esxi_detections
|
2025-07-18 11:38:02 -07:00 |
|
Bhavin Patel
|
51131fff17
|
Merge pull request #3588 from splunk/citrixbleed2
CitrixBleed 2
|
2025-07-18 11:37:44 -07:00 |
|
Lou Stella
|
c8ed36821e
|
Merge branch 'develop' into esxi_detections
|
2025-07-18 11:27:55 -05:00 |
|
Raven Tait
|
c21bff696b
|
Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections
|
2025-07-18 12:13:03 -04:00 |
|
Raven Tait
|
aba2939a07
|
Fix host field
Fix host field
|
2025-07-18 12:13:00 -04:00 |
|
Bhavin Patel
|
dc8cd1dee4
|
Merge branch 'develop' into citrixbleed2
|
2025-07-18 09:10:33 -07:00 |
|
Bhavin Patel
|
1ee72dcd07
|
Merge pull request #3611 from splunk/auto-ta-update-330
Automated Splunk TA Update 330
|
2025-07-18 09:09:57 -07:00 |
|
patel-bhavin
|
2418f8cd13
|
Updated TAs
|
2025-07-18 07:01:20 +00:00 |
|