27513 Commits

Author SHA1 Message Date
Bhavin Patel 332f641d93 updating for testing 2025-07-30 08:26:32 -05:00
Lou Stella 6ac8e21af5 Merge pull request #3622 from splunk/auto-ta-update-341
Automated Splunk TA Update 341
2025-07-29 08:03:19 -05:00
patel-bhavin 391fedba18 Updated TAs 2025-07-29 07:01:46 +00:00
Bhavin Patel 775402fecc Merge pull request #3618 from 0xC0FFEEEE/bec_rule_threshold
O365 BEC Email Hiding Rule Created (again)
2025-07-28 12:45:06 -07:00
Bhavin Patel e9735eb6bd Merge branch 'develop' into bec_rule_threshold 2025-07-28 11:10:33 -07:00
pyth0n1c b62c21bda0 Merge pull request #3620 from splunk/contentctl_attack_data_cache
configure contentctl.yml to use attack data cache
2025-07-24 15:26:02 -07:00
pyth0n1c f94e0cc080 Merge branch 'develop' into contentctl_attack_data_cache 2025-07-24 15:23:33 -07:00
Bhavin Patel 59c0aef06e Merge branch 'develop' into bec_rule_threshold 2025-07-24 14:32:03 -07:00
Tessa Georgen a599512e15 configure contentctl.yml to use attack data cache 2025-07-24 15:45:53 -04:00
0xC0FFEEEE 3ccf82c437 update risk message 2025-07-24 09:00:34 +01:00
Bhavin Patel 1562bec708 Merge pull request #3619 from splunk/ctl_511
version bump for 5.11.0
2025-07-23 15:11:25 -07:00
Bhavin Patel 5031206e56 version bump for next release 2025-07-23 13:20:07 -07:00
Lou Stella aca4613bcb Merge pull request #3616 from splunk/auto-ta-update-334
Automated Splunk TA Update 334
2025-07-23 12:51:18 -05:00
0xC0FFEEEE 1032077679 Add rule name to risk message 2025-07-23 09:42:34 +01:00
0xC0FFEEEE afefa1506c use correct drilldown field 2025-07-23 09:41:21 +01:00
0xC0FFEEEE 43fa38ef77 Add threshold filter
Accidentally removed during testing of previous SPL update
2025-07-23 09:39:53 +01:00
patel-bhavin 6755ee0a5a Updated TAs 2025-07-22 07:01:02 +00:00
Bhavin Patel e8883750af Merge pull request #3615 from splunk/data_source_bug
minor fix to data source
v5.10.0
2025-07-21 15:06:47 -07:00
Bhavin Patel d3082fc262 minor 2025-07-21 14:43:12 -07:00
Bhavin Patel 483c7d2d12 Merge pull request #3613 from splunk/sharepoint
Sharing is Caring: A story of CVE-2025-53770
2025-07-21 14:20:15 -07:00
Bhavin Patel 299f54a1e7 Merge branch 'develop' into sharepoint 2025-07-21 14:04:54 -07:00
Bhavin Patel 6d8a08fc91 Merge pull request #3609 from splunk/quasar_and_loader
quasar_and_loader
2025-07-21 14:04:44 -07:00
Michael Haag 227216ec39 Create windows_sharepoint_spinstall0_webshell_file_creation.yml 2025-07-21 13:57:05 -06:00
Michael Haag f6a5de35a4 Merge branch 'sharepoint' of https://github.com/splunk/security_content into sharepoint 2025-07-21 13:11:44 -06:00
Michael Haag 4e3598c522 Update windows_sharepoint_toolpane_endpoint_exploitation_attempt.yml 2025-07-21 13:11:43 -06:00
Nasreddine Bencherchali 1075307e29 Update detections/network/windows_gather_victim_network_info_through_ip_check_web_services.yml 2025-07-21 21:01:20 +02:00
Bhavin Patel 955b4af394 Merge branch 'develop' into quasar_and_loader 2025-07-21 11:20:16 -07:00
Bhavin Patel 5c707ed2fa Merge branch 'develop' into sharepoint 2025-07-21 10:33:38 -07:00
Bhavin Patel db45a47e94 Merge pull request #3602 from splunk/duo_detections_1
Cisco Duo Detections
2025-07-21 10:29:12 -07:00
Bhavin Patel e434b1ac3f remove extraquote 2025-07-21 09:44:10 -07:00
Bhavin Patel 65291ca170 Merge branch 'develop' into duo_detections_1 2025-07-21 09:03:48 -07:00
Michael Haag c5838d60da Create windows_sharepoint_spinstall0_get_request.yml 2025-07-21 09:28:05 -06:00
Nasreddine Bencherchali 0329943742 Merge pull request #3614 from splunk/missing-ds
Add Missing DS
2025-07-21 16:53:53 +02:00
Nasreddine Bencherchali b96739ccd4 Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml 2025-07-21 16:37:38 +02:00
Nasreddine Bencherchali 5e76f21e6f Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml 2025-07-21 16:34:06 +02:00
Patrick Bareiss 034c2a7bf6 feedback review 2025-07-21 09:47:20 +02:00
Michael Haag 13b49f5456 Sharing is Caring: A story of CVE-2025-53770 2025-07-20 17:03:37 -06:00
Bhavin Patel efc331be05 Merge branch 'develop' into duo_detections_1 2025-07-18 13:50:53 -07:00
Bhavin Patel f3505b9a33 Merge branch 'develop' into quasar_and_loader 2025-07-18 12:17:52 -07:00
Bhavin Patel 84d8f198b2 Merge pull request #3610 from splunk/esxi_detections
Esxi detections
2025-07-18 12:17:37 -07:00
Raven Tait 8e02ae92a9 Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections 2025-07-18 14:56:31 -04:00
Raven Tait c7974920c3 add output_fields to datasource 2025-07-18 14:56:30 -04:00
Bhavin Patel c30632444c Merge branch 'develop' into esxi_detections 2025-07-18 11:38:02 -07:00
Bhavin Patel 51131fff17 Merge pull request #3588 from splunk/citrixbleed2
CitrixBleed 2
2025-07-18 11:37:44 -07:00
Lou Stella c8ed36821e Merge branch 'develop' into esxi_detections 2025-07-18 11:27:55 -05:00
Raven Tait c21bff696b Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections 2025-07-18 12:13:03 -04:00
Raven Tait aba2939a07 Fix host field
Fix host field
2025-07-18 12:13:00 -04:00
Bhavin Patel dc8cd1dee4 Merge branch 'develop' into citrixbleed2 2025-07-18 09:10:33 -07:00
Bhavin Patel 1ee72dcd07 Merge pull request #3611 from splunk/auto-ta-update-330
Automated Splunk TA Update 330
2025-07-18 09:09:57 -07:00
patel-bhavin 2418f8cd13 Updated TAs 2025-07-18 07:01:20 +00:00