201 Commits

Author	SHA1	Message	Date
Bhavin Patel	9332e6a24c	o365_obs_fix	2023-09-22 15:01:21 -07:00
Bhavin Patel	fdb4417077	Merge branch 'release_v4.12.0' into Edit_How_To_Implement	2023-09-15 12:52:51 -07:00
Gowthamaraj rajendran	e06cfa133d	Edit how_to_implement for Endpoint.Processes	2023-09-15 10:58:38 -07:00
Bhavin Patel	8fd50e0320	adding CVE	2023-09-11 17:13:40 -07:00
pyth0n1c	4d8b5b5eb4	Final changes in prep for release. Datasets uploaded to attack range	2023-08-30 08:09:15 -07:00
pyth0n1c	9a2229329d	Another detections update. Matching release dates in files with real release date.	2023-08-29 16:44:36 -07:00
pyth0n1c	9677f38895	Update to fix dos search	2023-08-23 15:11:45 -07:00
pyth0n1c	d838ab5435	updates to lookups, created new lookup, refined detection	2023-08-23 14:49:33 -07:00
pyth0n1c	484ebd722c	removed one test	2023-08-22 16:09:59 -07:00
pyth0n1c	acc83e574d	more detection and documentation updates	2023-08-22 16:07:12 -07:00
pyth0n1c	977da1ab87	minor detection updates	2023-08-21 16:11:10 -07:00
pyth0n1c	63f8b8633b	more risky stuff	2023-08-21 15:46:36 -07:00
pyth0n1c	0112c918e9	updates to search	2023-08-21 15:38:03 -07:00
pyth0n1c	b86e956e90	Added two	2023-08-21 11:29:21 -07:00
srv-rr-gh-researchbt	63eda913d7	Branch was auto-updated.	2023-08-02 09:43:45 -07:00
pyth0n1c	2c45dd93fe	Add missing tests to detections.	2023-07-31 16:27:16 -07:00
srv-rr-gh-researchbt	2444de22fe	Branch was auto-updated.	2023-07-31 09:20:00 -07:00
Bhavin Patel	8a05a0f4c2	Update splunk_unauthenticated_log_injection_web_service_log.yml	2023-07-31 09:02:03 -07:00
Bhavin Patel	d3806e5a35	Update splunk_unauthenticated_log_injection_web_service_log.yml	2023-07-31 08:59:56 -07:00
Rod Soto	908e686283	morefixes	2023-07-31 08:36:43 -07:00
Rod Soto	e5b9e9437b	fixes2	2023-07-31 08:32:33 -07:00
Rod Soto	59e5d6da72	typos	2023-07-31 08:18:50 -07:00
Rod Soto	29bf8975eb	addeddollarsign	2023-07-31 08:05:51 -07:00
Bhavin Patel	071415c0af	observable fix for cloud	2023-07-28 11:46:28 -05:00
Rod Soto	387c4bd2e2	7bh	2023-07-14 18:01:32 -07:00
Rod Soto	c1188551d2	6bh	2023-07-14 17:55:29 -07:00
Rod Soto	8c9bcf49b4	6bh	2023-07-13 18:06:10 -07:00
Rod Soto	fb13d95e4a	5bh	2023-07-13 17:42:22 -07:00
Rod Soto	6514087bfa	bh4	2023-07-13 17:05:56 -07:00
Rod Soto	4db0f1f52f	3bh	2023-07-13 16:52:29 -07:00
Rod Soto	170779311d	2bh	2023-07-13 16:44:51 -07:00
Rod Soto	ef63dc97e1	1bh	2023-07-13 16:23:43 -07:00
pyth0n1c	22eb90a78f	Bump detection versions because their ... underlying lookups have been updated to deal with previous formatting issues.	2023-06-27 12:43:09 -07:00
pyth0n1c	dc13c17d7a	improve specificity	2023-06-08 13:16:51 -07:00
pyth0n1c	84af2e0f6b	Update splunk_http_response_splitting_via_rest_spl_command.yml	2023-06-08 12:19:11 -07:00
pyth0n1c	7831c8ae20	Revert to previous version in develop. This ammends an unintentional commit directly to develop.	2023-06-08 12:12:11 -07:00
pyth0n1c	431918df8d	Minor update to increase ... specificity of search	2023-06-08 12:07:46 -07:00
pyth0n1c	c42c086a0a	Fix detection	2023-06-01 11:10:39 -07:00
patel-bhavin	95cc544ca1	audit	2023-06-01 10:25:12 -07:00
patel-bhavin	f7cabb74bb	update yml	2023-06-01 10:18:58 -07:00
Bhavin Patel	553ecb9478	Update splunk_dos_via_dump_spl_command.yml	2023-06-01 09:58:45 -07:00
pyth0n1c	087a29c857	fixing mitre ids	2023-06-01 09:45:20 -07:00
pyth0n1c	4bfd0c1277	content for June2023.	2023-06-01 08:18:50 -07:00
P4T12ICK	97a1ec3bd5	bug fix validation	2023-04-28 13:53:52 +02:00
srv-rr-gh-researchbt	5f5f0aa76b	Branch was auto-updated.	2023-04-17 16:53:09 -07:00
Bhavin Patel	69296ac7d1	Update okta_threatinsight_suspected_passwordspray_attack.yml	2023-04-17 16:46:08 -07:00
srv-rr-gh-researchbt	73f0a8dc50	Branch was auto-updated.	2023-04-17 16:26:21 -07:00
patel-bhavin	fc34672ca4	updates to ymls	2023-04-17 15:23:53 -07:00
srv-rr-gh-researchbt	02803d91be	Branch was auto-updated.	2023-04-17 13:11:16 -07:00
Lou Stella	ed394e2ce1	Removing extra 11186 around field name	2023-04-17 15:00:52 -05:00