Commit Graph

14636 Commits

Author SHA1 Message Date
tccontre bc0e4454c2 Update suspicious_process_file_path.yml 2022-01-21 09:38:21 +01:00
tccontre eef369a633 Update wscript_or_cscript_suspicious_child_process.yml 2022-01-21 09:37:16 +01:00
tccontre 044b81b922 Update add_or_set_windows_defender_exclusion.yml 2022-01-21 09:34:41 +01:00
pyth0n1c ffa8c8652b Branch was auto-updated. 2022-01-20 18:20:05 -08:00
pyth0n1c 0621c82ddd Branch was auto-updated. 2022-01-20 18:20:03 -08:00
pyth0n1c 1a7afbbbde Branch was auto-updated. 2022-01-20 18:20:02 -08:00
pyth0n1c f4e36bc060 Branch was auto-updated. 2022-01-20 18:20:01 -08:00
pyth0n1c 1e7855e204 Branch was auto-updated. 2022-01-20 18:20:00 -08:00
pyth0n1c 693ba420b5 Branch was auto-updated. 2022-01-20 18:19:59 -08:00
mhart-splunk 72d48b26a8 Add mlmodel to lookups packaging (#1948)
Adding support for packaging mlmodel lookup files in github actions
2022-01-20 21:18:54 -05:00
Michael Hart 906f0ee338 Changing the test dataset to the main branch 2022-01-20 21:09:22 -05:00
pyth0n1c d8cb2d7a83 Branch was auto-updated. 2022-01-20 16:07:15 -08:00
pyth0n1c 020ed54b5b Branch was auto-updated. 2022-01-20 16:07:14 -08:00
pyth0n1c 1721347ae8 Branch was auto-updated. 2022-01-20 16:07:13 -08:00
pyth0n1c 6912709186 Branch was auto-updated. 2022-01-20 16:07:12 -08:00
pyth0n1c a8046a9927 Branch was auto-updated. 2022-01-20 16:07:11 -08:00
pyth0n1c ad2324d863 Branch was auto-updated. 2022-01-20 16:07:09 -08:00
Bhavin Patel de74520ad7 Merge pull request #1950 from splunk/ransomware_update
ransomware update
2022-01-20 16:06:49 -08:00
patel-bhavin 6d13de615c duplicate 2022-01-20 15:50:28 -08:00
mhaag-spl 5bfcf2eea3 InstallUtil and DotNet Assemblies 2022-01-20 14:34:04 -07:00
Michael Hart 2f9d410caf Updating test interval 2022-01-20 16:14:44 -05:00
pyth0n1c 630f582ffc Branch was auto-updated. 2022-01-20 13:07:09 -08:00
pyth0n1c 89851095ec Branch was auto-updated. 2022-01-20 13:07:08 -08:00
pyth0n1c 8c912dd8d1 Branch was auto-updated. 2022-01-20 13:07:07 -08:00
pyth0n1c 0b540e0bc6 Branch was auto-updated. 2022-01-20 13:07:06 -08:00
pyth0n1c 594330362a Branch was auto-updated. 2022-01-20 13:07:05 -08:00
pyth0n1c 280b71bdb2 Branch was auto-updated. 2022-01-20 13:07:04 -08:00
Jose Enrique Hernandez 69b262d1ab Merge pull request #1938 from splunk/update_ssa_ymls
adding risk_severity to SSA ymls
2022-01-20 16:06:45 -05:00
patel-bhavin 4d7d7ef645 wrong file 2022-01-20 12:55:07 -08:00
Bhavin Patel 9f771f1052 Merge branch 'develop' into update_ssa_ymls 2022-01-20 12:53:19 -08:00
patel-bhavin 2a614512e4 file name bugs 2022-01-20 12:51:32 -08:00
pyth0n1c 96b979bce4 Branch was auto-updated. 2022-01-20 12:28:32 -08:00
pyth0n1c bbb3ea16c0 Branch was auto-updated. 2022-01-20 12:28:30 -08:00
pyth0n1c 76221cf4dd Branch was auto-updated. 2022-01-20 12:28:29 -08:00
pyth0n1c 79766f5133 Branch was auto-updated. 2022-01-20 12:28:28 -08:00
pyth0n1c a5c6056aac Branch was auto-updated. 2022-01-20 12:28:27 -08:00
pyth0n1c f9cb7214f1 Branch was auto-updated. 2022-01-20 12:28:26 -08:00
Jose Enrique Hernandez 9909e710ac Merge pull request #1949 from splunk/dataupdate
Updated BA 4688 dataset
2022-01-20 15:28:00 -05:00
mhaag-spl 85c1f12905 Update ssa___fsutil_zeroing_file.test.yml 2022-01-20 13:11:55 -07:00
mhaag-spl adfe9703c4 Updated BA 4688 dataset 2022-01-20 12:56:36 -07:00
Michael Hart 4a7435f998 Temporarily changing location for samples 2022-01-20 11:32:55 -05:00
tccontre a8e9287410 WhisperGateIsOpen 2022-01-20 16:13:00 +01:00
tccontre 1b510a0929 WhisperGateIsOpen 2022-01-20 15:11:12 +01:00
P4T12ICK be8f75c5fa fixed detections and stories metadata 2022-01-20 14:52:39 +01:00
Michael Hart 1fb3fb8064 Adding required fields and fixing URL in test 2022-01-20 08:47:34 -05:00
Michael Hart 14db58ca19 Adding a yaml file to ensure that contentctl copies the mlmodel file to the right place 2022-01-20 08:32:39 -05:00
P4T12ICK a95e0e5aa6 fixed detections metadata 2022-01-20 13:42:50 +01:00
tccontre 79f96d3270 WhisperGateIsOpen 2022-01-20 12:29:00 +01:00
Michael Hart c6d4e40abf Adding in attack data 2022-01-19 21:36:46 -05:00
Michael Hart 6cbf5b67d9 Updated detection logic 2022-01-19 21:15:51 -05:00