Jose Enrique Hernandez
|
863eb07dc9
|
Merge pull request #3281 from splunk/remove_auto_update
removed auto update
|
2025-01-15 19:26:05 -05:00 |
|
Jose Enrique Hernandez
|
88926b1620
|
removed auto update
|
2025-01-15 19:24:23 -05:00 |
|
Bhavin Patel
|
fb66f8cba2
|
Merge pull request #3266 from splunk/dlux_5
Dlux 5 - AAD detection
|
2025-01-14 10:02:21 -08:00 |
|
Bhavin Patel
|
fa2ba7c031
|
Branch was auto-updated.
|
2025-01-14 09:04:48 -08:00 |
|
Bhavin Patel
|
c3689f0194
|
Merge pull request #3237 from splunk/aws_asl_detections
Improved ASL AWS detections
|
2025-01-14 09:04:24 -08:00 |
|
Patrick Bareiss
|
3d1fde609b
|
Add ASL AWS CloudTrail data source
|
2025-01-14 16:47:25 +01:00 |
|
research-bot
|
ff5a16bd97
|
updating data sources
|
2025-01-13 12:18:08 -08:00 |
|
Bhavin Patel
|
d64e5c9063
|
Update o365_service_principal_privilege_escalation.yml
|
2025-01-13 10:36:45 -08:00 |
|
research-bot
|
a3be9d47b9
|
minor udpates to yaml
|
2025-01-10 11:46:43 -08:00 |
|
Bhavin Patel
|
6b9161bcea
|
Branch was auto-updated.
|
2025-01-10 07:03:33 -08:00 |
|
Bhavin Patel
|
6d724876b6
|
Branch was auto-updated.
|
2025-01-10 07:03:31 -08:00 |
|
Lou Stella
|
c0f0f9506d
|
Merge pull request #3274 from splunk/auto-ta-update-141
Automated Splunk TA Update 141
|
2025-01-10 09:03:16 -06:00 |
|
patel-bhavin
|
67de6175a9
|
Updated TAs
|
2025-01-10 06:57:41 +00:00 |
|
Bhavin Patel
|
f890159c74
|
Branch was auto-updated.
|
2025-01-09 14:18:18 -08:00 |
|
Bhavin Patel
|
3937f26f84
|
Branch was auto-updated.
|
2025-01-09 14:18:17 -08:00 |
|
Bhavin Patel
|
ede80f4395
|
Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2
Nterl0k - T1219 - RMM Detection for Registry locations.
|
2025-01-09 14:17:57 -08:00 |
|
Bhavin Patel
|
55d4936427
|
update token
|
2025-01-09 13:26:23 -08:00 |
|
Bhavin Patel
|
c01f87071e
|
Merge branch 'develop' into nterl0k-t1219-rmm-update-2
|
2025-01-09 13:10:22 -08:00 |
|
Bhavin Patel
|
045cc1994b
|
Branch was auto-updated.
|
2025-01-09 11:42:58 -08:00 |
|
Bhavin Patel
|
a746db1270
|
Branch was auto-updated.
|
2025-01-09 11:42:53 -08:00 |
|
Lou Stella
|
d2592c5deb
|
Merge pull request #3270 from splunk/auto-ta-update-139
Automated Splunk TA Update 139
|
2025-01-09 13:42:36 -06:00 |
|
ljstella
|
1ce4f77a4c
|
update description
|
2025-01-09 12:02:56 -06:00 |
|
Patrick Bareiss
|
848fb18717
|
improvements
|
2025-01-09 18:19:18 +01:00 |
|
ljstella
|
4b28335f82
|
retrigger
|
2025-01-09 11:12:57 -06:00 |
|
ljstella
|
02afa4f4cb
|
Adding PSC
|
2025-01-09 11:08:49 -06:00 |
|
ljstella
|
5b8986469e
|
Removed parens that was killing app installs
|
2025-01-09 10:39:47 -06:00 |
|
Patrick Bareiss
|
8b30dc3e15
|
change
|
2025-01-09 14:47:11 +01:00 |
|
Patrick Bareiss
|
87d2ca6225
|
Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections
|
2025-01-09 14:43:06 +01:00 |
|
Patrick Bareiss
|
4b37788f5a
|
new detections
|
2025-01-09 14:42:38 +01:00 |
|
ljstella
|
c591ef5ff7
|
Adding back two containers
|
2025-01-08 12:45:30 -06:00 |
|
ljstella
|
a9129bf5e3
|
Testing single container
|
2025-01-08 12:40:39 -06:00 |
|
Bhavin Patel
|
4c65798689
|
Merge branch 'develop' into nterl0k-t1219-rmm-update-2
|
2025-01-08 10:22:03 -08:00 |
|
Bhavin Patel
|
557fdeca89
|
Add manual_test flag
|
2025-01-08 10:21:40 -08:00 |
|
Bhavin Patel
|
62e5a6083f
|
Branch was auto-updated.
|
2025-01-08 10:11:53 -08:00 |
|
Bhavin Patel
|
c90858719d
|
Branch was auto-updated.
|
2025-01-08 10:11:52 -08:00 |
|
Bhavin Patel
|
607494bfb8
|
Branch was auto-updated.
|
2025-01-08 10:11:52 -08:00 |
|
Bhavin Patel
|
be3ab3c6ed
|
Merge pull request #3255 from nterl0k/nterl0k-T1550-netexec-usage
Nterl0k - T1550 - NetExec Usage Detection
|
2025-01-08 10:11:36 -08:00 |
|
Bhavin Patel
|
5e58179a00
|
file name update
|
2025-01-08 10:09:48 -08:00 |
|
Patrick Bareiss
|
dc3fdda537
|
new detection
|
2025-01-08 17:05:24 +01:00 |
|
Patrick Bareiss
|
197881f7fa
|
bug fix
|
2025-01-08 14:32:56 +01:00 |
|
Patrick Bareiss
|
186061fa94
|
new detection
|
2025-01-08 13:53:03 +01:00 |
|
patel-bhavin
|
7c7904265a
|
Updated TAs
|
2025-01-08 06:58:09 +00:00 |
|
dluxtron
|
3d8919f1c6
|
reverting macro change
|
2025-01-08 15:11:19 +10:00 |
|
research-bot
|
b97cf5714e
|
udpating SPL
|
2025-01-07 13:14:24 -08:00 |
|
Steven Dick
|
50fd37accd
|
Update windows_process_with_netexec_command_line_parameters.yml
Adding drilldowns
|
2025-01-07 15:49:16 -05:00 |
|
Steven Dick
|
2627b4bea5
|
Update detect_remote_access_software_usage_registry.yml
add drilldowns
|
2025-01-07 15:39:12 -05:00 |
|
research-bot
|
e66bb09cf4
|
updating macro
|
2025-01-07 12:15:23 -08:00 |
|
research-bot
|
c4d5915f22
|
updating risk
|
2025-01-07 12:14:10 -08:00 |
|
research-bot
|
fa6f09b059
|
fixing up yamls for testing
|
2025-01-07 11:58:59 -08:00 |
|
Nasreddine Bencherchali
|
e8f9c1ddd0
|
Merge branch 'develop' into nterl0k-T1550-netexec-usage
|
2025-01-07 17:45:50 +01:00 |
|