admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
24,680 Commits 697 Branches 195 Tags
windows_detection_update
Commit Graph

63 Commits

Author SHA1 Message Date
research-bot b640a7675c data clean 2024-10-29 10:16:27 -07:00
research-bot 5e0afc519e update example log 2024-10-29 10:14:32 -07:00
research-bot 7aa3ee6801 adding data source 2024-10-29 10:11:24 -07:00
patel-bhavin 93aa751401 Updated TAs 2024-10-24 06:57:48 +00:00
patel-bhavin ab1e0cb995 Updated TAs 2024-10-22 06:58:06 +00:00
Bhavin Patel f0dfaebf39 updates per Lous feedback 2024-10-15 13:44:46 -07:00
Bhavin Patel abb20f7d3f Branch was auto-updated. 2024-10-09 11:13:55 -07:00
Bhavin Patel 88e170ce56 Branch was auto-updated. 2024-10-09 11:12:24 -07:00
patel-bhavin 51bc5f7e41 Updated TAs 2024-10-08 06:57:55 +00:00
patel-bhavin afa00e6dc8 Updated TAs 2024-10-04 06:57:58 +00:00
Bhavin Patel f7ee25c5a8 Branch was auto-updated. 2024-10-03 11:28:46 +05:30
pyth0n1c d5fb6c520c update ymls so that they refer to the correct names 
of datasources. this was mostly removing spaces
to convert "Sysmon Event ID N" to
"Sysmon EventID N". Also fix some ymls
that used the field "data_sources" when
it should be "data_source"
 2024-09-26 14:48:44 -07:00
Gowthamaraj rajendran 8451aead4f edit the data source example 2024-09-24 10:03:31 -07:00
Gowthamaraj rajendran 19f81c24ef Add data source object 2024-09-24 10:00:05 -07:00
patel-bhavin 69fa5a1eef Updated TAs 2024-09-18 06:57:39 +00:00
patel-bhavin e3586170c5 Updated TAs 2024-09-15 06:57:47 +00:00
patel-bhavin 4ca4295dd3 Updated TAs 2024-09-05 06:57:54 +00:00
Patrick Bareiss 676d1a7e18 bump aws ta version 2024-08-30 07:43:21 +02:00
Bhavin Patel 3de50154a2 updating minor 2024-08-22 23:05:58 +05:30
Bhavin Patel f07062ef1a adding aws datasource 2024-08-22 22:48:26 +05:30
Bhavin Patel 113618a41d updating data source 2024-08-22 21:49:40 +05:30
Michael Haag c5165cef6a 👀 2024-08-22 10:07:04 -06:00
Michael Haag 77f0a76383 data sourced 2024-08-22 09:54:44 -06:00
tccontre f16501ec86 auditd_data_source 2024-08-08 15:06:44 +02:00
tccontre d0b5537cc5 auditd_data_source 2024-08-08 15:00:58 +02:00
Br3akp0int 35e2f0d0cc Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml 2024-08-08 14:56:03 +02:00
Br3akp0int 98b7916636 Rename Linux_Auditd_Service_Stop.yml to linux_auditd_service_stop.yml 2024-08-08 14:55:44 +02:00
Br3akp0int 8ebc697d5f Rename Linux_Auditd_Proctitle.yml to linux_auditd_proctitle.yml 2024-08-08 14:55:24 +02:00
Br3akp0int d1f13df7c5 Rename Linux_Auditd_Path.yml to linux_auditd_path.yml 2024-08-08 14:55:03 +02:00
Br3akp0int 65df507595 Rename Linux_Auditd_Execve.yml to linux_auditd_execve.yml 2024-08-08 14:54:44 +02:00
Br3akp0int 250ff001f2 Rename Linux_Auditd_Add_User.yml to linux_auditd_add_user.yml 2024-08-08 14:54:21 +02:00
tccontre 89902ee34b auditd_data_source 2024-08-08 14:47:22 +02:00
Patrick Bareiss 9ce5478271 Data Source Bug Fix 2024-08-07 16:21:33 +02:00
pyth0n1c 19a1470d14 Update crowdstrike ta 2024-08-05 16:42:40 -07:00
Bhavin Patel 672084461f Merge branch 'develop' into data_source_improvements 2024-08-05 12:50:11 -07:00
Patrick Bareiss bf1d25af38 improved data source TA version 2024-08-05 10:12:12 +02:00
ljstella abdf1b51e7 Fixing TA for CS data 2024-08-01 08:31:06 -05:00
Patrick f479e762e6 Improve TA names to match the naming in Splunk 2024-07-31 09:58:03 +02:00
pyth0n1c 0d82fcb0d2 Fix merge conflicts 2024-07-24 15:26:40 -07:00
Patrick 4c0d7f41b0 merged with develop 2024-07-24 13:52:36 +02:00
Patrick b3f2bb4682 merged with develop 2024-07-24 13:48:22 +02:00
Patrick c0774b9762 Better data source handling 2024-07-24 13:25:59 +02:00
Patrick 68b3a666a9 renamed data source and event source files 2024-07-19 08:45:57 +02:00
Patrick 7263680bf3 added date and version to objects and changed event_names to event_source and made it a list of strings instead of list of dicts 2024-07-18 11:44:35 +02:00
Bhavin Patel 2629cf330a Release v4.36.0 - Draft release branch (Manual) 2024-07-17 18:03:56 +00:00
Patrick 87108a5aac Improved data sources 2024-07-17 14:41:50 +02:00
Bhavin Patel 8d42322842 rm new line 2024-07-16 08:12:27 -07:00
Bhavin Patel 40248a397a updating data source files 2024-07-16 08:11:24 -07:00
Patrick 9e0d8426c1 improved data source field 2024-07-16 14:06:31 +02:00
Bhavin Patel 22e5ea3f83 Release Branch - ESCU v4.34.0 2024-06-26 14:41:53 +00:00