Commit Graph

379 Commits

Author SHA1 Message Date
ljstella 8d0935f037 Update attack_data links 2025-09-09 08:35:57 -04:00
Bhavin Patel 9cff1a1671 Merge branch 'develop' into 3886 2025-08-11 11:19:16 -07:00
Raven Tait 3fd2a02f18 Bump versions 2025-08-06 11:00:30 -05:00
Raven Tait 2dde8e118b Updates for 3886 2025-08-05 12:32:01 -05:00
Bhavin Patel ef128df886 updating spl 2025-08-04 14:53:47 -05:00
Bhavin Patel c6c2175f2a move to prod 2025-08-04 14:00:19 -05:00
Bhavin Patel 2c6248de85 updating based on request from Ryan Long 2025-08-04 13:56:35 -05:00
Bhavin Patel e434b1ac3f remove extraquote 2025-07-21 09:44:10 -07:00
Patrick Bareiss 034c2a7bf6 feedback review 2025-07-21 09:47:20 +02:00
Bhavin Patel efc331be05 Merge branch 'develop' into duo_detections_1 2025-07-18 13:50:53 -07:00
Raven Tait aba2939a07 Fix host field
Fix host field
2025-07-18 12:13:00 -04:00
Raven Tait e16ce3b350 Add vmware data source
Add vmware data source
2025-07-16 14:16:23 -04:00
Raven Tait f0eac4d185 Change host to dest
Stop using host field and use a regex for dest
2025-07-16 13:55:49 -04:00
Raven Tait a71c6fb38a Initial batch of ESXi content
Initial batch of ESXi content
2025-07-11 11:59:37 -04:00
Patrick Bareiss fb59e54ffe bug fix 2025-07-10 16:45:20 +02:00
Patrick Bareiss f63c5d26ea bug fix 2025-07-10 15:50:47 +02:00
Patrick Bareiss 2b388b09c4 bug fix 2025-07-10 14:03:01 +02:00
Patrick Bareiss 036eb92f17 update filter macro name 2025-07-10 13:54:00 +02:00
Patrick Bareiss 8601a2174a Cisco Duo Detections 2025-07-10 13:39:55 +02:00
Raven Tait 25617e6770 Initial remote employment fraud detections. 2025-06-12 14:43:59 -04:00
Eric d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. 2025-05-02 14:10:46 -07:00
Bhavin Patel 5b7cfdb7d3 updating versions 2025-04-16 16:45:16 -07:00
pyth0n1c 580a0873f2 Merge branch 'develop' into output_normalization_endpoint 2025-03-27 14:53:31 -07:00
Bhavin Patel c009a27c12 add back manual_test 2025-03-27 14:01:20 -07:00
Bhavin Patel cdd70a10aa test with local data 2025-03-27 13:32:37 -07:00
Bhavin Patel f14fd8dc50 Merge branch 'develop' into output_normalization_endpoint 2025-03-27 10:23:42 -07:00
Bhavin Patel cacaa8ac07 yaml update 2025-03-21 11:58:12 -07:00
Bhavin Patel 30135a6a15 dd udpate 2025-03-21 11:56:19 -07:00
Bhavin Patel 20f1307ddf updating date 2025-03-21 11:54:35 -07:00
Bhavin Patel 912238a4a4 move to prodcution after testing 2025-03-21 11:54:03 -07:00
Patrick Bareiss 1c9debe9a6 update versions 2025-03-14 13:47:44 +01:00
Patrick Bareiss 00e78ab666 output normalisation 2025-03-13 14:31:23 +01:00
Patrick Bareiss ee813d6b39 output normalisation 2025-03-05 14:25:32 +01:00
Patrick Bareiss 448b2134b2 Merge branch 'develop' into output_normalization_endpoint 2025-02-26 11:53:41 +01:00
Patrick Bareiss 0f0ec93d2f improved detections 2025-02-25 08:53:27 +01:00
research-bot ebdd770afd udpating name 2025-02-20 15:08:25 -08:00
research-bot d25d712781 updating detection 2025-02-20 15:07:29 -08:00
Bhavin Patel 49fa1c1900 Merge branch 'develop' into cisco_ai_defense 2025-02-20 15:02:29 -08:00
research-bot aba0bdc4d3 updating detection 2025-02-20 14:47:37 -08:00
research-bot 63facf9e78 updating detection 2025-02-20 14:47:35 -08:00
research-bot ecf4948604 manual test 2025-02-20 08:52:07 -08:00
Bhavin Patel a7425f0d4f Update cisco_ai_defense_security_alerts.yml 2025-02-19 09:52:08 -08:00
Patrick Bareiss 6a53921a8c Merge branch 'develop' into output_normalization_endpoint 2025-02-19 12:09:16 +01:00
pyth0n1c 2ae421d724 Merge branch 'develop' into fix_datasource_typos 2025-02-18 16:24:39 -08:00
Bhavin Patel 9ae1c7acff kfp 2025-02-18 08:13:55 -08:00
Bhavin Patel 44ffd97006 typo
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-02-18 08:05:35 -08:00
Patrick Bareiss e044e874ba improvements 2025-02-18 08:55:49 +01:00
pyth0n1c f2e7dbfbe7 bump versions and dates on modified detections 2025-02-17 15:46:23 -08:00
pyth0n1c 4c80dba4de Fix some typos in the data_source fields. Many detections were referencing data sources that ACTUALLY exist, but by the wrong name. 2025-02-17 12:11:35 -08:00
research-bot 2933334f4c updaing for validate 2025-02-14 13:42:13 -08:00