ljstella
|
8d0935f037
|
Update attack_data links
|
2025-09-09 08:35:57 -04:00 |
|
Bhavin Patel
|
9cff1a1671
|
Merge branch 'develop' into 3886
|
2025-08-11 11:19:16 -07:00 |
|
Raven Tait
|
3fd2a02f18
|
Bump versions
|
2025-08-06 11:00:30 -05:00 |
|
Raven Tait
|
2dde8e118b
|
Updates for 3886
|
2025-08-05 12:32:01 -05:00 |
|
Bhavin Patel
|
ef128df886
|
updating spl
|
2025-08-04 14:53:47 -05:00 |
|
Bhavin Patel
|
c6c2175f2a
|
move to prod
|
2025-08-04 14:00:19 -05:00 |
|
Bhavin Patel
|
2c6248de85
|
updating based on request from Ryan Long
|
2025-08-04 13:56:35 -05:00 |
|
Bhavin Patel
|
e434b1ac3f
|
remove extraquote
|
2025-07-21 09:44:10 -07:00 |
|
Patrick Bareiss
|
034c2a7bf6
|
feedback review
|
2025-07-21 09:47:20 +02:00 |
|
Bhavin Patel
|
efc331be05
|
Merge branch 'develop' into duo_detections_1
|
2025-07-18 13:50:53 -07:00 |
|
Raven Tait
|
aba2939a07
|
Fix host field
Fix host field
|
2025-07-18 12:13:00 -04:00 |
|
Raven Tait
|
e16ce3b350
|
Add vmware data source
Add vmware data source
|
2025-07-16 14:16:23 -04:00 |
|
Raven Tait
|
f0eac4d185
|
Change host to dest
Stop using host field and use a regex for dest
|
2025-07-16 13:55:49 -04:00 |
|
Raven Tait
|
a71c6fb38a
|
Initial batch of ESXi content
Initial batch of ESXi content
|
2025-07-11 11:59:37 -04:00 |
|
Patrick Bareiss
|
fb59e54ffe
|
bug fix
|
2025-07-10 16:45:20 +02:00 |
|
Patrick Bareiss
|
f63c5d26ea
|
bug fix
|
2025-07-10 15:50:47 +02:00 |
|
Patrick Bareiss
|
2b388b09c4
|
bug fix
|
2025-07-10 14:03:01 +02:00 |
|
Patrick Bareiss
|
036eb92f17
|
update filter macro name
|
2025-07-10 13:54:00 +02:00 |
|
Patrick Bareiss
|
8601a2174a
|
Cisco Duo Detections
|
2025-07-10 13:39:55 +02:00 |
|
Raven Tait
|
25617e6770
|
Initial remote employment fraud detections.
|
2025-06-12 14:43:59 -04:00 |
|
Eric
|
d9960562b8
|
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.
|
2025-05-02 14:10:46 -07:00 |
|
Bhavin Patel
|
5b7cfdb7d3
|
updating versions
|
2025-04-16 16:45:16 -07:00 |
|
pyth0n1c
|
580a0873f2
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-27 14:53:31 -07:00 |
|
Bhavin Patel
|
c009a27c12
|
add back manual_test
|
2025-03-27 14:01:20 -07:00 |
|
Bhavin Patel
|
cdd70a10aa
|
test with local data
|
2025-03-27 13:32:37 -07:00 |
|
Bhavin Patel
|
f14fd8dc50
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-03-27 10:23:42 -07:00 |
|
Bhavin Patel
|
cacaa8ac07
|
yaml update
|
2025-03-21 11:58:12 -07:00 |
|
Bhavin Patel
|
30135a6a15
|
dd udpate
|
2025-03-21 11:56:19 -07:00 |
|
Bhavin Patel
|
20f1307ddf
|
updating date
|
2025-03-21 11:54:35 -07:00 |
|
Bhavin Patel
|
912238a4a4
|
move to prodcution after testing
|
2025-03-21 11:54:03 -07:00 |
|
Patrick Bareiss
|
1c9debe9a6
|
update versions
|
2025-03-14 13:47:44 +01:00 |
|
Patrick Bareiss
|
00e78ab666
|
output normalisation
|
2025-03-13 14:31:23 +01:00 |
|
Patrick Bareiss
|
ee813d6b39
|
output normalisation
|
2025-03-05 14:25:32 +01:00 |
|
Patrick Bareiss
|
448b2134b2
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-02-26 11:53:41 +01:00 |
|
Patrick Bareiss
|
0f0ec93d2f
|
improved detections
|
2025-02-25 08:53:27 +01:00 |
|
research-bot
|
ebdd770afd
|
udpating name
|
2025-02-20 15:08:25 -08:00 |
|
research-bot
|
d25d712781
|
updating detection
|
2025-02-20 15:07:29 -08:00 |
|
Bhavin Patel
|
49fa1c1900
|
Merge branch 'develop' into cisco_ai_defense
|
2025-02-20 15:02:29 -08:00 |
|
research-bot
|
aba0bdc4d3
|
updating detection
|
2025-02-20 14:47:37 -08:00 |
|
research-bot
|
63facf9e78
|
updating detection
|
2025-02-20 14:47:35 -08:00 |
|
research-bot
|
ecf4948604
|
manual test
|
2025-02-20 08:52:07 -08:00 |
|
Bhavin Patel
|
a7425f0d4f
|
Update cisco_ai_defense_security_alerts.yml
|
2025-02-19 09:52:08 -08:00 |
|
Patrick Bareiss
|
6a53921a8c
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-02-19 12:09:16 +01:00 |
|
pyth0n1c
|
2ae421d724
|
Merge branch 'develop' into fix_datasource_typos
|
2025-02-18 16:24:39 -08:00 |
|
Bhavin Patel
|
9ae1c7acff
|
kfp
|
2025-02-18 08:13:55 -08:00 |
|
Bhavin Patel
|
44ffd97006
|
typo
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-18 08:05:35 -08:00 |
|
Patrick Bareiss
|
e044e874ba
|
improvements
|
2025-02-18 08:55:49 +01:00 |
|
pyth0n1c
|
f2e7dbfbe7
|
bump versions and dates on modified detections
|
2025-02-17 15:46:23 -08:00 |
|
pyth0n1c
|
4c80dba4de
|
Fix some typos in the data_source fields. Many detections were referencing data sources that ACTUALLY exist, but by the wrong name.
|
2025-02-17 12:11:35 -08:00 |
|
research-bot
|
2933334f4c
|
updaing for validate
|
2025-02-14 13:42:13 -08:00 |
|