Commit Graph

26718 Commits

Author SHA1 Message Date
Bhavin Patel 00253f3c6e Merge branch 'develop' into output_normalization_endpoint 2025-04-01 14:45:19 -07:00
Bhavin Patel 2c2e127a88 Merge pull request #3440 from splunk/integration_fixes_endpoint
integration fixes for endpoint detections
2025-04-01 14:45:03 -07:00
Bhavin Patel 041054cf08 Merge pull request #3417 from splunk/ZDI-CAN-25373
Clear and Present Haag-er: ZDI-CAN-25373
2025-04-01 14:43:34 -07:00
Bhavin Patel deb9ca1eba Merge branch 'develop' into ZDI-CAN-25373 2025-04-01 14:22:38 -07:00
Bhavin Patel 452411530f Merge pull request #3421 from splunk/sunnyside
Tomcat CVE-2025-24813: Haag Story 3: Attack Analytics to the Rescue
2025-04-01 14:19:39 -07:00
Bhavin Patel 7168e32ea6 Merge branch 'develop' into sunnyside 2025-04-01 14:05:53 -07:00
Bhavin Patel 1201ccae64 udpating spl tick 2025-04-01 14:01:43 -07:00
Michael Haag e393aaad5c done 2025-04-01 14:53:17 -06:00
Michael Haag 09e184389b Merge branch 'develop' into ZDI-CAN-25373 2025-04-01 14:49:25 -06:00
Michael Haag 55b5bc77d2 fixagai 2025-04-01 14:48:54 -06:00
Michael Haag 452378b283 fixor 2025-04-01 14:37:35 -06:00
Michael Haag f435240b83 fixes 2025-04-01 14:34:18 -06:00
Bhavin Patel 488debfe2b fixing failed detections 2025-04-01 12:55:52 -07:00
Bhavin Patel 7ae5e1a2fe Merge pull request #3439 from splunk/output_normalization_endpoint_fixes
Integration Testing bug fixes
2025-04-01 09:15:00 -07:00
Patrick Bareiss 62f5e451d3 Integration Testing bug fixes 2025-04-01 09:58:17 +02:00
Patrick Bareiss 03859564c8 rebase with develop 2025-04-01 09:42:07 +02:00
Patrick Bareiss 7541027f8e Merge branch 'develop' into output_normalization_endpoint 2025-04-01 09:41:58 +02:00
Bhavin Patel 246f4856ef Merge pull request #3423 from 0xC0FFEEEE/win_sus_service_fix
Windows Service Created with Suspicious Service Name fix
2025-03-28 13:34:30 -07:00
Bhavin Patel 3b6e62e913 Merge branch 'develop' into win_sus_service_fix 2025-03-28 13:17:43 -07:00
Bhavin Patel bc2f378522 Merge pull request #3425 from splunk/rahul_feedback
SPL update - Detect Large Outbound ICMP Packets
2025-03-28 13:16:55 -07:00
Bhavin Patel db0455a024 Merge branch 'develop' into win_sus_service_fix 2025-03-28 12:36:36 -07:00
Bhavin Patel 949e72062b Merge branch 'develop' into rahul_feedback 2025-03-28 12:35:45 -07:00
Bhavin Patel c21858bad4 Merge pull request #3419 from splunk/seaside
The Haag Identity: Operation Seashell Blizzard 🌊❄️
2025-03-28 12:32:53 -07:00
Bhavin Patel bd3c6a0800 Merge branch 'develop' into sunnyside 2025-03-28 12:22:09 -07:00
Bhavin Patel 9a1888835c Merge branch 'develop' into rahul_feedback 2025-03-28 12:15:27 -07:00
Bhavin Patel fb51ba8f28 Merge branch 'develop' into seaside 2025-03-28 12:10:09 -07:00
Bhavin Patel ca2487eec2 Merge pull request #3432 from splunk/auto-ta-update-218
Automated Splunk TA Update 218
2025-03-28 12:09:37 -07:00
Bhavin Patel a87a568a2a Update seashell_blizzard.yml 2025-03-28 12:02:11 -07:00
Bhavin Patel 7519993300 Merge branch 'develop' into seaside 2025-03-28 12:01:27 -07:00
Bhavin Patel c7d11e0852 udpating msg 2025-03-28 11:41:56 -07:00
Bhavin Patel 12356f996f updating detection to previous 2025-03-28 11:39:59 -07:00
Bhavin Patel 135c3633d8 updating detection 2025-03-28 11:37:43 -07:00
Bhavin Patel 3f274b9b83 deprecate and add new 2025-03-28 11:32:34 -07:00
Bhavin Patel 1bbcf0b4ac Merge branch 'develop' into auto-ta-update-218 2025-03-28 10:07:30 -07:00
Bhavin Patel 57a2e3c230 Merge pull request #3418 from splunk/vanhelsing
The Haag Has Landed: VanHelsing's Revenge
2025-03-28 10:06:49 -07:00
Bhavin Patel 770f4bfdf0 Merge branch 'develop' into auto-ta-update-218 2025-03-28 09:52:09 -07:00
Bhavin Patel 26c1b2eb30 Update linux_secure.yml 2025-03-28 09:51:59 -07:00
Bhavin Patel 7e1cc06c3c Merge branch 'develop' into win_sus_service_fix 2025-03-28 09:50:36 -07:00
Bhavin Patel 4cf5b74a65 Update vanhelsing_ransomware.yml 2025-03-28 09:48:48 -07:00
Bhavin Patel 14bf638d06 Merge branch 'develop' into vanhelsing 2025-03-28 09:48:19 -07:00
Bhavin Patel b4e78eb286 Merge branch 'develop' into rahul_feedback 2025-03-28 09:47:28 -07:00
Bhavin Patel cb9655f299 Merge pull request #3424 from splunk/default_match_lookup
Removing default match from lookups
2025-03-28 09:47:15 -07:00
Bhavin Patel e6cc21b27a Merge branch 'develop' into rahul_feedback 2025-03-28 09:31:05 -07:00
Bhavin Patel ae32bcbb9e update dd 2025-03-28 09:30:52 -07:00
Lou Stella 70504b7e04 Merge branch 'develop' into default_match_lookup 2025-03-28 11:25:44 -05:00
Bhavin Patel 05e1b1b414 Merge branch 'develop' into win_sus_service_fix 2025-03-28 09:25:30 -07:00
patel-bhavin b3be9906eb Updated TAs 2025-03-28 06:58:23 +00:00
Bhavin Patel c7083d9107 Merge branch 'develop' into vanhelsing 2025-03-27 17:54:24 -07:00
pyth0n1c 580a0873f2 Merge branch 'develop' into output_normalization_endpoint 2025-03-27 14:53:31 -07:00
pyth0n1c 8d5975884c Merge pull request #3430 from splunk/cisco_ai
bug in cisco detection
2025-03-27 14:52:57 -07:00