Commit Graph

25709 Commits

Author SHA1 Message Date
Bhavin Patel 02967574c4 Merge pull request #3329 from splunk/inspect_stacktype
upating appinspect command
2025-02-12 16:04:46 -08:00
Bhavin Patel c124468ab7 Merge branch 'develop' into inspect_stacktype 2025-02-12 15:53:48 -08:00
research-bot 903bfe6de5 upating appinspect command 2025-02-12 15:41:03 -08:00
Bhavin Patel 3aef81e0e1 Merge pull request #3327 from splunk/slack_change
Slack link change
2025-02-12 12:41:32 -08:00
Lou Stella c0a5ff84bd Merge branch 'develop' into slack_change 2025-02-12 12:33:14 -06:00
ljstella 529121c01d mend 2025-02-12 12:32:33 -06:00
ljstella 19242f51b9 Reword README 2025-02-12 12:31:34 -06:00
ljstella 0954e0c1a0 Slack link change 2025-02-12 12:08:17 -06:00
Bhavin Patel 5cabf43635 Merge pull request #3275 from splunk/rdp_brute
RDP bruteforce - production!
2025-02-11 10:27:04 -08:00
Bhavin Patel 471b49044f version
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-02-11 10:05:52 -08:00
Bhavin Patel a7cc4a8602 Merge branch 'develop' into rdp_brute 2025-02-11 10:04:33 -08:00
Bhavin Patel 15d12b81ee Update detections/network/windows_remote_desktop_network_bruteforce_attempt.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-02-11 10:04:24 -08:00
Bhavin Patel 8e0c230a81 Update detections/deprecated/remote_desktop_network_bruteforce.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-02-11 10:03:58 -08:00
Bhavin Patel 59b99a0974 Merge pull request #3280 from nterl0k/nterl0k-t1114.003-o365-transport-rule-change
Nterl0k - T1114.003 O365 Transport Rule Changed
2025-02-11 08:59:31 -08:00
Bhavin Patel f3e0d875e0 Merge branch 'develop' into nterl0k-t1114.003-o365-transport-rule-change 2025-02-11 08:42:28 -08:00
Bhavin Patel 25af0925e6 rba message 2025-02-11 08:41:18 -08:00
Bhavin Patel 56c4d19ea1 Merge pull request #3291 from splunk/analytics_enhancement
analytics_enhancement
2025-02-10 14:22:26 -08:00
Bhavin Patel 0468dff0a3 Merge branch 'develop' into analytics_enhancement 2025-02-10 14:02:47 -08:00
research-bot 15ab58b798 updating descirption 2025-02-10 14:02:05 -08:00
tccontre b09110908d analytics_enhancement 2025-02-10 09:43:20 +01:00
tccontre 51ae906f15 analytics_enhancement 2025-02-10 09:39:53 +01:00
tccontre 67844bec4e analytics_enhancement 2025-02-10 09:36:32 +01:00
Bhavin Patel 9dc252d5bb Merge pull request #3272 from nterl0k/nterl0k-t1213.002-sus-sharepoint-search
Nterl0k - T1213.002 Sus SharePoint Search
2025-02-07 10:32:38 -08:00
Bhavin Patel 5ee9bf7d69 Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search 2025-02-07 10:16:55 -08:00
tccontre 1ed454b5bc analytics_enhancement 2025-02-07 09:56:32 +01:00
tccontre 153871c33f analytics_enhancement 2025-02-07 09:53:03 +01:00
tccontre f33a18e9cf analytics_enhancement 2025-02-07 09:49:06 +01:00
Bhavin Patel 3eaad9a5cd Merge pull request #3312 from nterl0k/nterl0k-rmm-story-update-1
Nterl0k - RMM Story and Detection Update, Again
2025-02-06 12:51:34 -08:00
Br3akp0int abd24d63bc Update windows_security_and_backup_services_stop.yml 2025-02-06 18:59:01 +01:00
Br3akp0int 636e63d492 Update windows_driver_load_non_standard_path.yml 2025-02-06 17:42:14 +01:00
Br3akp0int f97787306f Update suspicious_driver_loaded_path.yml 2025-02-06 17:02:59 +01:00
Br3akp0int 2f48e04006 Merge branch 'develop' into analytics_enhancement 2025-02-06 16:58:21 +01:00
Steven Dick 9658514c13 Update remote_monitoring_and_management_software.yml 2025-02-06 08:24:08 -05:00
Steven Dick 30edc65d04 Update remote_monitoring_and_management_software.yml 2025-02-06 08:18:27 -05:00
Steven Dick 911ebe61fd Update remote_monitoring_and_management_software.yml 2025-02-06 08:18:05 -05:00
Steven Dick ef5eca5bd1 Update detect_remote_access_software_usage_dns.yml 2025-02-06 08:07:31 -05:00
Steven Dick f5160eba6f Update detect_remote_access_software_usage_traffic.yml 2025-02-06 08:06:29 -05:00
Steven Dick 8d3da80557 Update detect_remote_access_software_usage_dns.yml 2025-02-06 08:05:27 -05:00
Steven Dick 41c92476b9 Update detect_remote_access_software_usage_url.yml 2025-02-06 08:04:38 -05:00
Steven Dick 0885f557bb Update detect_remote_access_software_usage_file.yml 2025-02-06 08:03:56 -05:00
Steven Dick f4a78d9f60 Update detect_remote_access_software_usage_fileinfo.yml 2025-02-06 08:03:25 -05:00
Steven Dick b85aacf75f Update detect_remote_access_software_usage_registry.yml 2025-02-06 08:02:38 -05:00
Steven Dick 778d7fa7cd Update detect_remote_access_software_usage_process.yml 2025-02-06 08:01:53 -05:00
Steven Dick 38af78103f Update detect_remote_access_software_usage_fileinfo.yml 2025-02-06 08:00:27 -05:00
Steven Dick dea4448a4f Update detect_remote_access_software_usage_file.yml 2025-02-06 07:58:47 -05:00
Steven Dick 7773664924 Update detect_remote_access_software_usage_url.yml 2025-02-06 07:57:46 -05:00
Steven Dick 2447329ea9 Update detect_remote_access_software_usage_dns.yml 2025-02-06 07:56:12 -05:00
Steven Dick db40375a6b Update detect_remote_access_software_usage_traffic.yml 2025-02-06 07:55:50 -05:00
Steven Dick 8b0bf13a10 Update detect_remote_access_software_usage_dns.yml 2025-02-06 07:53:56 -05:00
Steven Dick d73c82d75f Add files via upload 2025-02-06 07:53:20 -05:00