25756 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Bhavin Patel	0392bfe9c0	Update cisco_secure_application_alerts.yml	2025-02-13 11:48:16 -08:00
Bhavin Patel	690874895b	Merge branch 'develop' into app_dynamics_alerts	2025-02-13 11:15:10 -08:00
Bhavin Patel	bc334de270	Merge pull request #3283 from nterl0k/nterl0k-t1200-sysmon-usb-use-execution ... Nterl0k - T1200 - Are you down with USB ?	2025-02-13 09:58:26 -08:00
Bhavin Patel	425daf1031	Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution	2025-02-13 09:26:11 -08:00
Bhavin Patel	e9a9b6adea	Merge pull request #3322 from nterl0k/nterl0k-rmm-lookup-update-20250210 ... Nterl0k - RMM Lookup Update 20250210	2025-02-13 09:01:31 -08:00
Bhavin Patel	39a5e611f4	Merge branch 'develop' into nterl0k-rmm-lookup-update-20250210	2025-02-13 08:41:54 -08:00
Bhavin Patel	e1b7aa4470	Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution	2025-02-13 08:24:33 -08:00
Bhavin Patel	0786bf242e	Merge pull request #3331 from splunk/labeler-update ... Add baselines to labeler	2025-02-13 08:23:41 -08:00
ljstella	057a3e4669	Add baselines to labeler	2025-02-13 09:26:43 -06:00
Bhavin Patel	e8c660f6a5	Merge pull request #3323 from splunk/remove_type_and_subtype ... Clean up MITRE Tagging	2025-02-12 16:12:42 -08:00
pyth0n1c	de03cdd631	Merge branch 'develop' into remove_type_and_subtype	2025-02-12 16:09:20 -08:00
Bhavin Patel	b968f68437	Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution	2025-02-12 16:05:31 -08:00
Bhavin Patel	02967574c4	Merge pull request #3329 from splunk/inspect_stacktype ... upating appinspect command	2025-02-12 16:04:46 -08:00
pyth0n1c	18fea98e80	Merge branch 'develop' into remove_type_and_subtype	2025-02-12 16:04:25 -08:00
Bhavin Patel	c124468ab7	Merge branch 'develop' into inspect_stacktype	2025-02-12 15:53:48 -08:00
research-bot	903bfe6de5	upating appinspect command	2025-02-12 15:41:03 -08:00
Bhavin Patel	74cc88f29a	Merge branch 'develop' into nterl0k-rmm-lookup-update-20250210	2025-02-12 15:36:34 -08:00
Bhavin Patel	1d30f2f983	Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution	2025-02-12 12:42:45 -08:00
Bhavin Patel	3aef81e0e1	Merge pull request #3327 from splunk/slack_change ... Slack link change	2025-02-12 12:41:32 -08:00
research-bot	af6077f5f0	updating spl	2025-02-12 12:25:10 -08:00
Lou Stella	c0a5ff84bd	Merge branch 'develop' into slack_change	2025-02-12 12:33:14 -06:00
ljstella	529121c01d	mend	2025-02-12 12:32:33 -06:00
ljstella	19242f51b9	Reword README	2025-02-12 12:31:34 -06:00
ljstella	0954e0c1a0	Slack link change	2025-02-12 12:08:17 -06:00
Steven Dick	370db3a337	Update and rename windows_detect_wpdbusenum_registry_key_modification.yml to windows_wpdbusenum_registry_key_modification.yml	2025-02-12 08:08:54 -05:00
Steven Dick	90865c04a3	Update and rename windows_detect_usbstor_registry_key_modification.yml to windows_usbstor_registry_key_modification.yml	2025-02-12 08:08:19 -05:00
Steven Dick	27c097d5de	Update and rename windows_detect_process_executed_from_removable_media.yml to windows_process_executed_from_removable_media.yml	2025-02-12 08:07:45 -05:00
Steven Dick	68d85a24e6	Update windows_detect_process_executed_from_removable_media.yml	2025-02-12 08:03:17 -05:00
pyth0n1c	b9f5735bd3	Merge branch 'develop' into remove_type_and_subtype	2025-02-11 15:38:08 -08:00
Bhavin Patel	5cabf43635	Merge pull request #3275 from splunk/rdp_brute ... RDP bruteforce - production!	2025-02-11 10:27:04 -08:00
Bhavin Patel	471b49044f	version ... Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>	2025-02-11 10:05:52 -08:00
Bhavin Patel	a7cc4a8602	Merge branch 'develop' into rdp_brute	2025-02-11 10:04:33 -08:00
Bhavin Patel	15d12b81ee	Update detections/network/windows_remote_desktop_network_bruteforce_attempt.yml ... Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>	2025-02-11 10:04:24 -08:00
Bhavin Patel	8e0c230a81	Update detections/deprecated/remote_desktop_network_bruteforce.yml ... Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>	2025-02-11 10:03:58 -08:00
Bhavin Patel	59b99a0974	Merge pull request #3280 from nterl0k/nterl0k-t1114.003-o365-transport-rule-change ... Nterl0k - T1114.003 O365 Transport Rule Changed	2025-02-11 08:59:31 -08:00
Bhavin Patel	f3e0d875e0	Merge branch 'develop' into nterl0k-t1114.003-o365-transport-rule-change	2025-02-11 08:42:28 -08:00
Bhavin Patel	25af0925e6	rba message	2025-02-11 08:41:18 -08:00
Bhavin Patel	56c4d19ea1	Merge pull request #3291 from splunk/analytics_enhancement ... analytics_enhancement	2025-02-10 14:22:26 -08:00
Bhavin Patel	0468dff0a3	Merge branch 'develop' into analytics_enhancement	2025-02-10 14:02:47 -08:00
research-bot	15ab58b798	updating descirption	2025-02-10 14:02:05 -08:00
Steven Dick	76ed6ac81c	Update remote_access_software.csv	2025-02-10 16:12:12 -05:00
pyth0n1c	45599e0b18	Clean up MITRE Tagging. When a type is defined, such as T1003, DO NOT allow a subtype such as T1003.001 to be defined. Remove the generic type T1003 and keep the subtype T1003.001. However, it is acceptable for a subtype to be defined or for a type to be defined separately. It is also okay for multiple subtypes to be defined.	2025-02-10 12:28:22 -08:00
Steven Dick	b60408eeba	Update remote_access_software.yml	2025-02-10 11:06:56 -05:00
Steven Dick	c79216ba57	Update remote_access_software.csv	2025-02-10 11:05:33 -05:00
tccontre	b09110908d	analytics_enhancement	2025-02-10 09:43:20 +01:00
tccontre	51ae906f15	analytics_enhancement	2025-02-10 09:39:53 +01:00
tccontre	67844bec4e	analytics_enhancement	2025-02-10 09:36:32 +01:00
Bhavin Patel	9dc252d5bb	Merge pull request #3272 from nterl0k/nterl0k-t1213.002-sus-sharepoint-search ... Nterl0k - T1213.002 Sus SharePoint Search	2025-02-07 10:32:38 -08:00
Bhavin Patel	5ee9bf7d69	Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search	2025-02-07 10:16:55 -08:00
tccontre	1ed454b5bc	analytics_enhancement	2025-02-07 09:56:32 +01:00