Commit Graph

20153 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt 07aee1ec2a Branch was auto-updated. 2023-05-08 08:36:31 -07:00
P4T12ICK 34f4a5dceb Merge pull request #2595 from splunk/TR-2903
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00
patel-bhavin a885bbb300 filter for aws 2023-05-04 17:16:57 -07:00
patel-bhavin ee2c44aba9 aws correlation 2023-05-04 17:10:36 -07:00
patel-bhavin a442e23cf8 updating risk 2023-05-04 16:21:32 -07:00
patel-bhavin e682f813e6 updates 2023-05-04 15:46:04 -07:00
Lou Stella d220cf41a5 Addressed Kelby's Findings 2023-05-04 14:17:57 -05:00
srv-rr-gh-researchbt 49c46cdb47 Branch was auto-updated. 2023-05-03 12:09:53 -07:00
srv-rr-gh-researchbt 367e116829 Branch was auto-updated. 2023-05-03 12:09:49 -07:00
Bhavin Patel 0c76f0139e Merge pull request #2663 from splunk/revert-2662-deprecate_pth
Revert "deprecate Pth"
2023-05-03 12:09:28 -07:00
patel-bhavin 8ef2a73122 mionr 2023-05-03 11:58:17 -07:00
patel-bhavin 63abc37beb deprecated note update 2023-05-03 11:57:27 -07:00
Bhavin Patel 444dde5d66 Revert "deprecate Pth" 2023-05-03 11:51:24 -07:00
srv-rr-gh-researchbt 5f44b4ca50 Branch was auto-updated. 2023-05-03 11:50:27 -07:00
srv-rr-gh-researchbt 53df5cebe0 Branch was auto-updated. 2023-05-03 11:50:23 -07:00
Bhavin Patel 799a636a73 Merge pull request #2662 from splunk/deprecate_pth
deprecate Pth
2023-05-03 11:50:06 -07:00
patel-bhavin ae89db26ea deprecate this 2023-05-03 11:44:31 -07:00
srv-rr-gh-researchbt afdfb84834 Branch was auto-updated. 2023-05-03 09:41:15 -07:00
srv-rr-gh-researchbt 524547ab82 Branch was auto-updated. 2023-05-03 09:41:09 -07:00
Bhavin Patel 9a442a3bd1 Merge pull request #2648 from splunk/ba_detection_spec
Add BA detection schema and validator
2023-05-03 09:41:01 -07:00
Bhavin Patel 9f120ad765 Merge pull request #2647 from splunk/bug_fixes_sec_cont_4
Improve Detection Validation
2023-05-03 09:40:39 -07:00
P4T12ICK 44b98b61c1 improved detections 2023-05-03 15:13:10 +02:00
srv-rr-gh-researchbt a35648eb74 Branch was auto-updated. 2023-05-02 15:23:35 -07:00
srv-rr-gh-researchbt 2ee69fb765 Branch was auto-updated. 2023-05-02 15:23:34 -07:00
srv-rr-gh-researchbt fd50f2738b Branch was auto-updated. 2023-05-02 15:23:32 -07:00
srv-rr-gh-researchbt 50e869cb47 Branch was auto-updated. 2023-05-02 15:23:29 -07:00
research bot 9b995551aa Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-05-02 22:23:11 +00:00
srv-rr-gh-researchbt ba59b5ff8a Branch was auto-updated. 2023-05-02 15:02:51 -07:00
srv-rr-gh-researchbt 4aac79147d Branch was auto-updated. 2023-05-02 15:02:47 -07:00
srv-rr-gh-researchbt 0e5329d54c Branch was auto-updated. 2023-05-02 15:02:45 -07:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
Bhavin Patel c80c0aecec Merge pull request #2661 from splunk/security_content_4_phase_2
SmokeTest part 2
v4.1.0
2023-05-02 15:02:17 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
pyth0n1c aac32ae63c Update detection-smoketesting.yml
Update the smoketest workflow so
that it only runs nightly instead of
on every push.  This workflow takes
a very long time to run (about 1 hour)
so we don't want to run it all the time.
2023-05-02 14:48:17 -07:00
pyth0n1c 5912e876a8 Update windows_ad_domain_replication_acl_addition.yml
Revert syntax changes so that this search 
continues to fail smoketesting. This way, we
know to come back and update it.
2023-05-02 14:47:11 -07:00
pyth0n1c 6323c28e96 Rename detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml to detect_suspicious_processnames_using_a_pretrained_model_in_dsdl.yml
Updated name of filter and name of search file.
Did not touch the apply or name of the search
because these two run other lookups + we cannot
change the name of a search once it has been deployed.
2023-05-02 14:45:57 -07:00
srv-rr-gh-researchbt 283f7b32f2 Branch was auto-updated. 2023-05-02 12:58:45 -07:00
srv-rr-gh-researchbt c450eb5b28 Branch was auto-updated. 2023-05-02 12:58:43 -07:00
srv-rr-gh-researchbt 30b88e1862 Branch was auto-updated. 2023-05-02 12:58:41 -07:00
srv-rr-gh-researchbt e705175a63 Branch was auto-updated. 2023-05-02 12:58:37 -07:00
Bhavin Patel f0f5feafd1 Merge pull request #2658 from splunk/do_not_step_on_redline3
do_not_step_on_redline3
2023-05-02 12:58:16 -07:00
patel-bhavin 68748537d9 minor fixes 2023-05-02 12:55:11 -07:00
srv-rr-gh-researchbt d60cb0afd1 Branch was auto-updated. 2023-05-02 12:49:16 -07:00
srv-rr-gh-researchbt ebfee73198 Branch was auto-updated. 2023-05-02 12:49:15 -07:00
srv-rr-gh-researchbt 9226eb8ad1 Branch was auto-updated. 2023-05-02 12:49:10 -07:00
srv-rr-gh-researchbt 78386bf3e9 Branch was auto-updated. 2023-05-02 12:49:08 -07:00
srv-rr-gh-researchbt b6af5847b1 Branch was auto-updated. 2023-05-02 12:49:06 -07:00
Bhavin Patel d3f8067e04 Merge pull request #2645 from splunk/do_not_step_on_the_redline2
do_not_step_on_the_redline2
2023-05-02 12:48:37 -07:00
patel-bhavin e985d2207d minor fixes 2023-05-02 12:45:47 -07:00
dependabot[bot] 12b6c6e19b Merge pull request #2652 from splunk/dependabot/pip/psutil-5.9.5 2023-05-02 17:42:11 +00:00