Commit Graph

291 Commits

Author SHA1 Message Date
Bhavin Patel 49d75bbc36 Merge branch 'develop' into firewall_win_events 2025-04-03 10:44:21 -07:00
Bhavin Patel 6b1ad9369a revert powershell change and use fillnull 2025-04-03 09:10:34 -07:00
Bhavin Patel 70a04d7ca0 Merge branch 'develop' into firewall_win_events 2025-04-02 13:23:42 -07:00
Bhavin Patel 3bf27db466 updating data source and search since Path is not availble in this dataset 2025-04-02 12:58:26 -07:00
Bhavin Patel c85370b142 Merge branch 'develop' into firewall_win_events 2025-04-01 12:44:49 -07:00
Teoderick Contreras 0fd302beb5 firewall_win_events 2025-04-01 09:50:11 +02:00
Patrick Bareiss 7541027f8e Merge branch 'develop' into output_normalization_endpoint 2025-04-01 09:41:58 +02:00
Bhavin Patel 26c1b2eb30 Update linux_secure.yml 2025-03-28 09:51:59 -07:00
patel-bhavin b3be9906eb Updated TAs 2025-03-28 06:58:23 +00:00
Bhavin Patel 20256391ee updating a new detection 2025-03-27 10:45:17 -07:00
Bhavin Patel f14fd8dc50 Merge branch 'develop' into output_normalization_endpoint 2025-03-27 10:23:42 -07:00
Bhavin Patel 76ef391ac3 updating title to full name 2025-03-26 12:04:02 -07:00
Bhavin Patel 1e1700cd4d Merge branch 'develop' into output_normalization_endpoint 2025-03-26 10:04:43 -07:00
Bhavin Patel 09f12546fb Merge branch 'develop' into output_normalization_o365 2025-03-25 10:42:52 -07:00
ljstella 843ab78068 Revert linux TA 2025-03-25 09:46:21 -05:00
patel-bhavin 5886f46ba5 Updated TAs 2025-03-25 06:58:01 +00:00
Bhavin Patel 4e537d286a Merge branch 'develop' into output_normalization_endpoint 2025-03-24 15:04:33 -07:00
Teoderick Contreras 1bf9bd3eb3 firewall_win_events 2025-03-21 13:42:40 +01:00
Bhavin Patel 753cf9e3f5 Update linux_secure.yml 2025-03-20 09:42:10 -07:00
patel-bhavin d3f6dc856d Updated TAs 2025-03-20 06:58:09 +00:00
Patrick Bareiss 641c590df7 Merge branch 'develop' into output_normalization_endpoint 2025-03-19 15:10:33 +01:00
P4T12ICK f243d22f61 Merge branch 'develop' into output_normalization_o365 2025-03-19 15:02:08 +01:00
delgado-jacob 4b70500f07 Merge remote-tracking branch 'origin/datasource_enrichment' into datasource_enrichment 2025-03-18 14:29:50 -07:00
delgado-jacob 6488af7c57 Add Zeek TA, fix detection source list 2025-03-18 14:29:30 -07:00
Bhavin Patel ebe5db35ae Merge branch 'develop' into datasource_enrichment 2025-03-18 12:55:17 -07:00
delgado-jacob da5c9b9bbd fix separator_value field 2025-03-18 11:37:35 -07:00
Patrick Bareiss 3122cbbc8b output improvements 2025-03-18 12:56:30 +01:00
P4T12ICK 029788ae05 Merge branch 'develop' into output_normalization_o365 2025-03-18 08:09:11 +01:00
delgado-jacob 53b1928512 normalize quotes 2025-03-17 17:07:03 -07:00
delgado-jacob bb134be861 Merge remote-tracking branch 'upstream/develop' into datasource_enrichment 2025-03-17 17:04:08 -07:00
Patrick Bareiss 136df93521 Merge branch 'develop' into output_normalization_o365 2025-03-17 19:33:08 +01:00
Bhavin Patel cfaa0320a8 Merge branch 'develop' into auto-ta-update-204 2025-03-17 11:29:39 -07:00
Patrick Bareiss a0d8dff5c4 O365 output normalization 2025-03-17 19:29:23 +01:00
Patrick Bareiss 1120cea9a0 Improve data source validation 2025-03-17 12:24:08 +01:00
Bhavin Patel e49f84d06d fixes 2025-03-14 09:47:06 -07:00
Patrick Bareiss a7f5db9f55 Merge branch 'develop' into output_normalization_endpoint 2025-03-14 14:05:39 +01:00
Patrick Bareiss ca245715d4 bug fix 2025-03-14 11:55:15 +01:00
patel-bhavin 09d1d1c02f Updated TAs 2025-03-14 06:57:50 +00:00
Bhavin Patel 34dc8eb775 Merge branch 'develop' into output_normalization_azure_ad 2025-03-13 12:08:26 -07:00
Bhavin Patel 9b112cabc6 Merge branch 'develop' into output_normalization_aws 2025-03-13 11:10:04 -07:00
Patrick Bareiss 47fdfe1fa7 Merge branch 'develop' into output_normalization_endpoint 2025-03-13 14:31:54 +01:00
Patrick Bareiss 00e78ab666 output normalisation 2025-03-13 14:31:23 +01:00
P4T12ICK 348799a754 Merge branch 'develop' into output_normalization_azure_ad 2025-03-13 11:53:09 +01:00
Patrick Bareiss abf3c5f1d9 improvements 2025-03-13 11:49:06 +01:00
Patrick Bareiss 67dff5120a Merge branch 'develop' into output_normalization_endpoint 2025-03-13 09:22:06 +01:00
Bhavin Patel dad3892103 Merge branch 'develop' into output_normalization_azure_ad 2025-03-12 09:54:45 -07:00
Patrick Bareiss 4095ffb916 output normalization 2025-03-12 09:38:21 +01:00
Steven Dick 5060b8cefd Update windows_event_log_security_4700.yml 2025-03-11 22:59:08 -04:00
Steven Dick 8295f6139b Add files via upload 2025-03-11 22:56:06 -04:00
Patrick Bareiss f202520e17 output normalization endpoint 2025-03-11 15:24:12 +01:00