 Bhavin Patel
|
3826785ee2
|
updating eval
|
2025-07-07 11:49:21 -07:00 |
|
|
Bhavin Patel
|
de55408d51
|
Merge pull request #3544 from splunk/cs_events
Cs events
|
2025-07-07 10:45:52 -07:00 |
|
|
Bhavin Patel
|
5b825ab466
|
Merge branch 'develop' into cs_events
|
2025-07-07 10:09:37 -07:00 |
|
|
pyth0n1c
|
16653a331f
|
Merge pull request #3593 from splunk/contentctl_5_5_7
bump to contentctl 5.5.7
|
2025-07-07 09:37:36 -07:00 |
|
|
pyth0n1c
|
67ed6458fb
|
bump to contentctl 5.5.7
|
2025-07-07 09:34:46 -07:00 |
|
|
Bhavin Patel
|
4c7219f7e9
|
Merge pull request #3586 from 0xC0FFEEEE/bec_rule_update
O365 BEC Email Hiding Rule Created - Add support for Set-InboxRule
|
2025-07-07 08:23:00 -07:00 |
|
|
Bhavin Patel
|
ba171477f3
|
Merge branch 'develop' into bec_rule_update
|
2025-07-07 08:15:49 -07:00 |
|
|
Bhavin Patel
|
254d92ebc9
|
Merge branch 'develop' into cs_events
|
2025-07-07 07:58:47 -07:00 |
|
|
Bhavin Patel
|
b39292c744
|
Merge pull request #3589 from sventec/refactor-attacker_tools_on_endpoint
refactor: attacker_tools_on_endpoint performance
|
2025-07-07 07:58:23 -07:00 |
|
|
Bhavin Patel
|
b67fb01202
|
Merge branch 'develop' into refactor-attacker_tools_on_endpoint
|
2025-07-07 07:56:47 -07:00 |
|
|
Nasreddine Bencherchali
|
e12035e391
|
Merge pull request #3590 from splunk/snort_description
updating search description
|
2025-07-05 12:15:56 +02:00 |
|
|
Nasreddine Bencherchali
|
c1deef27df
|
Merge branch 'develop' into snort_description
|
2025-07-04 18:19:40 +02:00 |
|
|
Nasreddine Bencherchali
|
58627bd35e
|
Merge pull request #3592 from splunk/auto-ta-update-316
Automated Splunk TA Update 316
|
2025-07-04 18:18:47 +02:00 |
|
|
patel-bhavin
|
5ea6155d96
|
Updated TAs
|
2025-07-04 07:00:30 +00:00 |
|
|
sventec
|
7723704e17
|
add author tag
|
2025-07-03 19:32:26 -04:00 |
|
|
Bhavin Patel
|
e6e3145dc0
|
updating description
|
2025-07-03 14:26:07 -07:00 |
|
|
Bhavin Patel
|
65a097a8cc
|
Merge branch 'develop' into cs_events
|
2025-07-03 10:36:27 -07:00 |
|
|
Bhavin Patel
|
f04d3879c7
|
Merge branch 'develop' into bec_rule_update
|
2025-07-03 10:35:17 -07:00 |
|
|
sventec
|
1132d0d4ec
|
refactor: attacker_tools_on_endpoint performance
refactor attacker_tools_on_endpoint to improve search performance, using
the same paradigm as detect_remote_access_software_usage_process.
|
2025-07-03 10:37:56 -04:00 |
|
|
0xC0FFEEEE
|
a278863c13
|
remove unneccesary json normalization
|
2025-07-03 09:17:50 +01:00 |
|
|
Bhavin Patel
|
287b0d8d60
|
Merge pull request #3556 from splunk/linux_auditd_daemon_update
linux_auditd_daemon_update
|
2025-07-02 16:48:03 -07:00 |
|
|
Bhavin Patel
|
cd073f9273
|
minor fixes
|
2025-07-02 12:25:53 -07:00 |
|
|
Bhavin Patel
|
130d322497
|
make it a TTP and adding $ to the message
|
2025-07-02 12:19:02 -07:00 |
|
|
Teoderick Contreras
|
9f7b6e36cd
|
linux_auditd_daemon_update
|
2025-07-02 09:23:14 +02:00 |
|
|
Bhavin Patel
|
cdfc690acd
|
remove detections
|
2025-07-01 14:53:45 -07:00 |
|
|
Bhavin Patel
|
1fb8c8e155
|
adding a new data source file
|
2025-07-01 14:53:16 -07:00 |
|
|
Bhavin Patel
|
4d846877d5
|
Merge branch 'develop' into cs_events
|
2025-07-01 14:20:59 -07:00 |
|
|
Bhavin Patel
|
983b3b9263
|
updating SPL syntax and comment the inputlookup for testing
|
2025-07-01 14:17:53 -07:00 |
|
|
Bhavin Patel
|
6b8761b5a6
|
comment out manual test for unit-testing
|
2025-07-01 13:27:26 -07:00 |
|
|
Bhavin Patel
|
7a4699098b
|
updating formatting of spl and update risk_message as it is not present in the spl
|
2025-07-01 13:26:21 -07:00 |
|
|
Bhavin Patel
|
e09fcea176
|
Merge branch 'develop' into linux_auditd_daemon_update
|
2025-07-01 10:55:46 -07:00 |
|
|
0xC0FFEEEE
|
3ba50a2d97
|
Add support for Set-InboxRule
|
2025-07-01 16:42:06 +01:00 |
|
|
Bhavin Patel
|
e9af0c988d
|
Merge pull request #3584 from splunk/diskwiper
diskwiper
|
2025-06-30 14:00:05 -07:00 |
|
|
Bhavin Patel
|
7bce976e2c
|
Merge branch 'develop' into diskwiper
|
2025-06-30 12:55:40 -07:00 |
|
|
Bhavin Patel
|
71a57cdc64
|
Merge pull request #3582 from splunk/manul_Test
Manual Test - Potential password in username
|
2025-06-30 12:27:36 -07:00 |
|
|
Bhavin Patel
|
242cf2b41e
|
Merge branch 'develop' into diskwiper
|
2025-06-30 11:59:41 -07:00 |
|
|
Bhavin Patel
|
ccc1946e64
|
Update potential_password_in_username.yml
add JIRA
|
2025-06-30 11:58:48 -07:00 |
|
|
Bhavin Patel
|
e876b8dee5
|
Merge branch 'develop' into manul_Test
|
2025-06-30 10:27:53 -07:00 |
|
|
Lou Stella
|
422ce34414
|
Merge pull request #3580 from splunk/auto-ta-update-307
Automated Splunk TA Update 307
|
2025-06-27 09:01:30 -05:00 |
|
|
Teoderick Contreras
|
c4982909ad
|
diskwiper
|
2025-06-27 09:44:32 +02:00 |
|
|
Teoderick Contreras
|
4d9f9be0d6
|
diskwiper
|
2025-06-27 09:40:18 +02:00 |
|
|
Bhavin Patel
|
e8c046ac1c
|
update ctl version
|
2025-06-26 12:56:41 -07:00 |
|
|
Bhavin Patel
|
1f92fa7b7e
|
tests section
|
2025-06-26 11:32:00 -07:00 |
|
|
Bhavin Patel
|
94b0321bbc
|
test
|
2025-06-26 11:30:30 -07:00 |
|
|
Bhavin Patel
|
f5c8bb352d
|
adding manual_Test
|
2025-06-26 11:28:56 -07:00 |
|
|
Bryan Pluta
|
6280ad9331
|
search and drilldown updates
|
2025-06-26 08:08:25 -05:00 |
|
|
Lou Stella
|
48b8c01807
|
Merge branch 'develop' into auto-ta-update-307
|
2025-06-26 07:48:27 -05:00 |
|
|
Teoderick Contreras
|
f757a996fa
|
linux_auditd_daemon_update
|
2025-06-26 10:45:53 +02:00 |
|
|
Teoderick Contreras
|
5f2408a0d5
|
linux_auditd_daemon_update
|
2025-06-26 10:42:07 +02:00 |
|
|
Bhavin Patel
|
33cb1ed7b0
|
Merge branch 'develop' into cs_events
|
2025-06-25 15:22:43 -07:00 |
|