 Patrick Bareiss
|
41e69bd182
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-21 09:24:24 +01:00 |
|
|
Patrick Bareiss
|
3c9145b8dd
|
bug fixes
|
2025-02-21 09:21:33 +01:00 |
|
|
Bhavin Patel
|
c2eb1a26c9
|
Merge pull request #3321 from nterl0k/nterl0k-t1486-bitlocker-sus-commands
Nterl0k - T1486 BitLocker Suspicious Commands
|
2025-02-18 17:43:17 -08:00 |
|
|
Bhavin Patel
|
50c22c96c5
|
Merge branch 'develop' into nterl0k-t1486-bitlocker-sus-commands
|
2025-02-18 17:27:06 -08:00 |
|
|
Bhavin Patel
|
e11b63161c
|
Merge pull request #3344 from splunk/fix_dashboard_dropdown_match
change match to two underscores
|
2025-02-18 16:36:57 -08:00 |
|
|
pyth0n1c
|
3782565aa6
|
Merge branch 'develop' into fix_dashboard_dropdown_match
|
2025-02-18 16:30:45 -08:00 |
|
|
pyth0n1c
|
87a2970ca9
|
Merge pull request #3341 from splunk/fix_datasource_typos
Fix data_source fields on some content
|
2025-02-18 16:29:51 -08:00 |
|
|
pyth0n1c
|
2ae421d724
|
Merge branch 'develop' into fix_datasource_typos
|
2025-02-18 16:24:39 -08:00 |
|
|
Bhavin Patel
|
a33eccd846
|
wrong space
|
2025-02-18 15:34:23 -08:00 |
|
|
pyth0n1c
|
41f65e0bc7
|
change match to two underscroes
|
2025-02-18 15:26:17 -08:00 |
|
|
Bhavin Patel
|
a33941597e
|
Merge pull request #3276 from nterl0k/nterl0k-t1059-malicious-powershell-strings
Nterl0k - T1059 - Generic Malicious Powershell Strings + Lookup
|
2025-02-18 13:40:10 -08:00 |
|
|
Bhavin Patel
|
f0d6c48267
|
Merge branch 'develop' into nterl0k-t1059-malicious-powershell-strings
|
2025-02-18 13:20:11 -08:00 |
|
|
Bhavin Patel
|
ebe37bb3fa
|
Merge pull request #3342 from splunk/show_dashboards_dropdown
Show dashboard objects in dropdown
|
2025-02-18 11:48:53 -08:00 |
|
|
Bhavin Patel
|
13faf1ca7e
|
Merge branch 'develop' into show_dashboards_dropdown
|
2025-02-18 10:48:45 -08:00 |
|
|
Bhavin Patel
|
90d46c5e28
|
Merge pull request #3303 from splunk/other-updates
Update Lookups & Windows EventLog Macros
|
2025-02-18 10:40:21 -08:00 |
|
|
Bhavin Patel
|
2c7fd2925f
|
Merge branch 'develop' into other-updates
|
2025-02-18 10:37:45 -08:00 |
|
|
Bhavin Patel
|
b9de911601
|
Merge branch 'develop' into show_dashboards_dropdown
|
2025-02-18 10:16:40 -08:00 |
|
|
Bhavin Patel
|
099682f93f
|
Merge pull request #3194 from splunk/data_source_improvements_2
Data Source mapping improvements
|
2025-02-18 10:02:21 -08:00 |
|
|
pyth0n1c
|
1a7653bb26
|
fix docs link
|
2025-02-18 09:32:59 -08:00 |
|
|
Bhavin Patel
|
47c2f4fc20
|
Merge branch 'develop' into other-updates
|
2025-02-18 09:22:56 -08:00 |
|
|
Bhavin Patel
|
e2863ae378
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-18 09:03:42 -08:00 |
|
|
Bhavin Patel
|
151bbe05dc
|
Merge branch 'develop' into data_source_improvements_2
|
2025-02-18 09:02:02 -08:00 |
|
|
Bhavin Patel
|
a11c4b1655
|
Merge pull request #3306 from splunk/app_dynamics_alerts
Cisco Secure Application Alerts
|
2025-02-18 08:58:42 -08:00 |
|
|
pyth0n1c
|
8902d8c09e
|
fix datasource reference in
detection.
|
2025-02-18 08:58:19 -08:00 |
|
|
Bhavin Patel
|
3a5f6d613e
|
Merge branch 'develop' into app_dynamics_alerts
|
2025-02-18 08:30:01 -08:00 |
|
|
Bhavin Patel
|
9ae1c7acff
|
kfp
|
2025-02-18 08:13:55 -08:00 |
|
|
Patrick Bareiss
|
3563fdd417
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-18 09:38:19 +01:00 |
|
|
Patrick Bareiss
|
d03cb62686
|
Merge branch 'data_source_improvements_2' of github.com:splunk/security_content into data_source_improvements_2
|
2025-02-18 09:13:25 +01:00 |
|
|
Patrick Bareiss
|
9e588b51b9
|
Merge branch 'develop' into data_source_improvements_2
|
2025-02-18 09:08:28 +01:00 |
|
|
pyth0n1c
|
f2e7dbfbe7
|
bump versions and dates on modified detections
|
2025-02-17 15:46:23 -08:00 |
|
|
pyth0n1c
|
eabea79178
|
Show dashboard objects in dropdown
|
2025-02-17 14:37:00 -08:00 |
|
|
pyth0n1c
|
4c80dba4de
|
Fix some typos in the data_source fields. Many detections were referencing data sources that ACTUALLY exist, but by the wrong name.
|
2025-02-17 12:11:35 -08:00 |
|
|
Bhavin Patel
|
2ba144b959
|
Update cisco_secure_application_alerts.yml
|
2025-02-14 12:06:20 -08:00 |
|
|
Bhavin Patel
|
ec7faddb31
|
Merge pull request #3335 from splunk/TA-update-176
Update Crowdstrike TA
|
2025-02-14 10:52:02 -08:00 |
|
|
ljstella
|
5e0b1d66e4
|
Update crowdstrike TA
|
2025-02-14 10:06:20 -06:00 |
|
|
Steven Dick
|
0c0167e6ad
|
Merge branch 'splunk:develop' into nterl0k-t1059-malicious-powershell-strings
|
2025-02-14 09:28:34 -05:00 |
|
|
Steven Dick
|
30eba3111e
|
Update windows_powershell_script_block_with_malicious_string.yml
|
2025-02-14 09:28:18 -05:00 |
|
|
Steven Dick
|
b1ab004b15
|
Update windows_powershell_process_with_malicious_string.yml
|
2025-02-14 09:28:00 -05:00 |
|
|
Steven Dick
|
0400838214
|
Merge branch 'splunk:develop' into nterl0k-t1486-bitlocker-sus-commands
|
2025-02-14 09:14:54 -05:00 |
|
|
research-bot
|
3bb8618ac2
|
updating as per Lou's feedback
|
2025-02-13 15:57:49 -08:00 |
|
|
Bhavin Patel
|
d5f3bf613f
|
Add manual_test flag
|
2025-02-13 12:24:36 -08:00 |
|
|
Bhavin Patel
|
0392bfe9c0
|
Update cisco_secure_application_alerts.yml
|
2025-02-13 11:48:16 -08:00 |
|
|
Bhavin Patel
|
690874895b
|
Merge branch 'develop' into app_dynamics_alerts
|
2025-02-13 11:15:10 -08:00 |
|
|
Bhavin Patel
|
bc334de270
|
Merge pull request #3283 from nterl0k/nterl0k-t1200-sysmon-usb-use-execution
Nterl0k - T1200 - Are you down with USB ?
|
2025-02-13 09:58:26 -08:00 |
|
|
Bhavin Patel
|
425daf1031
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-13 09:26:11 -08:00 |
|
|
Bhavin Patel
|
e9a9b6adea
|
Merge pull request #3322 from nterl0k/nterl0k-rmm-lookup-update-20250210
Nterl0k - RMM Lookup Update 20250210
|
2025-02-13 09:01:31 -08:00 |
|
|
Bhavin Patel
|
39a5e611f4
|
Merge branch 'develop' into nterl0k-rmm-lookup-update-20250210
|
2025-02-13 08:41:54 -08:00 |
|
|
Bhavin Patel
|
e1b7aa4470
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-13 08:24:33 -08:00 |
|
|
Bhavin Patel
|
0786bf242e
|
Merge pull request #3331 from splunk/labeler-update
Add baselines to labeler
|
2025-02-13 08:23:41 -08:00 |
|
|
ljstella
|
057a3e4669
|
Add baselines to labeler
|
2025-02-13 09:26:43 -06:00 |
|