446c75673b
Branch was auto-updated.
2023-05-01 15:27:37 -07:00
3b78c2324d
Merge pull request #2650 from splunk/2607_duplicate
...
awesome community contributions! 🥇
2023-05-01 15:27:06 -07:00
0599c75f5c
Branch was auto-updated.
2023-05-01 13:09:13 -07:00
8352860f98
Branch was auto-updated.
2023-05-01 13:08:59 -07:00
364bcb05d5
Merge pull request #2642 from splunk/impackets
...
broken out Impacket - smbexec, wmiexec
2023-05-01 13:08:42 -07:00
33fc0e624c
Branch was auto-updated.
2023-05-01 12:47:44 -07:00
06784d4ec1
Branch was auto-updated.
2023-05-01 12:47:24 -07:00
fdb6e3bbc2
Branch was auto-updated.
2023-05-01 12:47:23 -07:00
866397b62d
Merge pull request #2639 from splunk/dep_mimi
...
Deprecate : Detect Mimikatz Using Loaded Images
2023-05-01 12:47:05 -07:00
11c7d9aebb
one more PR
2023-05-01 12:41:25 -07:00
5e614b8bf7
Branch was auto-updated.
2023-05-01 12:37:32 -07:00
57330c02bb
Branch was auto-updated.
2023-05-01 12:37:31 -07:00
d43fc01b30
Branch was auto-updated.
2023-05-01 12:37:11 -07:00
f2182749eb
Branch was auto-updated.
2023-05-01 12:37:10 -07:00
c1facdf6a6
Merge pull request #2591 from splunk/dispatch_dynamic_analysis
...
dispatch_dynamic_analysis
2023-05-01 12:36:50 -07:00
fcf36975ff
Branch was auto-updated.
2023-05-01 12:25:26 -07:00
7e0ea72c4e
Branch was auto-updated.
2023-05-01 12:25:25 -07:00
a9982acb05
Branch was auto-updated.
2023-05-01 12:25:09 -07:00
16f6a69eb9
Branch was auto-updated.
2023-05-01 12:25:08 -07:00
db08cf28cd
Branch was auto-updated.
2023-05-01 12:25:07 -07:00
e97f18f13e
Merge pull request #2615 from splunk/rename-dynamic-to-dispatch
...
Rename dynamic to dispatch
2023-05-01 12:24:25 -07:00
04538ec415
Branch was auto-updated.
2023-05-01 12:22:31 -07:00
97fa0546ff
Branch was auto-updated.
2023-05-01 12:22:30 -07:00
c96a57ee45
Branch was auto-updated.
2023-05-01 12:22:15 -07:00
f3249f76bb
Branch was auto-updated.
2023-05-01 12:22:14 -07:00
e7f4568596
Branch was auto-updated.
2023-05-01 12:22:13 -07:00
92f4b42ca7
Branch was auto-updated.
2023-05-01 12:22:12 -07:00
5979f3257c
Merge pull request #2618 from splunk/splunk_attack_analyzer_playbook
...
splunk_attack_analyzer_playbook
2023-05-01 12:21:55 -07:00
504cab4585
minor yaml
2023-05-01 12:19:27 -07:00
df0fa82b13
minor
2023-05-01 12:09:30 -07:00
6a5b6acea5
carry over
2023-05-01 12:07:20 -07:00
e5c96b4329
Branch was auto-updated.
2023-05-01 11:59:15 -07:00
2a72972b6f
Branch was auto-updated.
2023-05-01 11:59:10 -07:00
0e799764f5
Branch was auto-updated.
2023-05-01 11:59:09 -07:00
b875cfdab0
Branch was auto-updated.
2023-05-01 11:59:04 -07:00
6f2ae390a3
Branch was auto-updated.
2023-05-01 11:58:59 -07:00
d77dd1311a
Branch was auto-updated.
2023-05-01 11:58:58 -07:00
3907ef5572
Merge pull request #2635 from splunk/schedule_mltk
...
fix MLTK scheduling
2023-05-01 14:58:41 -04:00
ffbdf2a74b
Branch was auto-updated.
2023-05-01 11:44:46 -07:00
337766f904
Branch was auto-updated.
2023-05-01 11:44:45 -07:00
0279d259bd
Branch was auto-updated.
2023-05-01 11:44:42 -07:00
9c0bf31a86
Branch was auto-updated.
2023-05-01 11:44:36 -07:00
073a5c4f2b
Branch was auto-updated.
2023-05-01 11:44:30 -07:00
5baff0b09a
Branch was auto-updated.
2023-05-01 11:44:29 -07:00
a04dcd047d
Branch was auto-updated.
2023-05-01 11:44:23 -07:00
c22fc6b876
Merge pull request #2636 from splunk/RIR
...
Create active_directory_lateral_movement_identified.yml
2023-05-01 11:44:04 -07:00
de98be7dd3
Create steal_or_forge_authentication_certificates_behavior_identified.yml
2023-05-01 11:36:38 -06:00
6542f1afa3
Fixed reference to different playbook.
2023-04-29 16:56:39 -05:00
b1688fd2ec
Made required changes. See description.
...
Playbook is failing when only some reputation results were returned.
These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.
2023-04-29 16:43:09 -05:00
5c3d8b4125
Rename playbooks and minor grammatical changes in .yml
2023-04-29 16:06:17 -05:00
srv-rr-gh-researchbt