Commit Graph

27770 Commits

Author SHA1 Message Date
Bhavin Patel 47f78a4836 updting version 2025-09-30 12:13:59 -07:00
Bhavin Patel dcc0850ba3 Merge pull request #3679 from splunk/promptlock
promptlock
2025-09-29 13:54:28 -07:00
Bhavin Patel 52b42c0da9 Merge branch 'develop' into promptlock 2025-09-29 13:31:36 -07:00
Bhavin Patel 57afb6b9b7 Merge pull request #3691 from splunk/fix-issue-3690
Fix #3690
2025-09-29 13:30:41 -07:00
Bhavin Patel 55577a6e56 Merge branch 'develop' into fix-issue-3690 2025-09-29 12:57:48 -07:00
Bhavin Patel 6721794934 Update windows_process_execution_in_temp_dir.yml 2025-09-29 12:11:26 -07:00
Bhavin Patel 889a9e4dc1 Update cisco_nvm___curl_execution_with_insecure_flags.yml 2025-09-29 12:11:02 -07:00
Bhavin Patel 3784436646 Merge branch 'develop' into promptlock 2025-09-29 12:06:29 -07:00
Bhavin Patel 3514a3e979 Merge pull request #3687 from splunk/GhostRedirector
GhostRedirectors
2025-09-29 12:02:51 -07:00
Bhavin Patel 8b2056475f Merge branch 'develop' into GhostRedirector 2025-09-29 11:34:54 -07:00
Bhavin Patel 65da41c221 Merge branch 'develop' into fix-issue-3690 2025-09-29 11:20:58 -07:00
Bhavin Patel eb4400c1d1 Merge pull request #3700 from splunk/auto-ta-update-403
Automated Splunk TA Update 403
2025-09-29 11:20:41 -07:00
patel-bhavin b12935d33c Updated TAs 2025-09-29 06:59:13 +00:00
Bhavin Patel 0fbf9b9b8d Merge pull request #3696 from splunk/asa_story
Suspicious Cisco Adaptive Security Appliance Activity - story file
v5.15.2
2025-09-25 18:29:51 -07:00
Bhavin Patel a1d2b73915 updating links 2025-09-25 18:23:04 -07:00
Bhavin Patel e51e23aab1 associating with new story 2025-09-25 18:19:34 -07:00
Jose Enrique Hernandez 8e631051fd Merge pull request #3695 from splunk/asa_public
move ASA to public - post release
2025-09-25 20:17:28 -04:00
Bhavin Patel 4d7faff280 link for debug logging 2025-09-25 16:35:50 -07:00
Bhavin Patel 6fc52ccd51 updating to text 2025-09-25 16:21:47 -07:00
Bhavin Patel 1fc1c5629a adding updates to how to implement 2025-09-25 16:20:10 -07:00
Bhavin Patel 46ab9105c9 updating links 2025-09-25 16:01:23 -07:00
Bhavin Patel 6734892a65 updating the SPL 2025-09-25 15:41:56 -07:00
Bhavin Patel fd9394687e move to public 2025-09-25 13:05:25 -07:00
Bhavin Patel 264b758ba0 Merge pull request #3694 from splunk/IDs
Snort ID updates - Arcane Door
v5.15.0
2025-09-25 09:17:49 -07:00
Bhavin Patel c93f077146 adding a story file 2025-09-25 09:11:05 -07:00
Bhavin Patel c707acec73 updating story 2025-09-25 09:07:12 -07:00
Bhavin Patel b4cd4142b6 updating detection file 2025-09-25 09:05:39 -07:00
Bhavin Patel 17a4e1eb63 updating IDs 2025-09-24 11:20:12 -07:00
Bhavin Patel b647bfaba9 Merge branch 'develop' into GhostRedirector 2025-09-23 11:37:29 -07:00
Nasreddine Bencherchali c0f7c69e14 Update windows_driver_load_non_standard_path.yml 2025-09-23 15:07:01 +02:00
Nasreddine Bencherchali a529bb79b2 Update windows_driver_load_non_standard_path.yml 2025-09-23 12:15:24 +02:00
Bhavin Patel cbadadc278 Merge pull request #3685 from splunk/fix_auditd_service_Start
fix_auditd_service_Start
2025-09-18 14:14:48 -07:00
Michael Haag a265197fd0 Update windows_process_execution_from_programdata.yml 2025-09-18 13:49:54 -06:00
Michael Haag b6083e5076 GhostRedirectors 2025-09-18 13:39:40 -06:00
Teoderick Contreras 6ac89f25f5 fix_auditd_service_Start 2025-09-18 10:36:04 +02:00
Bhavin Patel d4e6baecd2 Merge pull request #3681 from splunk/notdoor_outlook_macros
NotDoor Outlook Macro Detections
v5.14.0
2025-09-15 12:43:03 -07:00
Bhavin Patel dbea574ff8 Merge branch 'develop' into notdoor_outlook_macros 2025-09-15 11:47:28 -07:00
Bhavin Patel 04b8e4e9e0 Merge pull request #3676 from splunk/attack_data_fixes
Update attack_data links
2025-09-15 10:37:54 -07:00
Bhavin Patel 5fd3aafc0d Merge branch 'develop' into attack_data_fixes 2025-09-15 09:45:10 -07:00
Raven Tait 1a85b440dd NotDoor Outlook Macro Detections 2025-09-11 11:42:25 -04:00
Lou Stella e10b2d8f34 Merge pull request #3680 from splunk/auto-ta-update-385
Automated Splunk TA Update 385
2025-09-11 07:48:54 -05:00
patel-bhavin 8b3e0ef183 Updated TAs 2025-09-11 06:58:13 +00:00
Lou Stella aace5e8b98 Merge pull request #3678 from splunk/auto-ta-update-384
Automated Splunk TA Update 384
2025-09-10 11:57:04 -05:00
ljstella 5b2c60eaff Bump contentctl version for CIM 2025-09-10 08:18:31 -04:00
Teoderick Contreras b3c9f1a719 promptlock 2025-09-10 10:01:04 +02:00
Teoderick Contreras 06cb9fe29d promptlock 2025-09-10 09:55:05 +02:00
patel-bhavin 5f529c8858 Updated TAs 2025-09-10 06:57:45 +00:00
ljstella d6f03a2d24 Bumped versions 2025-09-09 08:49:59 -04:00
ljstella 8d0935f037 Update attack_data links 2025-09-09 08:35:57 -04:00
Lou Stella 3c6a0f9995 Merge pull request #3674 from splunk/dependabot/github_actions/actions/setup-python-6
Bump actions/setup-python from 5 to 6
2025-09-09 07:27:25 -05:00