4fbeb954ca
Branch was auto-updated.
2023-05-08 08:36:46 -07:00
34f4a5dceb
Merge pull request #2595 from splunk/TR-2903
...
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00
d220cf41a5
Addressed Kelby's Findings
2023-05-04 14:17:57 -05:00
367e116829
Branch was auto-updated.
2023-05-03 12:09:49 -07:00
3f15163fbf
Branch was auto-updated.
2023-05-03 12:09:45 -07:00
0c76f0139e
Merge pull request #2663 from splunk/revert-2662-deprecate_pth
...
Revert "deprecate Pth"
2023-05-03 12:09:28 -07:00
8ef2a73122
mionr
2023-05-03 11:58:17 -07:00
63abc37beb
deprecated note update
2023-05-03 11:57:27 -07:00
444dde5d66
Revert "deprecate Pth"
2023-05-03 11:51:24 -07:00
8f2303e88a
Branch was auto-updated.
2023-05-03 11:50:30 -07:00
5f44b4ca50
Branch was auto-updated.
2023-05-03 11:50:27 -07:00
799a636a73
Merge pull request #2662 from splunk/deprecate_pth
...
deprecate Pth
2023-05-03 11:50:06 -07:00
ae89db26ea
deprecate this
2023-05-03 11:44:31 -07:00
524547ab82
Branch was auto-updated.
2023-05-03 09:41:09 -07:00
1007eb9a16
Branch was auto-updated.
2023-05-03 09:41:02 -07:00
9a442a3bd1
Merge pull request #2648 from splunk/ba_detection_spec
...
Add BA detection schema and validator
2023-05-03 09:41:01 -07:00
9f120ad765
Merge pull request #2647 from splunk/bug_fixes_sec_cont_4
...
Improve Detection Validation
2023-05-03 09:40:39 -07:00
44b98b61c1
improved detections
2023-05-03 15:13:10 +02:00
eb90d8d272
Branch was auto-updated.
2023-05-02 15:23:40 -07:00
a35648eb74
Branch was auto-updated.
2023-05-02 15:23:35 -07:00
2ee69fb765
Branch was auto-updated.
2023-05-02 15:23:34 -07:00
fd50f2738b
Branch was auto-updated.
2023-05-02 15:23:32 -07:00
9b995551aa
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
2023-05-02 22:23:11 +00:00
4aac79147d
Branch was auto-updated.
2023-05-02 15:02:47 -07:00
0e5329d54c
Branch was auto-updated.
2023-05-02 15:02:45 -07:00
b954ccf537
Branch was auto-updated.
2023-05-02 15:02:44 -07:00
79557b5147
Branch was auto-updated.
2023-05-02 15:02:36 -07:00
c80c0aecec
Merge pull request #2661 from splunk/security_content_4_phase_2
...
SmokeTest part 2
2023-05-02 15:02:17 -07:00
e51757ca9f
conflicts
2023-05-02 14:56:38 -07:00
aac32ae63c
Update detection-smoketesting.yml
...
Update the smoketest workflow so
that it only runs nightly instead of
on every push. This workflow takes
a very long time to run (about 1 hour)
so we don't want to run it all the time.
2023-05-02 14:48:17 -07:00
5912e876a8
Update windows_ad_domain_replication_acl_addition.yml
...
Revert syntax changes so that this search
continues to fail smoketesting. This way, we
know to come back and update it.
2023-05-02 14:47:11 -07:00
6323c28e96
Rename detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml to detect_suspicious_processnames_using_a_pretrained_model_in_dsdl.yml
...
Updated name of filter and name of search file.
Did not touch the apply or name of the search
because these two run other lookups + we cannot
change the name of a search once it has been deployed.
2023-05-02 14:45:57 -07:00
6139b72dac
initial commit for dns data exfil
2023-05-02 14:25:07 -07:00
283f7b32f2
Branch was auto-updated.
2023-05-02 12:58:45 -07:00
c450eb5b28
Branch was auto-updated.
2023-05-02 12:58:43 -07:00
30b88e1862
Branch was auto-updated.
2023-05-02 12:58:41 -07:00
f0f5feafd1
Merge pull request #2658 from splunk/do_not_step_on_redline3
...
do_not_step_on_redline3
2023-05-02 12:58:16 -07:00
68748537d9
minor fixes
2023-05-02 12:55:11 -07:00
d60cb0afd1
Branch was auto-updated.
2023-05-02 12:49:16 -07:00
9226eb8ad1
Branch was auto-updated.
2023-05-02 12:49:10 -07:00
78386bf3e9
Branch was auto-updated.
2023-05-02 12:49:08 -07:00
b6af5847b1
Branch was auto-updated.
2023-05-02 12:49:06 -07:00
d3f8067e04
Merge pull request #2645 from splunk/do_not_step_on_the_redline2
...
do_not_step_on_the_redline2
2023-05-02 12:48:37 -07:00
e985d2207d
minor fixes
2023-05-02 12:45:47 -07:00
12b6c6e19b
Merge pull request #2652 from splunk/dependabot/pip/psutil-5.9.5
2023-05-02 17:42:11 +00:00
6534e5fd6b
Branch was auto-updated.
2023-05-02 10:31:06 -07:00
2a4a9d7804
Branch was auto-updated.
2023-05-02 10:30:57 -07:00
cecd7d1749
Branch was auto-updated.
2023-05-02 10:30:55 -07:00
58db3557a5
Branch was auto-updated.
2023-05-02 10:30:53 -07:00
8b71280142
Branch was auto-updated.
2023-05-02 10:30:47 -07:00
srv-rr-gh-researchbt