Bhavin Patel
|
52504408ed
|
Branch was auto-updated.
|
2024-07-30 14:46:18 -07:00 |
|
Bhavin Patel
|
1bb7f6d2dd
|
Merge pull request #3068 from splunk/fix_names_and_datasources
fix some names and data sources
|
2024-07-30 14:46:04 -07:00 |
|
Bhavin Patel
|
db0707458c
|
extra space
|
2024-07-30 14:26:23 -07:00 |
|
pyth0n1c
|
5ac47ddd85
|
fix some names and data sources
to be more compliant
|
2024-07-30 14:19:23 -07:00 |
|
Bhavin Patel
|
b66ea98432
|
Branch was auto-updated.
|
2024-07-30 11:37:54 -07:00 |
|
Bhavin Patel
|
6e749f0199
|
Merge pull request #3066 from splunk/specula
A Haag of Your Own
|
2024-07-30 11:37:38 -07:00 |
|
Michael Haag
|
28d684011a
|
Update windows_outlook_webview_registry_modification.yml
|
2024-07-30 12:25:09 -06:00 |
|
Michael Haag
|
f951ea4c88
|
fix
|
2024-07-30 12:18:20 -06:00 |
|
Michael Haag
|
53fef4c166
|
chip it
|
2024-07-30 11:35:18 -06:00 |
|
Michael Haag
|
19547da98a
|
Create vmware_esxi_ad_integration_authentication_bypass_cve_2024_37085.yml
|
2024-07-30 10:44:37 -06:00 |
|
Michael Haag
|
3e20a2a362
|
A Haag of Your Own
# New Analytic
- Windows Outlook WebView Registry Modification
|
2024-07-30 10:21:16 -06:00 |
|
Bhavin Patel
|
a6cb7dc3b8
|
Branch was auto-updated.
|
2024-07-29 18:07:56 -05:00 |
|
Bhavin Patel
|
6a933c681c
|
Merge pull request #3065 from splunk/accidental_removed
Re adding 2 detections:
|
2024-07-29 18:07:40 -05:00 |
|
Bhavin Patel
|
41c2a957ad
|
re adding missing files
|
2024-07-29 15:53:38 -07:00 |
|
Bhavin Patel
|
ff5d658283
|
Branch was auto-updated.
|
2024-07-29 15:57:42 -05:00 |
|
Bhavin Patel
|
97b6907d55
|
update contentctl yaml to 4.37.0
|
2024-07-29 13:57:24 -07:00 |
|
Bhavin Patel
|
a28c1e363f
|
Branch was auto-updated.
|
2024-07-29 15:42:59 -05:00 |
|
Bhavin Patel
|
2352f4c0d5
|
Merge pull request #3064 from splunk/sysmon_event_id_1
minor sysmon datasource update
|
2024-07-29 15:42:44 -05:00 |
|
Bhavin Patel
|
327724d741
|
minor sysmon datasource update
|
2024-07-29 13:27:02 -07:00 |
|
Bhavin Patel
|
df36e340e3
|
Branch was auto-updated.
|
2024-07-29 13:09:54 -05:00 |
|
Bhavin Patel
|
f5a3d3c7c2
|
Merge pull request #3063 from splunk/azure_lookup_datestamp
Datestamped Azure lookup
|
2024-07-29 13:09:29 -05:00 |
|
ljstella
|
6d74d225e9
|
Datestamped lookup
|
2024-07-29 08:38:55 -05:00 |
|
Bhavin Patel
|
03c2c01b2e
|
Branch was auto-updated.
|
2024-07-26 14:35:27 -05:00 |
|
Bhavin Patel
|
2a2182ec2f
|
Merge pull request #3030 from nterl0k/nterl0k-rmm_must_die_update_1
Nterl0k - RMM Must Die - Update
|
2024-07-26 14:35:10 -05:00 |
|
ljstella
|
a980709e4b
|
Modified macro name for clarity, updated how to implements with details
|
2024-07-26 14:11:24 -05:00 |
|
Bhavin Patel
|
fe6062715d
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-26 13:20:18 -05:00 |
|
Bhavin Patel
|
abc058f30a
|
Branch was auto-updated.
|
2024-07-26 13:04:50 -05:00 |
|
Bhavin Patel
|
4bbaf7b033
|
Merge pull request #3060 from splunk/extra_observable
Accidentally an extra risk object
|
2024-07-26 13:04:35 -05:00 |
|
Bhavin Patel
|
71b15effc9
|
Branch was auto-updated.
|
2024-07-26 12:55:19 -05:00 |
|
Bhavin Patel
|
0ec6c2363b
|
Branch was auto-updated.
|
2024-07-26 12:55:18 -05:00 |
|
Bhavin Patel
|
68235754b5
|
Merge pull request #3059 from splunk/updates
Haag's Guided Adventures
|
2024-07-26 12:55:03 -05:00 |
|
ljstella
|
d4cc96c115
|
Accidentally an extra risk object
|
2024-07-26 12:11:31 -05:00 |
|
Lou Stella
|
6f18511791
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-26 12:09:47 -05:00 |
|
ljstella
|
f1a79b1d50
|
Converting to KVstore for exceptions
|
2024-07-26 11:57:09 -05:00 |
|
Bhavin Patel
|
5b84acb162
|
Branch was auto-updated.
|
2024-07-26 11:46:07 -05:00 |
|
Bhavin Patel
|
c80b39eb10
|
Branch was auto-updated.
|
2024-07-26 11:46:07 -05:00 |
|
Bhavin Patel
|
3c657fc291
|
Merge pull request #3057 from splunk/shrink_locker
Shrink Locker
|
2024-07-26 11:45:53 -05:00 |
|
Michael Haag
|
2057e0ab23
|
Update malicious_powershell_process___encoded_command.yml
Fixed for #2982
|
2024-07-26 10:45:25 -06:00 |
|
Bhavin Patel
|
0eee85ca71
|
Branch was auto-updated.
|
2024-07-26 11:32:59 -05:00 |
|
Bhavin Patel
|
be15beae99
|
Merge branch 'develop' into shrink_locker
|
2024-07-26 11:32:57 -05:00 |
|
Bhavin Patel
|
c96c404854
|
Branch was auto-updated.
|
2024-07-26 11:32:57 -05:00 |
|
Bhavin Patel
|
d9a9bd5539
|
Merge pull request #3052 from splunk/goziursnif
Haag's Hunt for Gozi Gremlins
|
2024-07-26 11:32:42 -05:00 |
|
Michael Haag
|
03083cf27a
|
fix
|
2024-07-26 10:29:06 -06:00 |
|
Lou Stella
|
616711a2ef
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-26 11:17:19 -05:00 |
|
Bhavin Patel
|
6da2763f58
|
Branch was auto-updated.
|
2024-07-26 11:14:39 -05:00 |
|
Bhavin Patel
|
b7b981b56a
|
Branch was auto-updated.
|
2024-07-26 11:14:39 -05:00 |
|
Bhavin Patel
|
38ada20ddd
|
Branch was auto-updated.
|
2024-07-26 11:14:38 -05:00 |
|
Bhavin Patel
|
ad3fdbaf66
|
Branch was auto-updated.
|
2024-07-26 11:14:37 -05:00 |
|
Bhavin Patel
|
8b608158d9
|
Merge pull request #3050 from splunk/xml_conversion_issues
Edit Windows Event Log Cleared
|
2024-07-26 11:13:59 -05:00 |
|
Bhavin Patel
|
3a2e047557
|
Branch was auto-updated.
|
2024-07-26 11:03:20 -05:00 |
|