Commit Graph

23959 Commits

Author SHA1 Message Date
Bhavin Patel 52504408ed Branch was auto-updated. 2024-07-30 14:46:18 -07:00
Bhavin Patel 1bb7f6d2dd Merge pull request #3068 from splunk/fix_names_and_datasources
fix some names and data sources
2024-07-30 14:46:04 -07:00
Bhavin Patel db0707458c extra space 2024-07-30 14:26:23 -07:00
pyth0n1c 5ac47ddd85 fix some names and data sources
to be more compliant
2024-07-30 14:19:23 -07:00
Bhavin Patel b66ea98432 Branch was auto-updated. 2024-07-30 11:37:54 -07:00
Bhavin Patel 6e749f0199 Merge pull request #3066 from splunk/specula
A Haag of Your Own
2024-07-30 11:37:38 -07:00
Michael Haag 28d684011a Update windows_outlook_webview_registry_modification.yml 2024-07-30 12:25:09 -06:00
Michael Haag f951ea4c88 fix 2024-07-30 12:18:20 -06:00
Michael Haag 53fef4c166 chip it 2024-07-30 11:35:18 -06:00
Michael Haag 19547da98a Create vmware_esxi_ad_integration_authentication_bypass_cve_2024_37085.yml 2024-07-30 10:44:37 -06:00
Michael Haag 3e20a2a362 A Haag of Your Own
# New Analytic
- Windows Outlook WebView Registry Modification
2024-07-30 10:21:16 -06:00
Bhavin Patel a6cb7dc3b8 Branch was auto-updated. 2024-07-29 18:07:56 -05:00
Bhavin Patel 6a933c681c Merge pull request #3065 from splunk/accidental_removed
Re adding 2 detections:
2024-07-29 18:07:40 -05:00
Bhavin Patel 41c2a957ad re adding missing files 2024-07-29 15:53:38 -07:00
Bhavin Patel ff5d658283 Branch was auto-updated. 2024-07-29 15:57:42 -05:00
Bhavin Patel 97b6907d55 update contentctl yaml to 4.37.0 2024-07-29 13:57:24 -07:00
Bhavin Patel a28c1e363f Branch was auto-updated. 2024-07-29 15:42:59 -05:00
Bhavin Patel 2352f4c0d5 Merge pull request #3064 from splunk/sysmon_event_id_1
minor sysmon datasource update
2024-07-29 15:42:44 -05:00
Bhavin Patel 327724d741 minor sysmon datasource update 2024-07-29 13:27:02 -07:00
Bhavin Patel df36e340e3 Branch was auto-updated. 2024-07-29 13:09:54 -05:00
Bhavin Patel f5a3d3c7c2 Merge pull request #3063 from splunk/azure_lookup_datestamp
Datestamped Azure lookup
2024-07-29 13:09:29 -05:00
ljstella 6d74d225e9 Datestamped lookup 2024-07-29 08:38:55 -05:00
Bhavin Patel 03c2c01b2e Branch was auto-updated. 2024-07-26 14:35:27 -05:00
Bhavin Patel 2a2182ec2f Merge pull request #3030 from nterl0k/nterl0k-rmm_must_die_update_1
Nterl0k - RMM Must Die - Update
2024-07-26 14:35:10 -05:00
ljstella a980709e4b Modified macro name for clarity, updated how to implements with details 2024-07-26 14:11:24 -05:00
Bhavin Patel fe6062715d Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 13:20:18 -05:00
Bhavin Patel abc058f30a Branch was auto-updated. 2024-07-26 13:04:50 -05:00
Bhavin Patel 4bbaf7b033 Merge pull request #3060 from splunk/extra_observable
Accidentally an extra risk object
2024-07-26 13:04:35 -05:00
Bhavin Patel 71b15effc9 Branch was auto-updated. 2024-07-26 12:55:19 -05:00
Bhavin Patel 0ec6c2363b Branch was auto-updated. 2024-07-26 12:55:18 -05:00
Bhavin Patel 68235754b5 Merge pull request #3059 from splunk/updates
Haag's Guided Adventures
2024-07-26 12:55:03 -05:00
ljstella d4cc96c115 Accidentally an extra risk object 2024-07-26 12:11:31 -05:00
Lou Stella 6f18511791 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 12:09:47 -05:00
ljstella f1a79b1d50 Converting to KVstore for exceptions 2024-07-26 11:57:09 -05:00
Bhavin Patel 5b84acb162 Branch was auto-updated. 2024-07-26 11:46:07 -05:00
Bhavin Patel c80b39eb10 Branch was auto-updated. 2024-07-26 11:46:07 -05:00
Bhavin Patel 3c657fc291 Merge pull request #3057 from splunk/shrink_locker
Shrink Locker
2024-07-26 11:45:53 -05:00
Michael Haag 2057e0ab23 Update malicious_powershell_process___encoded_command.yml
Fixed for #2982
2024-07-26 10:45:25 -06:00
Bhavin Patel 0eee85ca71 Branch was auto-updated. 2024-07-26 11:32:59 -05:00
Bhavin Patel be15beae99 Merge branch 'develop' into shrink_locker 2024-07-26 11:32:57 -05:00
Bhavin Patel c96c404854 Branch was auto-updated. 2024-07-26 11:32:57 -05:00
Bhavin Patel d9a9bd5539 Merge pull request #3052 from splunk/goziursnif
Haag's Hunt for Gozi Gremlins
2024-07-26 11:32:42 -05:00
Michael Haag 03083cf27a fix 2024-07-26 10:29:06 -06:00
Lou Stella 616711a2ef Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 11:17:19 -05:00
Bhavin Patel 6da2763f58 Branch was auto-updated. 2024-07-26 11:14:39 -05:00
Bhavin Patel b7b981b56a Branch was auto-updated. 2024-07-26 11:14:39 -05:00
Bhavin Patel 38ada20ddd Branch was auto-updated. 2024-07-26 11:14:38 -05:00
Bhavin Patel ad3fdbaf66 Branch was auto-updated. 2024-07-26 11:14:37 -05:00
Bhavin Patel 8b608158d9 Merge pull request #3050 from splunk/xml_conversion_issues
Edit Windows Event Log Cleared
2024-07-26 11:13:59 -05:00
Bhavin Patel 3a2e047557 Branch was auto-updated. 2024-07-26 11:03:20 -05:00