 Bhavin Patel
|
5ee9bf7d69
|
Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search
|
2025-02-07 10:16:55 -08:00 |
|
|
Bhavin Patel
|
3eaad9a5cd
|
Merge pull request #3312 from nterl0k/nterl0k-rmm-story-update-1
Nterl0k - RMM Story and Detection Update, Again
|
2025-02-06 12:51:34 -08:00 |
|
|
Steven Dick
|
9658514c13
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:24:08 -05:00 |
|
|
Steven Dick
|
30edc65d04
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:18:27 -05:00 |
|
|
Steven Dick
|
911ebe61fd
|
Update remote_monitoring_and_management_software.yml
|
2025-02-06 08:18:05 -05:00 |
|
|
Steven Dick
|
ef5eca5bd1
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 08:07:31 -05:00 |
|
|
Steven Dick
|
f5160eba6f
|
Update detect_remote_access_software_usage_traffic.yml
|
2025-02-06 08:06:29 -05:00 |
|
|
Steven Dick
|
8d3da80557
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 08:05:27 -05:00 |
|
|
Steven Dick
|
41c92476b9
|
Update detect_remote_access_software_usage_url.yml
|
2025-02-06 08:04:38 -05:00 |
|
|
Steven Dick
|
0885f557bb
|
Update detect_remote_access_software_usage_file.yml
|
2025-02-06 08:03:56 -05:00 |
|
|
Steven Dick
|
f4a78d9f60
|
Update detect_remote_access_software_usage_fileinfo.yml
|
2025-02-06 08:03:25 -05:00 |
|
|
Steven Dick
|
b85aacf75f
|
Update detect_remote_access_software_usage_registry.yml
|
2025-02-06 08:02:38 -05:00 |
|
|
Steven Dick
|
778d7fa7cd
|
Update detect_remote_access_software_usage_process.yml
|
2025-02-06 08:01:53 -05:00 |
|
|
Steven Dick
|
38af78103f
|
Update detect_remote_access_software_usage_fileinfo.yml
|
2025-02-06 08:00:27 -05:00 |
|
|
Steven Dick
|
dea4448a4f
|
Update detect_remote_access_software_usage_file.yml
|
2025-02-06 07:58:47 -05:00 |
|
|
Steven Dick
|
7773664924
|
Update detect_remote_access_software_usage_url.yml
|
2025-02-06 07:57:46 -05:00 |
|
|
Steven Dick
|
2447329ea9
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 07:56:12 -05:00 |
|
|
Steven Dick
|
db40375a6b
|
Update detect_remote_access_software_usage_traffic.yml
|
2025-02-06 07:55:50 -05:00 |
|
|
Steven Dick
|
8b0bf13a10
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 07:53:56 -05:00 |
|
|
Steven Dick
|
d73c82d75f
|
Add files via upload
|
2025-02-06 07:53:20 -05:00 |
|
|
Steven Dick
|
988fd0f1e4
|
Update detect_remote_access_software_usage_dns.yml
|
2025-02-06 07:52:12 -05:00 |
|
|
Bhavin Patel
|
e2868a78b0
|
Merge branch 'develop' into nterl0k-t1213.002-sus-sharepoint-search
|
2025-02-05 15:31:38 -08:00 |
|
|
Bhavin Patel
|
93f33ccae3
|
Merge pull request #3268 from nterl0k/nterl0k-t1110-mfasweep-detection
Nterl0k - T1110 MFA Sweep / Excessive OS indicators from a user.
|
2025-02-05 14:22:56 -08:00 |
|
|
Bhavin Patel
|
e4b7d78067
|
Merge branch 'develop' into nterl0k-t1110-mfasweep-detection
|
2025-02-05 13:45:16 -08:00 |
|
|
Bhavin Patel
|
284dfc838e
|
Merge pull request #3267 from nterl0k/nterl0k-t1033-query-remote-usage
Nterl0k - T1033 Query.exe usage on remote devices.
|
2025-02-05 13:43:43 -08:00 |
|
|
Nasreddine Bencherchali
|
25cd13f41c
|
Merge branch 'develop' into nterl0k-t1033-query-remote-usage
|
2025-02-05 22:02:32 +01:00 |
|
|
Nasreddine Bencherchali
|
7ebb49e63c
|
update logic to avoid duplicate alerting
|
2025-02-05 22:01:51 +01:00 |
|
|
Bhavin Patel
|
6133a684c1
|
Merge pull request #3307 from splunk/auto-ta-update-167
Automated Splunk TA Update 167
|
2025-02-05 12:42:33 -08:00 |
|
|
Bhavin Patel
|
e3d81a7913
|
Merge branch 'develop' into auto-ta-update-167
|
2025-02-05 12:21:48 -08:00 |
|
|
Bhavin Patel
|
318f3eabde
|
Merge branch 'develop' into nterl0k-t1033-query-remote-usage
|
2025-02-05 12:18:27 -08:00 |
|
|
Bhavin Patel
|
70aa8403f5
|
Merge pull request #3310 from splunk/build_issue
Ctl for forks!
|
2025-02-05 12:17:56 -08:00 |
|
|
Bhavin Patel
|
20495d69e9
|
Merge branch 'develop' into auto-ta-update-167
|
2025-02-05 12:13:58 -08:00 |
|
|
research-bot
|
b599f494fc
|
updating if condition
|
2025-02-05 12:09:04 -08:00 |
|
|
Bhavin Patel
|
d46de4f487
|
Merge branch 'develop' into nterl0k-t1110-mfasweep-detection
|
2025-02-05 11:59:44 -08:00 |
|
|
Bhavin Patel
|
2c7c015437
|
Merge pull request #3309 from splunk/inspect_501
Inspect 5.0.1
|
2025-02-05 11:47:20 -08:00 |
|
|
research-bot
|
ba8f23593a
|
udpating ctl
|
2025-02-05 10:56:37 -08:00 |
|
|
research-bot
|
76a9a02c9e
|
updating versions
|
2025-02-05 10:49:03 -08:00 |
|
|
Jose Enrique Hernandez
|
d313f4bac1
|
Merge pull request #3308 from splunk/data_source_linux_secure
linux secure data source
|
2025-02-05 12:32:24 -05:00 |
|
|
Patrick Bareiss
|
75617e961d
|
linux secure data source
|
2025-02-05 09:19:19 +01:00 |
|
|
patel-bhavin
|
be6b1698a2
|
Updated TAs
|
2025-02-05 06:57:54 +00:00 |
|
|
Bhavin Patel
|
50517d8ce8
|
Merge branch 'develop' into nterl0k-t1110-mfasweep-detection
|
2025-02-04 12:45:45 -08:00 |
|
|
pyth0n1c
|
4cdaed8c5f
|
Merge pull request #3305 from splunk/to_5.0
udpating to 5.0.0
|
2025-02-03 13:52:16 -08:00 |
|
|
research-bot
|
e1ee551a60
|
udpating to 5
|
2025-02-03 13:50:08 -08:00 |
|
|
Steven Dick
|
d11d2df008
|
Update o365_sharepoint_suspicious_search_behavior.yml
|
2025-02-02 12:59:26 -05:00 |
|
|
Steven Dick
|
816bffa538
|
Merge branch 'splunk:develop' into nterl0k-t1110-mfasweep-detection
|
2025-02-02 12:57:39 -05:00 |
|
|
Steven Dick
|
35590471bc
|
Merge branch 'splunk:develop' into nterl0k-t1213.002-sus-sharepoint-search
|
2025-02-02 12:55:32 -05:00 |
|
|
Steven Dick
|
030537a8f4
|
Merge branch 'splunk:develop' into nterl0k-t1033-query-remote-usage
|
2025-02-02 12:53:46 -05:00 |
|
|
Steven Dick
|
97b27a672f
|
Update o365_sharepoint_suspicious_search_behavior.yml
update to v5 yaml spec / update search yaml for better readability / remove single quote in SPL issues
|
2025-02-02 12:52:02 -05:00 |
|
|
Steven Dick
|
5b9b5ab07b
|
Update windows_system_remote_discovery_with_query.yml
update to v5 yaml spec
update search yaml for better readability / remove single quote in SPL issues
|
2025-02-02 12:49:10 -05:00 |
|
|
Steven Dick
|
fab070785c
|
Update o365_multiple_os_vendors_authenticating_from_user.yml
update to new yaml spec / update search yaml for better readability / remove single quote in SPL issues
|
2025-02-02 12:43:45 -05:00 |
|