 Bhavin Patel
|
6b1ad9369a
|
revert powershell change and use fillnull
|
2025-04-03 09:10:34 -07:00 |
|
|
Bhavin Patel
|
43abc9471f
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 14:28:10 -07:00 |
|
|
Bhavin Patel
|
af9c381948
|
Merge pull request #3407 from splunk/renamed_earth_erties
renamed_earth_erties
|
2025-04-02 14:22:52 -07:00 |
|
|
Bhavin Patel
|
0d93ce9c0b
|
updating conflicts
|
2025-04-02 13:18:06 -07:00 |
|
|
Bhavin Patel
|
3bf27db466
|
updating data source and search since Path is not availble in this dataset
|
2025-04-02 12:58:26 -07:00 |
|
|
Bhavin Patel
|
f8d1d71db9
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 11:22:19 -07:00 |
|
|
Bhavin Patel
|
90ab68ee3e
|
Merge pull request #3400 from splunk/rceattack
PHP-CGI RCE Attack on Japanese Organizations
|
2025-04-02 11:21:16 -07:00 |
|
|
Bhavin Patel
|
7dabc2680f
|
Merge branch 'develop' into rceattack
|
2025-04-02 11:06:00 -07:00 |
|
|
Bhavin Patel
|
9493465161
|
adding new required fields to the new detections and fixing conflicts
|
2025-04-02 11:03:34 -07:00 |
|
|
Bhavin Patel
|
e141238eaf
|
Merge pull request #3346 from splunk/output_normalization_endpoint
Output normalization endpoint
|
2025-04-02 10:20:18 -07:00 |
|
|
Bhavin Patel
|
f03979077a
|
Merge branch 'develop' into rceattack
|
2025-04-01 15:47:23 -07:00 |
|
|
Bhavin Patel
|
a679c2e510
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-01 14:52:23 -07:00 |
|
|
Bhavin Patel
|
e6db474205
|
two new Mike detection fixes
|
2025-04-01 14:51:22 -07:00 |
|
|
Bhavin Patel
|
00253f3c6e
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-04-01 14:45:19 -07:00 |
|
|
Bhavin Patel
|
2c2e127a88
|
Merge pull request #3440 from splunk/integration_fixes_endpoint
integration fixes for endpoint detections
|
2025-04-01 14:45:03 -07:00 |
|
|
Bhavin Patel
|
041054cf08
|
Merge pull request #3417 from splunk/ZDI-CAN-25373
Clear and Present Haag-er: ZDI-CAN-25373
|
2025-04-01 14:43:34 -07:00 |
|
|
Bhavin Patel
|
72e2438196
|
Merge branch 'develop' into rceattack
|
2025-04-01 14:34:38 -07:00 |
|
|
Bhavin Patel
|
deb9ca1eba
|
Merge branch 'develop' into ZDI-CAN-25373
|
2025-04-01 14:22:38 -07:00 |
|
|
Bhavin Patel
|
452411530f
|
Merge pull request #3421 from splunk/sunnyside
Tomcat CVE-2025-24813: Haag Story 3: Attack Analytics to the Rescue
|
2025-04-01 14:19:39 -07:00 |
|
|
Bhavin Patel
|
7168e32ea6
|
Merge branch 'develop' into sunnyside
|
2025-04-01 14:05:53 -07:00 |
|
|
Bhavin Patel
|
1201ccae64
|
udpating spl tick
|
2025-04-01 14:01:43 -07:00 |
|
|
Michael Haag
|
e393aaad5c
|
done
|
2025-04-01 14:53:17 -06:00 |
|
|
Michael Haag
|
7c4ef721c2
|
donez
|
2025-04-01 14:52:17 -06:00 |
|
|
Michael Haag
|
09e184389b
|
Merge branch 'develop' into ZDI-CAN-25373
|
2025-04-01 14:49:25 -06:00 |
|
|
Michael Haag
|
55b5bc77d2
|
fixagai
|
2025-04-01 14:48:54 -06:00 |
|
|
Michael Haag
|
452378b283
|
fixor
|
2025-04-01 14:37:35 -06:00 |
|
|
Michael Haag
|
f435240b83
|
fixes
|
2025-04-01 14:34:18 -06:00 |
|
|
Bhavin Patel
|
488debfe2b
|
fixing failed detections
|
2025-04-01 12:55:52 -07:00 |
|
|
Bhavin Patel
|
7ae5e1a2fe
|
Merge pull request #3439 from splunk/output_normalization_endpoint_fixes
Integration Testing bug fixes
|
2025-04-01 09:15:00 -07:00 |
|
|
Teoderick Contreras
|
b31f246793
|
medusa_ransomware
|
2025-04-01 12:54:03 +02:00 |
|
|
Teoderick Contreras
|
414b521cc4
|
medusa_ransomware
|
2025-04-01 10:47:44 +02:00 |
|
|
Teoderick Contreras
|
10710c8675
|
medusa_ransomware
|
2025-04-01 10:17:06 +02:00 |
|
|
Teoderick Contreras
|
e993b67c0e
|
medusa_ransomware
|
2025-04-01 10:08:00 +02:00 |
|
|
Patrick Bareiss
|
62f5e451d3
|
Integration Testing bug fixes
|
2025-04-01 09:58:17 +02:00 |
|
|
Patrick Bareiss
|
03859564c8
|
rebase with develop
|
2025-04-01 09:42:07 +02:00 |
|
|
Patrick Bareiss
|
7541027f8e
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-04-01 09:41:58 +02:00 |
|
|
Br3akp0int
|
294128f9dc
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-01 09:36:41 +02:00 |
|
|
Michael Haag
|
ada8585d6f
|
Merge branch 'develop' into rceattack
|
2025-03-31 12:05:21 -06:00 |
|
|
Bhavin Patel
|
246f4856ef
|
Merge pull request #3423 from 0xC0FFEEEE/win_sus_service_fix
Windows Service Created with Suspicious Service Name fix
|
2025-03-28 13:34:30 -07:00 |
|
|
Bhavin Patel
|
3b6e62e913
|
Merge branch 'develop' into win_sus_service_fix
|
2025-03-28 13:17:43 -07:00 |
|
|
Bhavin Patel
|
bc2f378522
|
Merge pull request #3425 from splunk/rahul_feedback
SPL update - Detect Large Outbound ICMP Packets
|
2025-03-28 13:16:55 -07:00 |
|
|
Bhavin Patel
|
db0455a024
|
Merge branch 'develop' into win_sus_service_fix
|
2025-03-28 12:36:36 -07:00 |
|
|
Bhavin Patel
|
949e72062b
|
Merge branch 'develop' into rahul_feedback
|
2025-03-28 12:35:45 -07:00 |
|
|
Bhavin Patel
|
c21858bad4
|
Merge pull request #3419 from splunk/seaside
The Haag Identity: Operation Seashell Blizzard 🌊❄️
|
2025-03-28 12:32:53 -07:00 |
|
|
Bhavin Patel
|
bd3c6a0800
|
Merge branch 'develop' into sunnyside
|
2025-03-28 12:22:09 -07:00 |
|
|
Bhavin Patel
|
9a1888835c
|
Merge branch 'develop' into rahul_feedback
|
2025-03-28 12:15:27 -07:00 |
|
|
Bhavin Patel
|
fb51ba8f28
|
Merge branch 'develop' into seaside
|
2025-03-28 12:10:09 -07:00 |
|
|
Bhavin Patel
|
ca2487eec2
|
Merge pull request #3432 from splunk/auto-ta-update-218
Automated Splunk TA Update 218
|
2025-03-28 12:09:37 -07:00 |
|
|
Bhavin Patel
|
a87a568a2a
|
Update seashell_blizzard.yml
|
2025-03-28 12:02:11 -07:00 |
|
|
Bhavin Patel
|
7519993300
|
Merge branch 'develop' into seaside
|
2025-03-28 12:01:27 -07:00 |
|