 Nasreddine Bencherchali
|
6b64604903
|
resolve review comments
|
2025-04-17 00:22:13 +02:00 |
|
|
Nasreddine Bencherchali
|
97800f4fdb
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-16 20:19:57 +02:00 |
|
|
Nasreddine Bencherchali
|
56cc3f5928
|
update fields to cim and add output fields
|
2025-04-16 19:57:13 +02:00 |
|
|
Bhavin Patel
|
c25f1397d3
|
Merge pull request #3464 from splunk/detection_bug_fix
bug fix detection Windows Registry Payload Injection
|
2025-04-16 09:15:09 -07:00 |
|
|
Patrick Bareiss
|
06f39d9906
|
Merge branch 'detection_bug_fix' of github.com:splunk/security_content into detection_bug_fix
|
2025-04-16 13:42:25 +02:00 |
|
|
Patrick Bareiss
|
f00967835c
|
improvements detection
|
2025-04-16 13:42:06 +02:00 |
|
|
Bhavin Patel
|
3aa4e698dd
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-15 15:53:13 -07:00 |
|
|
Bhavin Patel
|
b175e03111
|
Update windows_registry_payload_injection.yml
|
2025-04-15 08:51:06 -07:00 |
|
|
Bhavin Patel
|
28dcd19759
|
Merge branch 'develop' into detection_bug_fix
|
2025-04-15 08:45:02 -07:00 |
|
|
Bhavin Patel
|
1a084095d5
|
Merge pull request #3456 from splunk/TR-4095
Add output fields, tighten up outputs
|
2025-04-15 08:44:42 -07:00 |
|
|
Bhavin Patel
|
78d572d49e
|
Merge branch 'develop' into TR-4095
|
2025-04-15 08:20:06 -07:00 |
|
|
Patrick Bareiss
|
63bf81a08f
|
bump version
|
2025-04-15 09:17:17 +02:00 |
|
|
Patrick Bareiss
|
318f15ce7d
|
bug fix detection Windows Registry Payload Injection
|
2025-04-15 09:05:50 +02:00 |
|
|
Bhavin Patel
|
09640e8d10
|
Merge pull request #3454 from splunk/bump_yaml
updating version contentctl.yml
|
2025-04-10 09:58:37 -07:00 |
|
|
ljstella
|
ce3755b4d8
|
Add registry_path
|
2025-04-10 11:56:28 -05:00 |
|
|
Bhavin Patel
|
0e77f7fe27
|
Merge branch 'develop' into bump_yaml
|
2025-04-10 09:52:16 -07:00 |
|
|
Bhavin Patel
|
c873289d6a
|
Merge branch 'develop' into TR-4095
|
2025-04-10 09:45:40 -07:00 |
|
|
Bhavin Patel
|
effe6c2e2f
|
Merge pull request #3452 from splunk/issue_template_update
Updating issue templates with types
|
2025-04-10 09:45:30 -07:00 |
|
|
ljstella
|
c733afbb0f
|
Update PR template for contentctl v5 lookup handling
|
2025-04-10 11:09:33 -05:00 |
|
|
ljstella
|
23f0df3e96
|
Date & Version bump
|
2025-04-10 11:07:16 -05:00 |
|
|
ljstella
|
8020e90e6d
|
Add output fields, tighten up outputs
|
2025-04-10 11:05:36 -05:00 |
|
|
Bhavin Patel
|
c79c1f63ba
|
updating version
|
2025-04-09 16:31:51 -07:00 |
|
|
ljstella
|
2b758d876a
|
Updating issue templates with types
|
2025-04-09 12:18:36 -05:00 |
|
|
Nasreddine Bencherchali
|
953c8d59da
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-09 16:34:47 +02:00 |
|
|
Nasreddine Bencherchali
|
2392ffd68d
|
Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml
|
2025-04-08 17:12:31 +02:00 |
|
|
Bhavin Patel
|
31deacc6bd
|
Merge pull request #3445 from sventec/patch-1
fix: remote_utility typo in remote_access_software.csv
v5.3.0
|
2025-04-04 12:50:44 -07:00 |
|
|
Bhavin Patel
|
86a0f199ba
|
Merge branch 'develop' into patch-1
|
2025-04-04 12:36:23 -07:00 |
|
|
Bhavin Patel
|
028045bd49
|
Merge pull request #3427 from splunk/jp_paranoid
Deprecate duplicate detection
|
2025-04-04 10:00:52 -07:00 |
|
|
sventec
|
889c08ebbf
|
chore: update lookup date and version
|
2025-04-04 11:32:45 -04:00 |
|
|
sventec
|
5f1d8f6b3f
|
fix: addtl remote_utility typo in remote_access_software.csv
|
2025-04-04 11:32:32 -04:00 |
|
|
sventec
|
66889be8a6
|
fix: remote_utility typo in remote_access_software.csv
|
2025-04-04 11:20:21 -04:00 |
|
|
Bhavin Patel
|
89ea90a820
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 12:52:41 -07:00 |
|
|
Bhavin Patel
|
e7263c96a7
|
Merge pull request #3411 from splunk/firewall_win_events
firewall_win_events
|
2025-04-03 12:52:23 -07:00 |
|
|
Bhavin Patel
|
39ce057227
|
fix dd
|
2025-04-03 12:18:53 -07:00 |
|
|
Nasreddine Bencherchali
|
53e3105db8
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-03 20:59:14 +02:00 |
|
|
Bhavin Patel
|
f1561e6173
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 10:46:23 -07:00 |
|
|
Bhavin Patel
|
49d75bbc36
|
Merge branch 'develop' into firewall_win_events
|
2025-04-03 10:44:21 -07:00 |
|
|
Bhavin Patel
|
39850effa7
|
Merge pull request #3392 from splunk/medusa_ransomware
medusa_ransomware
|
2025-04-03 10:43:13 -07:00 |
|
|
Bhavin Patel
|
6b1ad9369a
|
revert powershell change and use fillnull
|
2025-04-03 09:10:34 -07:00 |
|
|
Nasreddine Bencherchali
|
25dae36d17
|
Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml
|
2025-04-03 17:19:17 +02:00 |
|
|
Nasreddine Bencherchali
|
d2a7f6faf8
|
fix typo in count
|
2025-04-03 16:28:27 +02:00 |
|
|
Nasreddine Bencherchali
|
2d5a194803
|
remove filter error
|
2025-04-03 15:04:12 +02:00 |
|
|
Nasreddine Bencherchali
|
20275c2f10
|
rename files
|
2025-04-03 15:02:45 +02:00 |
|
|
Nasreddine Bencherchali
|
a8c4f40a9a
|
update attack data source
|
2025-04-03 14:58:26 +02:00 |
|
|
Nasreddine Bencherchali
|
cbe3aa7923
|
update rba and filter macros
|
2025-04-03 14:47:30 +02:00 |
|
|
Nasreddine Bencherchali
|
9c8db54662
|
Update cisco_secure_firewall_threat_defense_connection_event.yml
|
2025-04-03 14:36:11 +02:00 |
|
|
Nasreddine Bencherchali
|
d2337f07c8
|
Update cisco_secure_firewall_inside_to_outside.yml
|
2025-04-03 14:28:58 +02:00 |
|
|
Nasreddine Bencherchali
|
c156e2bb8d
|
update macro name
|
2025-04-03 14:26:51 +02:00 |
|
|
Nasreddine Bencherchali
|
0f084c4fb7
|
update lookup name
|
2025-04-03 14:24:53 +02:00 |
|
|
Nasreddine Bencherchali
|
f39a6d9a50
|
cisco secure firewall detections - first batch
|
2025-04-03 14:21:27 +02:00 |
|