Commit Graph

27504 Commits

Author SHA1 Message Date
Teoderick Contreras 6c857aac76 interlock_ransomware 2025-07-28 11:13:15 +02:00
pyth0n1c b62c21bda0 Merge pull request #3620 from splunk/contentctl_attack_data_cache
configure contentctl.yml to use attack data cache
2025-07-24 15:26:02 -07:00
pyth0n1c f94e0cc080 Merge branch 'develop' into contentctl_attack_data_cache 2025-07-24 15:23:33 -07:00
Tessa Georgen a599512e15 configure contentctl.yml to use attack data cache 2025-07-24 15:45:53 -04:00
Bhavin Patel 1562bec708 Merge pull request #3619 from splunk/ctl_511
version bump for 5.11.0
2025-07-23 15:11:25 -07:00
Bhavin Patel 5031206e56 version bump for next release 2025-07-23 13:20:07 -07:00
Lou Stella aca4613bcb Merge pull request #3616 from splunk/auto-ta-update-334
Automated Splunk TA Update 334
2025-07-23 12:51:18 -05:00
patel-bhavin 6755ee0a5a Updated TAs 2025-07-22 07:01:02 +00:00
Bhavin Patel e8883750af Merge pull request #3615 from splunk/data_source_bug
minor fix to data source
v5.10.0
2025-07-21 15:06:47 -07:00
Bhavin Patel d3082fc262 minor 2025-07-21 14:43:12 -07:00
Bhavin Patel 483c7d2d12 Merge pull request #3613 from splunk/sharepoint
Sharing is Caring: A story of CVE-2025-53770
2025-07-21 14:20:15 -07:00
Bhavin Patel 299f54a1e7 Merge branch 'develop' into sharepoint 2025-07-21 14:04:54 -07:00
Bhavin Patel 6d8a08fc91 Merge pull request #3609 from splunk/quasar_and_loader
quasar_and_loader
2025-07-21 14:04:44 -07:00
Michael Haag 227216ec39 Create windows_sharepoint_spinstall0_webshell_file_creation.yml 2025-07-21 13:57:05 -06:00
Michael Haag f6a5de35a4 Merge branch 'sharepoint' of https://github.com/splunk/security_content into sharepoint 2025-07-21 13:11:44 -06:00
Michael Haag 4e3598c522 Update windows_sharepoint_toolpane_endpoint_exploitation_attempt.yml 2025-07-21 13:11:43 -06:00
Nasreddine Bencherchali 1075307e29 Update detections/network/windows_gather_victim_network_info_through_ip_check_web_services.yml 2025-07-21 21:01:20 +02:00
Bhavin Patel 955b4af394 Merge branch 'develop' into quasar_and_loader 2025-07-21 11:20:16 -07:00
Bhavin Patel 5c707ed2fa Merge branch 'develop' into sharepoint 2025-07-21 10:33:38 -07:00
Bhavin Patel db45a47e94 Merge pull request #3602 from splunk/duo_detections_1
Cisco Duo Detections
2025-07-21 10:29:12 -07:00
Bhavin Patel e434b1ac3f remove extraquote 2025-07-21 09:44:10 -07:00
Bhavin Patel 65291ca170 Merge branch 'develop' into duo_detections_1 2025-07-21 09:03:48 -07:00
Michael Haag c5838d60da Create windows_sharepoint_spinstall0_get_request.yml 2025-07-21 09:28:05 -06:00
Nasreddine Bencherchali 0329943742 Merge pull request #3614 from splunk/missing-ds
Add Missing DS
2025-07-21 16:53:53 +02:00
Nasreddine Bencherchali b96739ccd4 Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml 2025-07-21 16:37:38 +02:00
Nasreddine Bencherchali 5e76f21e6f Update cisco_nvm___suspicious_network_connection_to_ip_lookup_service_api.yml 2025-07-21 16:34:06 +02:00
Patrick Bareiss 034c2a7bf6 feedback review 2025-07-21 09:47:20 +02:00
Michael Haag 13b49f5456 Sharing is Caring: A story of CVE-2025-53770 2025-07-20 17:03:37 -06:00
Bhavin Patel efc331be05 Merge branch 'develop' into duo_detections_1 2025-07-18 13:50:53 -07:00
Bhavin Patel f3505b9a33 Merge branch 'develop' into quasar_and_loader 2025-07-18 12:17:52 -07:00
Bhavin Patel 84d8f198b2 Merge pull request #3610 from splunk/esxi_detections
Esxi detections
2025-07-18 12:17:37 -07:00
Raven Tait 8e02ae92a9 Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections 2025-07-18 14:56:31 -04:00
Raven Tait c7974920c3 add output_fields to datasource 2025-07-18 14:56:30 -04:00
Bhavin Patel c30632444c Merge branch 'develop' into esxi_detections 2025-07-18 11:38:02 -07:00
Bhavin Patel 51131fff17 Merge pull request #3588 from splunk/citrixbleed2
CitrixBleed 2
2025-07-18 11:37:44 -07:00
Lou Stella c8ed36821e Merge branch 'develop' into esxi_detections 2025-07-18 11:27:55 -05:00
Raven Tait c21bff696b Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections 2025-07-18 12:13:03 -04:00
Raven Tait aba2939a07 Fix host field
Fix host field
2025-07-18 12:13:00 -04:00
Bhavin Patel dc8cd1dee4 Merge branch 'develop' into citrixbleed2 2025-07-18 09:10:33 -07:00
Bhavin Patel 1ee72dcd07 Merge pull request #3611 from splunk/auto-ta-update-330
Automated Splunk TA Update 330
2025-07-18 09:09:57 -07:00
patel-bhavin 2418f8cd13 Updated TAs 2025-07-18 07:01:20 +00:00
Nasreddine Bencherchali 77de82e744 Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-18 01:08:25 +02:00
Nasreddine Bencherchali 669eb8b4ba Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:58:55 +02:00
Nasreddine Bencherchali 799faa2a1e Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml 2025-07-17 20:46:33 +02:00
Nasreddine Bencherchali 523e5f4b94 add ftd equivalent analytic 2025-07-17 20:43:29 +02:00
Teoderick Contreras 627e4a263f quasar_and_loader 2025-07-17 16:09:40 +02:00
Teoderick Contreras 548df90b7e quasar_and_loader 2025-07-17 16:04:27 +02:00
Teoderick Contreras dbc8b8a649 quasar_and_loader 2025-07-17 15:32:38 +02:00
Teoderick Contreras b3e5d275ec quasar_and_loader 2025-07-17 15:29:14 +02:00
Nasreddine Bencherchali 483e79feae Update citrix_adc_and_gateway_citrixbleed_2_memory_disclosure.yml
update formatting
2025-07-17 14:56:14 +02:00