Commit Graph

26354 Commits

Author SHA1 Message Date
Bhavin Patel 6ff8fe0fb3 Merge branch 'develop' into susmailrule 2025-03-07 09:26:12 -08:00
Bhavin Patel d67548546b Merge pull request #3383 from splunk/manual-ta-update-197
Manual TA Update 197
2025-03-07 09:24:43 -08:00
Bhavin Patel bd54cf4d58 updating file name of the app 2025-03-07 09:00:38 -08:00
ljstella cea71371d7 Cisco AppDynamics v3.1.0 2025-03-07 08:54:05 -06:00
Bhavin Patel 8a2909b8f0 Merge pull request #3375 from shilch/patch-1
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
2025-03-04 12:44:48 -08:00
Bhavin Patel b09805c250 Merge branch 'develop' into patch-1 2025-03-04 10:35:03 -08:00
Bhavin Patel ae64f202ed Merge pull request #3332 from splunk/haagsqldb
🎪 Haag's SQL Server Story Time: Tales of SQLCMD and Suspicious Queries 📚
2025-03-04 10:34:33 -08:00
Bhavin Patel 6033082600 Merge branch 'develop' into haagsqldb 2025-03-04 10:12:52 -08:00
Michael Haag 42fbaba04e Update windows_sqlservr_spawning_shell.yml 2025-03-04 09:57:53 -07:00
Bhavin Patel 3dbc72f978 Merge pull request #3378 from splunk/v5.1.1
Updating lookup 5.1.1
v5.1.1
2025-03-04 08:49:58 -08:00
Michael Haag 827a80b69d datasource 2025-03-03 20:30:50 -07:00
research-bot 6e84f4cab9 updating lookup 2025-03-03 16:20:52 -08:00
Simon ce6d61a75b Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml 2025-03-03 13:35:26 +01:00
☕️ ff7729e418 Merge branch 'develop' into susmailrule 2025-03-01 01:10:19 +00:00
Bhavin Patel f0857d6fd7 Merge pull request #3292 from nterl0k/nterl0k-t1114-sus-o365-email-actions
Nterl0k - T1114 Suspect 0365 Email Actions
2025-02-28 15:27:13 -08:00
research-bot 6c5b29639b adding available fields for this data source 2025-02-28 14:33:02 -08:00
research-bot d813729588 updating test section as both dataset need to be indexed together 2025-02-28 14:29:32 -08:00
Steven Dick 03b79b651c Add files via upload 2025-02-28 15:58:44 -05:00
Steven Dick b59b41aece Merge branch 'splunk:develop' into nterl0k-t1114-sus-o365-email-actions 2025-02-28 15:50:16 -05:00
Bhavin Patel 44c8147ba9 Merge pull request #3370 from splunk/auto-ta-update-190
Automated Splunk TA Update 190
2025-02-28 12:43:49 -08:00
Bhavin Patel cf52e66778 Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions 2025-02-28 11:52:31 -08:00
Lou Stella b4b0f8a30c Merge branch 'develop' into auto-ta-update-190 2025-02-28 13:48:25 -06:00
Bhavin Patel c254e91bde Merge pull request #3369 from splunk/dlux_6
Updating dcsync detection due to false positive
2025-02-28 11:43:02 -08:00
Bhavin Patel 8bd007e35b Merge branch 'develop' into dlux_6 2025-02-28 11:14:51 -08:00
Bhavin Patel f56cf8e2e4 revert 2025-02-28 11:14:12 -08:00
patel-bhavin ed4b0874da Updated TAs 2025-02-28 06:58:25 +00:00
dluxtron df04cd63c8 updating version and risk object 2025-02-28 12:06:04 +10:00
dluxtron 0923a79c49 updating version and risk object 2025-02-28 11:50:22 +10:00
Bhavin Patel 8a746596ba Merge pull request #3367 from splunk/auto-ta-update-189
Automated Splunk TA Update 189
2025-02-27 14:04:17 -08:00
Bhavin Patel a1eca2e737 Merge branch 'develop' into auto-ta-update-189 2025-02-27 11:02:24 -08:00
Bhavin Patel facaa0fbe8 Update linux_secure.yml to 9.2.0 2025-02-27 11:02:08 -08:00
Bhavin Patel 2eb9c03c27 Merge pull request #3352 from splunk/auditd_detection_updates
auditd_detection_updates
2025-02-27 10:13:29 -08:00
Teoderick Contreras 99871b5024 auditd_detection_updates 2025-02-27 10:36:29 +01:00
0xC0FFEEEE 9d23cc4bf0 simplify SPL & add threat object 2025-02-27 07:35:08 +00:00
patel-bhavin b97bbac60d Updated TAs 2025-02-27 06:57:49 +00:00
dluxtron 19e1d51482 Updating detection 2025-02-27 16:44:11 +10:00
research-bot aabdf4f8f6 status deprecated 2025-02-26 16:21:16 -08:00
Bhavin Patel 4fe79f32ce Merge branch 'develop' into auditd_detection_updates 2025-02-26 13:54:51 -08:00
Bhavin Patel aedca3278e Merge branch 'develop' into susmailrule 2025-02-26 12:20:29 -08:00
Bhavin Patel f0d60a471b Merge pull request #3365 from splunk/manual-ta-update-188
Manual TA Update 188
2025-02-26 12:20:07 -08:00
Bhavin Patel 52ad8c4ebb Merge branch 'develop' into auditd_detection_updates 2025-02-26 12:09:47 -08:00
ljstella 3dcc70d8e0 Weird formatting 2025-02-26 13:46:28 -06:00
ljstella c9a144b848 Merge branch 'develop' into manual-ta-update-188 2025-02-26 11:27:27 -06:00
Bhavin Patel a810c4e6bb Merge pull request #3278 from splunk/github_detections_improvement
GitHub detections improvement
2025-02-26 09:06:16 -08:00
ljstella 1583900581 GSuite TA Update 2025-02-26 09:34:57 -06:00
ljstella ed59b68532 o365 TA update 2025-02-26 09:34:22 -06:00
ljstella 6e9700b18d contentctl.yml update 2025-02-26 09:32:04 -06:00
P4T12ICK 83afe3223a Merge branch 'develop' into github_detections_improvement 2025-02-26 09:53:26 +01:00
P4T12ICK 6b6efd6752 Merge pull request #3357 from splunk/add_Data_source
Add data source objects
2025-02-26 09:50:21 +01:00
Teoderick Contreras fb67c4f6ce auditd_detection_updates 2025-02-26 09:40:27 +01:00