Bhavin Patel
|
6ff8fe0fb3
|
Merge branch 'develop' into susmailrule
|
2025-03-07 09:26:12 -08:00 |
|
Bhavin Patel
|
d67548546b
|
Merge pull request #3383 from splunk/manual-ta-update-197
Manual TA Update 197
|
2025-03-07 09:24:43 -08:00 |
|
Bhavin Patel
|
bd54cf4d58
|
updating file name of the app
|
2025-03-07 09:00:38 -08:00 |
|
ljstella
|
cea71371d7
|
Cisco AppDynamics v3.1.0
|
2025-03-07 08:54:05 -06:00 |
|
Bhavin Patel
|
8a2909b8f0
|
Merge pull request #3375 from shilch/patch-1
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-04 12:44:48 -08:00 |
|
Bhavin Patel
|
b09805c250
|
Merge branch 'develop' into patch-1
|
2025-03-04 10:35:03 -08:00 |
|
Bhavin Patel
|
ae64f202ed
|
Merge pull request #3332 from splunk/haagsqldb
🎪 Haag's SQL Server Story Time: Tales of SQLCMD and Suspicious Queries 📚
|
2025-03-04 10:34:33 -08:00 |
|
Bhavin Patel
|
6033082600
|
Merge branch 'develop' into haagsqldb
|
2025-03-04 10:12:52 -08:00 |
|
Michael Haag
|
42fbaba04e
|
Update windows_sqlservr_spawning_shell.yml
|
2025-03-04 09:57:53 -07:00 |
|
Bhavin Patel
|
3dbc72f978
|
Merge pull request #3378 from splunk/v5.1.1
Updating lookup 5.1.1
v5.1.1
|
2025-03-04 08:49:58 -08:00 |
|
Michael Haag
|
827a80b69d
|
datasource
|
2025-03-03 20:30:50 -07:00 |
|
research-bot
|
6e84f4cab9
|
updating lookup
|
2025-03-03 16:20:52 -08:00 |
|
Simon
|
ce6d61a75b
|
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-03 13:35:26 +01:00 |
|
☕️
|
ff7729e418
|
Merge branch 'develop' into susmailrule
|
2025-03-01 01:10:19 +00:00 |
|
Bhavin Patel
|
f0857d6fd7
|
Merge pull request #3292 from nterl0k/nterl0k-t1114-sus-o365-email-actions
Nterl0k - T1114 Suspect 0365 Email Actions
|
2025-02-28 15:27:13 -08:00 |
|
research-bot
|
6c5b29639b
|
adding available fields for this data source
|
2025-02-28 14:33:02 -08:00 |
|
research-bot
|
d813729588
|
updating test section as both dataset need to be indexed together
|
2025-02-28 14:29:32 -08:00 |
|
Steven Dick
|
03b79b651c
|
Add files via upload
|
2025-02-28 15:58:44 -05:00 |
|
Steven Dick
|
b59b41aece
|
Merge branch 'splunk:develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 15:50:16 -05:00 |
|
Bhavin Patel
|
44c8147ba9
|
Merge pull request #3370 from splunk/auto-ta-update-190
Automated Splunk TA Update 190
|
2025-02-28 12:43:49 -08:00 |
|
Bhavin Patel
|
cf52e66778
|
Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 11:52:31 -08:00 |
|
Lou Stella
|
b4b0f8a30c
|
Merge branch 'develop' into auto-ta-update-190
|
2025-02-28 13:48:25 -06:00 |
|
Bhavin Patel
|
c254e91bde
|
Merge pull request #3369 from splunk/dlux_6
Updating dcsync detection due to false positive
|
2025-02-28 11:43:02 -08:00 |
|
Bhavin Patel
|
8bd007e35b
|
Merge branch 'develop' into dlux_6
|
2025-02-28 11:14:51 -08:00 |
|
Bhavin Patel
|
f56cf8e2e4
|
revert
|
2025-02-28 11:14:12 -08:00 |
|
patel-bhavin
|
ed4b0874da
|
Updated TAs
|
2025-02-28 06:58:25 +00:00 |
|
dluxtron
|
df04cd63c8
|
updating version and risk object
|
2025-02-28 12:06:04 +10:00 |
|
dluxtron
|
0923a79c49
|
updating version and risk object
|
2025-02-28 11:50:22 +10:00 |
|
Bhavin Patel
|
8a746596ba
|
Merge pull request #3367 from splunk/auto-ta-update-189
Automated Splunk TA Update 189
|
2025-02-27 14:04:17 -08:00 |
|
Bhavin Patel
|
a1eca2e737
|
Merge branch 'develop' into auto-ta-update-189
|
2025-02-27 11:02:24 -08:00 |
|
Bhavin Patel
|
facaa0fbe8
|
Update linux_secure.yml to 9.2.0
|
2025-02-27 11:02:08 -08:00 |
|
Bhavin Patel
|
2eb9c03c27
|
Merge pull request #3352 from splunk/auditd_detection_updates
auditd_detection_updates
|
2025-02-27 10:13:29 -08:00 |
|
Teoderick Contreras
|
99871b5024
|
auditd_detection_updates
|
2025-02-27 10:36:29 +01:00 |
|
0xC0FFEEEE
|
9d23cc4bf0
|
simplify SPL & add threat object
|
2025-02-27 07:35:08 +00:00 |
|
patel-bhavin
|
b97bbac60d
|
Updated TAs
|
2025-02-27 06:57:49 +00:00 |
|
dluxtron
|
19e1d51482
|
Updating detection
|
2025-02-27 16:44:11 +10:00 |
|
research-bot
|
aabdf4f8f6
|
status deprecated
|
2025-02-26 16:21:16 -08:00 |
|
Bhavin Patel
|
4fe79f32ce
|
Merge branch 'develop' into auditd_detection_updates
|
2025-02-26 13:54:51 -08:00 |
|
Bhavin Patel
|
aedca3278e
|
Merge branch 'develop' into susmailrule
|
2025-02-26 12:20:29 -08:00 |
|
Bhavin Patel
|
f0d60a471b
|
Merge pull request #3365 from splunk/manual-ta-update-188
Manual TA Update 188
|
2025-02-26 12:20:07 -08:00 |
|
Bhavin Patel
|
52ad8c4ebb
|
Merge branch 'develop' into auditd_detection_updates
|
2025-02-26 12:09:47 -08:00 |
|
ljstella
|
3dcc70d8e0
|
Weird formatting
|
2025-02-26 13:46:28 -06:00 |
|
ljstella
|
c9a144b848
|
Merge branch 'develop' into manual-ta-update-188
|
2025-02-26 11:27:27 -06:00 |
|
Bhavin Patel
|
a810c4e6bb
|
Merge pull request #3278 from splunk/github_detections_improvement
GitHub detections improvement
|
2025-02-26 09:06:16 -08:00 |
|
ljstella
|
1583900581
|
GSuite TA Update
|
2025-02-26 09:34:57 -06:00 |
|
ljstella
|
ed59b68532
|
o365 TA update
|
2025-02-26 09:34:22 -06:00 |
|
ljstella
|
6e9700b18d
|
contentctl.yml update
|
2025-02-26 09:32:04 -06:00 |
|
P4T12ICK
|
83afe3223a
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-26 09:53:26 +01:00 |
|
P4T12ICK
|
6b6efd6752
|
Merge pull request #3357 from splunk/add_Data_source
Add data source objects
|
2025-02-26 09:50:21 +01:00 |
|
Teoderick Contreras
|
fb67c4f6ce
|
auditd_detection_updates
|
2025-02-26 09:40:27 +01:00 |
|