Commit Graph

25265 Commits

Author SHA1 Message Date
Bhavin Patel 7e2a3877ae Branch was auto-updated. 2025-01-14 10:02:37 -08:00
Bhavin Patel fb66f8cba2 Merge pull request #3266 from splunk/dlux_5
Dlux 5 - AAD detection
2025-01-14 10:02:21 -08:00
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Bhavin Patel 6709e590a0 Branch was auto-updated. 2025-01-14 09:04:46 -08:00
Bhavin Patel c3689f0194 Merge pull request #3237 from splunk/aws_asl_detections
Improved ASL AWS detections
2025-01-14 09:04:24 -08:00
Patrick Bareiss 3d1fde609b Add ASL AWS CloudTrail data source 2025-01-14 16:47:25 +01:00
Nasreddine Bencherchali 1f060bbddf update to analytics using net 2025-01-13 22:20:46 +01:00
research-bot ff5a16bd97 updating data sources 2025-01-13 12:18:08 -08:00
Bhavin Patel d64e5c9063 Update o365_service_principal_privilege_escalation.yml 2025-01-13 10:36:45 -08:00
research-bot a3be9d47b9 minor udpates to yaml 2025-01-10 11:46:43 -08:00
Bhavin Patel 6b9161bcea Branch was auto-updated. 2025-01-10 07:03:33 -08:00
Bhavin Patel b4eeee4873 Branch was auto-updated. 2025-01-10 07:03:32 -08:00
Bhavin Patel 6d724876b6 Branch was auto-updated. 2025-01-10 07:03:31 -08:00
Lou Stella c0f0f9506d Merge pull request #3274 from splunk/auto-ta-update-141
Automated Splunk TA Update 141
2025-01-10 09:03:16 -06:00
patel-bhavin 67de6175a9 Updated TAs 2025-01-10 06:57:41 +00:00
Bhavin Patel f890159c74 Branch was auto-updated. 2025-01-09 14:18:18 -08:00
Bhavin Patel 3937f26f84 Branch was auto-updated. 2025-01-09 14:18:17 -08:00
Bhavin Patel ef6f6805b5 Branch was auto-updated. 2025-01-09 14:18:17 -08:00
Bhavin Patel ede80f4395 Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2
Nterl0k - T1219 - RMM Detection for Registry locations.
2025-01-09 14:17:57 -08:00
Bhavin Patel 55d4936427 update token 2025-01-09 13:26:23 -08:00
Bhavin Patel c01f87071e Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-09 13:10:22 -08:00
Bhavin Patel 045cc1994b Branch was auto-updated. 2025-01-09 11:42:58 -08:00
Bhavin Patel ea9921d6ab Branch was auto-updated. 2025-01-09 11:42:54 -08:00
Bhavin Patel a746db1270 Branch was auto-updated. 2025-01-09 11:42:53 -08:00
Lou Stella d2592c5deb Merge pull request #3270 from splunk/auto-ta-update-139
Automated Splunk TA Update 139
2025-01-09 13:42:36 -06:00
ljstella 1ce4f77a4c update description 2025-01-09 12:02:56 -06:00
Patrick Bareiss 848fb18717 improvements 2025-01-09 18:19:18 +01:00
ljstella 4b28335f82 retrigger 2025-01-09 11:12:57 -06:00
ljstella 02afa4f4cb Adding PSC 2025-01-09 11:08:49 -06:00
ljstella 5b8986469e Removed parens that was killing app installs 2025-01-09 10:39:47 -06:00
Patrick Bareiss 8b30dc3e15 change 2025-01-09 14:47:11 +01:00
Patrick Bareiss 87d2ca6225 Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections 2025-01-09 14:43:06 +01:00
Patrick Bareiss 4b37788f5a new detections 2025-01-09 14:42:38 +01:00
Nasreddine Bencherchali f06f5cd618 rename rule and enhance metadata 2025-01-09 13:39:03 +01:00
ljstella c591ef5ff7 Adding back two containers 2025-01-08 12:45:30 -06:00
ljstella a9129bf5e3 Testing single container 2025-01-08 12:40:39 -06:00
Bhavin Patel 4c65798689 Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-08 10:22:03 -08:00
Bhavin Patel 557fdeca89 Add manual_test flag 2025-01-08 10:21:40 -08:00
Bhavin Patel 4ed661ab65 Branch was auto-updated. 2025-01-08 10:11:54 -08:00
Bhavin Patel 62e5a6083f Branch was auto-updated. 2025-01-08 10:11:53 -08:00
Bhavin Patel c90858719d Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel 607494bfb8 Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel be3ab3c6ed Merge pull request #3255 from nterl0k/nterl0k-T1550-netexec-usage
Nterl0k - T1550 - NetExec Usage Detection
2025-01-08 10:11:36 -08:00
Bhavin Patel 5e58179a00 file name update 2025-01-08 10:09:48 -08:00
Patrick Bareiss dc3fdda537 new detection 2025-01-08 17:05:24 +01:00
Nasreddine Bencherchali a8c3540aa8 typo fixes and some logic update 2025-01-08 14:46:37 +01:00
Patrick Bareiss 197881f7fa bug fix 2025-01-08 14:32:56 +01:00
Patrick Bareiss 186061fa94 new detection 2025-01-08 13:53:03 +01:00
patel-bhavin 7c7904265a Updated TAs 2025-01-08 06:58:09 +00:00
dluxtron 3d8919f1c6 reverting macro change 2025-01-08 15:11:19 +10:00