11046 Commits

Author	SHA1	Message	Date
Bhavin Patel	7fdcb4e7e0	adding drilldown	2025-04-16 16:31:04 -07:00
Bhavin Patel	b6f87ba697	make it production	2025-04-16 16:26:45 -07:00
Bhavin Patel	226dabdf34	fillnull for url	2025-04-16 16:09:07 -07:00
Bhavin Patel	de93d96862	updating RBA	2025-04-16 15:45:14 -07:00
Nasreddine Bencherchali	6b64604903	resolve review comments	2025-04-17 00:22:13 +02:00
Nasreddine Bencherchali	97800f4fdb	Merge branch 'develop' into csftd_first_batch	2025-04-16 20:19:57 +02:00
Nasreddine Bencherchali	56cc3f5928	update fields to cim and add output fields	2025-04-16 19:57:13 +02:00
Patrick Bareiss	06f39d9906	Merge branch 'detection_bug_fix' of github.com:splunk/security_content into detection_bug_fix	2025-04-16 13:42:25 +02:00
Patrick Bareiss	f00967835c	improvements detection	2025-04-16 13:42:06 +02:00
Bhavin Patel	3aa4e698dd	Merge branch 'develop' into csftd_first_batch	2025-04-15 15:53:13 -07:00
Bhavin Patel	b175e03111	Update windows_registry_payload_injection.yml	2025-04-15 08:51:06 -07:00
Bhavin Patel	28dcd19759	Merge branch 'develop' into detection_bug_fix	2025-04-15 08:45:02 -07:00
Patrick Bareiss	63bf81a08f	bump version	2025-04-15 09:17:17 +02:00
Patrick Bareiss	318f15ce7d	bug fix detection Windows Registry Payload Injection	2025-04-15 09:05:50 +02:00
ljstella	ce3755b4d8	Add registry_path	2025-04-10 11:56:28 -05:00
ljstella	23f0df3e96	Date & Version bump	2025-04-10 11:07:16 -05:00
ljstella	8020e90e6d	Add output fields, tighten up outputs	2025-04-10 11:05:36 -05:00
Nasreddine Bencherchali	953c8d59da	Merge branch 'develop' into csftd_first_batch	2025-04-09 16:34:47 +02:00
Nasreddine Bencherchali	2392ffd68d	Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml	2025-04-08 17:12:31 +02:00
Bhavin Patel	89ea90a820	Merge branch 'develop' into jp_paranoid	2025-04-03 12:52:41 -07:00
Bhavin Patel	39ce057227	fix dd	2025-04-03 12:18:53 -07:00
Nasreddine Bencherchali	53e3105db8	Merge branch 'develop' into csftd_first_batch	2025-04-03 20:59:14 +02:00
Bhavin Patel	f1561e6173	Merge branch 'develop' into jp_paranoid	2025-04-03 10:46:23 -07:00
Bhavin Patel	49d75bbc36	Merge branch 'develop' into firewall_win_events	2025-04-03 10:44:21 -07:00
Bhavin Patel	6b1ad9369a	revert powershell change and use fillnull	2025-04-03 09:10:34 -07:00
Nasreddine Bencherchali	25dae36d17	Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml	2025-04-03 17:19:17 +02:00
Nasreddine Bencherchali	d2a7f6faf8	fix typo in count	2025-04-03 16:28:27 +02:00
Nasreddine Bencherchali	2d5a194803	remove filter error	2025-04-03 15:04:12 +02:00
Nasreddine Bencherchali	20275c2f10	rename files	2025-04-03 15:02:45 +02:00
Nasreddine Bencherchali	a8c4f40a9a	update attack data source	2025-04-03 14:58:26 +02:00
Nasreddine Bencherchali	cbe3aa7923	update rba and filter macros	2025-04-03 14:47:30 +02:00
Nasreddine Bencherchali	c156e2bb8d	update macro name	2025-04-03 14:26:51 +02:00
Nasreddine Bencherchali	0f084c4fb7	update lookup name	2025-04-03 14:24:53 +02:00
Nasreddine Bencherchali	f39a6d9a50	cisco secure firewall detections - first batch	2025-04-03 14:21:27 +02:00
Bhavin Patel	0212a445f6	Merge branch 'develop' into jp_paranoid	2025-04-02 15:04:07 -07:00
Bhavin Patel	ae45debc8b	Merge branch 'develop' into firewall_win_events	2025-04-02 14:47:40 -07:00
Bhavin Patel	43abc9471f	Merge branch 'develop' into medusa_ransomware	2025-04-02 14:28:10 -07:00
Bhavin Patel	70a04d7ca0	Merge branch 'develop' into firewall_win_events	2025-04-02 13:23:42 -07:00
Bhavin Patel	0d93ce9c0b	updating conflicts	2025-04-02 13:18:06 -07:00
Bhavin Patel	3bf27db466	updating data source and search since Path is not availble in this dataset	2025-04-02 12:58:26 -07:00
Bhavin Patel	23219463dc	Merge branch 'develop' into jp_paranoid	2025-04-02 12:07:51 -07:00
Bhavin Patel	f8d1d71db9	Merge branch 'develop' into medusa_ransomware	2025-04-02 11:22:19 -07:00
Bhavin Patel	7dabc2680f	Merge branch 'develop' into rceattack	2025-04-02 11:06:00 -07:00
Bhavin Patel	9493465161	adding new required fields to the new detections and fixing conflicts	2025-04-02 11:03:34 -07:00
Bhavin Patel	f03979077a	Merge branch 'develop' into rceattack	2025-04-01 15:47:23 -07:00
Bhavin Patel	c407bb8aa0	Merge branch 'develop' into jp_paranoid	2025-04-01 15:46:14 -07:00
Bhavin Patel	a679c2e510	Merge branch 'develop' into medusa_ransomware	2025-04-01 14:52:23 -07:00
Bhavin Patel	e6db474205	two new Mike detection fixes	2025-04-01 14:51:22 -07:00
Bhavin Patel	00253f3c6e	Merge branch 'develop' into output_normalization_endpoint	2025-04-01 14:45:19 -07:00
Bhavin Patel	72e2438196	Merge branch 'develop' into rceattack	2025-04-01 14:34:38 -07:00