Commit Graph

1207 Commits

Author SHA1 Message Date
Bhavin Patel 96bd1501b6 update inspect failures 2025-03-27 10:54:24 -07:00
Bhavin Patel 1e1700cd4d Merge branch 'develop' into output_normalization_endpoint 2025-03-26 10:04:43 -07:00
Bhavin Patel 63380103e5 udpate date format 2025-03-25 12:07:17 -07:00
Bhavin Patel 87eeec65a6 updating dates and verrsion 2025-03-25 11:21:38 -07:00
Patrick Bareiss 641c590df7 Merge branch 'develop' into output_normalization_endpoint 2025-03-19 15:10:33 +01:00
P4T12ICK f243d22f61 Merge branch 'develop' into output_normalization_o365 2025-03-19 15:02:08 +01:00
Bhavin Patel ea3fa4daf6 updating search 2025-03-18 14:52:30 -07:00
Patrick Bareiss 81e0801829 rerun CI 2025-03-18 13:55:20 +01:00
Patrick Bareiss 3122cbbc8b output improvements 2025-03-18 12:56:30 +01:00
Patrick Bareiss 33461bfe7c improvements 2025-03-18 08:13:17 +01:00
P4T12ICK 029788ae05 Merge branch 'develop' into output_normalization_o365 2025-03-18 08:09:11 +01:00
Patrick Bareiss 8415182547 improvements 2025-03-18 08:08:43 +01:00
Bhavin Patel 3819c6864d updating detections 2025-03-17 19:14:58 -07:00
Bhavin Patel 276d45b485 Merge branch 'develop' into nterl0k-T1552-sus-o365-searches 2025-03-17 16:47:27 -07:00
Patrick Bareiss 136df93521 Merge branch 'develop' into output_normalization_o365 2025-03-17 19:33:08 +01:00
Patrick Bareiss a0d8dff5c4 O365 output normalization 2025-03-17 19:29:23 +01:00
Patrick Bareiss 850a172af4 bug fix 2025-03-17 13:02:18 +01:00
Patrick Bareiss 13f692c052 version bump 2025-03-17 12:28:56 +01:00
Patrick Bareiss 1120cea9a0 Improve data source validation 2025-03-17 12:24:08 +01:00
Patrick Bareiss 18eded0a7c bump version 2025-03-14 14:12:58 +01:00
Patrick Bareiss a7f5db9f55 Merge branch 'develop' into output_normalization_endpoint 2025-03-14 14:05:39 +01:00
Bhavin Patel 34dc8eb775 Merge branch 'develop' into output_normalization_azure_ad 2025-03-13 12:08:26 -07:00
Bhavin Patel 9b112cabc6 Merge branch 'develop' into output_normalization_aws 2025-03-13 11:10:04 -07:00
Patrick Bareiss abf3c5f1d9 improvements 2025-03-13 11:49:06 +01:00
Bhavin Patel dad3892103 Merge branch 'develop' into output_normalization_azure_ad 2025-03-12 09:54:45 -07:00
Steven Dick 2332b3cc9a Merge branch 'splunk:develop' into nterl0k-T1552-sus-o365-searches 2025-03-12 08:00:44 -04:00
Bhavin Patel 60ba75f2a8 Merge branch 'develop' into nterl0k-T1552-sus-o365-searches 2025-03-11 13:25:48 -07:00
Bhavin Patel d5feba1042 drilldown update- minor 2025-03-11 13:22:04 -07:00
P4T12ICK 1f3447817f Merge branch 'develop' into output_normalization_aws 2025-03-11 12:01:45 +01:00
Bhavin Patel 6ff8fe0fb3 Merge branch 'develop' into susmailrule 2025-03-07 09:26:12 -08:00
Simon ce6d61a75b Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml 2025-03-03 13:35:26 +01:00
P4T12ICK da8a7a2816 Merge branch 'develop' into output_normalization_aws 2025-03-03 08:17:01 +01:00
☕️ ff7729e418 Merge branch 'develop' into susmailrule 2025-03-01 01:10:19 +00:00
research-bot d813729588 updating test section as both dataset need to be indexed together 2025-02-28 14:29:32 -08:00
Bhavin Patel cf52e66778 Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions 2025-02-28 11:52:31 -08:00
Steven Dick 1e9a8c8f20 Update o365_email_suspicious_search_behavior.yml 2025-02-27 12:10:30 -05:00
Steven Dick 65c66a4270 Update o365_sharepoint_suspicious_search_behavior.yml 2025-02-27 12:07:13 -05:00
Steven Dick 9ca5564475 Update o365_email_suspicious_search_behavior.yml 2025-02-27 12:05:57 -05:00
Steven Dick 6961c6ced2 Add files via upload 2025-02-27 11:43:30 -05:00
Steven Dick 098daaf440 Update o365_sharepoint_suspicious_search_behavior.yml 2025-02-27 10:43:47 -05:00
P4T12ICK 736b3e0d19 Merge branch 'develop' into output_normalization_azure_ad 2025-02-27 09:59:22 +01:00
P4T12ICK fd9c3f69c5 Merge branch 'develop' into output_normalization_aws 2025-02-27 09:59:00 +01:00
0xC0FFEEEE 9d23cc4bf0 simplify SPL & add threat object 2025-02-27 07:35:08 +00:00
Bhavin Patel aedca3278e Merge branch 'develop' into susmailrule 2025-02-26 12:20:29 -08:00
Patrick Bareiss 96ca892fe8 version bump 2025-02-26 11:42:57 +01:00
Patrick Bareiss abcf1ed6e1 Merge branch 'develop' into output_normalization_o365 2025-02-26 11:35:55 +01:00
Patrick Bareiss 994b3b4c85 version bump 2025-02-26 11:28:39 +01:00
Patrick Bareiss f8b26a77d2 Merge branch 'develop' into output_normalization_azure_ad 2025-02-26 11:21:21 +01:00
Patrick Bareiss 7949424e02 uuid change 2025-02-26 11:15:03 +01:00
Patrick Bareiss dced585421 Merge branch 'output_normalization_aws' of github.com:splunk/security_content into output_normalization_aws 2025-02-26 11:11:16 +01:00