Commit Graph

24123 Commits

Author SHA1 Message Date
ljstella 8a59b330ae Missed cloud 2024-08-19 10:32:38 -05:00
ljstella 15fe84c83a missed cloud 2024-08-19 10:32:26 -05:00
ljstella 6d7c0b0405 missed deprecated 2024-08-19 10:31:55 -05:00
ljstella d09afdc417 missed endpoints 2024-08-19 10:31:28 -05:00
ljstella 9eafedf32c Missed version and date updates 2024-08-16 08:41:51 -05:00
ljstella e0b44b170d Web detections 2024-08-15 15:38:32 -05:00
ljstella 638c176a44 network detections 2024-08-15 15:38:15 -05:00
ljstella 2b40bbedbd Deprecated Detections 2024-08-15 15:37:43 -05:00
ljstella 3e9684660f Endpoint detections 2024-08-15 15:36:03 -05:00
ljstella 1c56182e6a Moving file back to where it belongs 2024-08-14 13:45:21 -05:00
Bhavin Patel 9c32f8b6a6 Branch was auto-updated. 2024-08-13 13:38:11 -07:00
pyth0n1c 9f85603faa Merge pull request #3091 from splunk/mark_crowdstrike_manual_test
Marked two detections as manual_test
v4.38.0
2024-08-13 13:37:51 -07:00
pyth0n1c b41c8c2902 Fixed naming of fields 2024-08-13 13:28:52 -07:00
pyth0n1c 1ccdc3c0e9 Marked two detections as manual_test. There is an issue tracking this internally tracked 2024-08-13 13:17:28 -07:00
Bhavin Patel 20e336f486 Branch was auto-updated. 2024-08-13 11:35:55 -07:00
Lou Stella 1e3aa4541e Merge pull request #3090 from splunk/indexequalstar
Update linux_hosts.yml
2024-08-13 13:35:38 -05:00
Michael Haag 78fb540ca0 Update linux_hosts.yml 2024-08-13 09:34:53 -06:00
Bhavin Patel 40b69a15d1 Branch was auto-updated. 2024-08-12 11:58:40 -07:00
pyth0n1c 26ef46dbbc A baseline referenced a detection
incorrectly. Remove the reference 
to that detection.
2024-08-12 11:58:27 -07:00
Bhavin Patel e78fdd7761 Branch was auto-updated. 2024-08-09 14:25:18 -07:00
pyth0n1c ef2489aa9a Merge pull request #3088 from splunk/fix_missing_fields
add missing version and id fields to story
2024-08-09 14:24:59 -07:00
pyth0n1c 97ad5a62b6 add missing version and id fields to story 2024-08-08 17:26:28 -07:00
Bhavin Patel 53c921a2c2 Branch was auto-updated. 2024-08-08 06:20:12 -07:00
P4T12ICK fc2c1507b2 Merge pull request #3087 from splunk/auditd_data_source
auditd_data_source
2024-08-08 15:19:49 +02:00
tccontre f16501ec86 auditd_data_source 2024-08-08 15:06:44 +02:00
tccontre d0b5537cc5 auditd_data_source 2024-08-08 15:00:58 +02:00
Br3akp0int 35e2f0d0cc Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml 2024-08-08 14:56:03 +02:00
Br3akp0int 98b7916636 Rename Linux_Auditd_Service_Stop.yml to linux_auditd_service_stop.yml 2024-08-08 14:55:44 +02:00
Br3akp0int 8ebc697d5f Rename Linux_Auditd_Proctitle.yml to linux_auditd_proctitle.yml 2024-08-08 14:55:24 +02:00
Br3akp0int d1f13df7c5 Rename Linux_Auditd_Path.yml to linux_auditd_path.yml 2024-08-08 14:55:03 +02:00
Br3akp0int 65df507595 Rename Linux_Auditd_Execve.yml to linux_auditd_execve.yml 2024-08-08 14:54:44 +02:00
Br3akp0int 250ff001f2 Rename Linux_Auditd_Add_User.yml to linux_auditd_add_user.yml 2024-08-08 14:54:21 +02:00
tccontre 89902ee34b auditd_data_source 2024-08-08 14:47:22 +02:00
Bhavin Patel bba1d57ae3 Branch was auto-updated. 2024-08-07 14:08:13 -07:00
Bhavin Patel 883729353d Merge pull request #3085 from splunk/risk_message_validation
Updating risk_message
2024-08-07 14:07:54 -07:00
Bhavin Patel c0755594e0 Merge branch 'develop' into risk_message_validation 2024-08-07 12:51:53 -07:00
Bhavin Patel 201b46252f updating risk_message 2024-08-07 12:50:29 -07:00
Bhavin Patel 0d7576cfaf Branch was auto-updated. 2024-08-07 12:24:39 -07:00
Bhavin Patel d067238e4c Merge pull request #3084 from splunk/data_source_bug_fix
Data Source Bug Fix
2024-08-07 12:24:23 -07:00
Bhavin Patel 8ae1bf2eaa Branch was auto-updated. 2024-08-07 12:12:29 -07:00
Bhavin Patel c3506341bc Branch was auto-updated. 2024-08-07 12:12:25 -07:00
Bhavin Patel 865d52592d Merge pull request #2999 from nterl0k/nterl0k-o365-azure-workload-1
Nterl0k [T1098]  - O365 Azure Workload things
2024-08-07 12:12:06 -07:00
ljstella 5f30d2989b Remove old version 2024-08-07 13:34:36 -05:00
Lou Stella 863813645f Merge branch 'develop' into nterl0k-o365-azure-workload-1 2024-08-07 13:31:17 -05:00
ljstella 0091d78210 Account for new name 2024-08-07 13:30:26 -05:00
ljstella f01f6957f9 Updating datestamp 2024-08-07 13:29:34 -05:00
ljstella ca30ffcc40 Updating lookup name 2024-08-07 13:20:21 -05:00
Patrick Bareiss 9ce5478271 Data Source Bug Fix 2024-08-07 16:21:33 +02:00
Bhavin Patel f1b5ff7653 Branch was auto-updated. 2024-08-05 17:51:33 -07:00
Bhavin Patel b91c4ece95 Merge pull request #2979 from nterl0k/nterl0k-T1110.003-NTLM-bruteforce
Nterl0k - T1110.003 NTLM Bruteforce
2024-08-05 17:51:18 -07:00