8d5165ac31
bug fix
2024-12-12 16:46:10 +01:00
e82847c3c3
new asl aws detections
2024-12-12 16:42:52 +01:00
2b3ae5011a
bump versions
2024-12-12 10:33:40 +01:00
7b275e0369
bug fixes
2024-12-12 10:28:41 +01:00
959e6cc380
Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections
2024-12-12 10:25:14 +01:00
0b6e9fc610
bug fixes
2024-12-12 10:24:51 +01:00
e08a7c848c
Merge branch 'develop' into aws_asl_detections
2024-12-12 10:19:40 +01:00
649d084240
Improved ASL AWS detections
2024-12-12 10:17:35 +01:00
125d60c1e8
Merge pull request #3224 from krdmnbrk/patch-1
...
Update certutil_download_with_urlcache_and_split_arguments.yml
2024-12-11 11:45:31 -08:00
e2493fa1f1
Merge branch 'develop' into patch-1
2024-12-10 10:43:06 -08:00
49cbd01289
Merge pull request #3227 from splunk/linux_datasource_update
...
linux_datasource_update
2024-12-10 10:41:54 -08:00
e81c2e20c6
Branch was auto-updated.
2024-12-10 09:52:50 -08:00
8400a3619d
Merge pull request #3233 from splunk/fix-issues
...
fix #2996
2024-12-10 09:51:40 -08:00
0b501f73f0
Branch was auto-updated.
2024-12-09 09:18:59 -08:00
5f16fe4630
Branch was auto-updated.
2024-12-09 09:18:56 -08:00
badfb6b807
Merge pull request #3232 from splunk/auto-ta-update-109
...
Automated Splunk TA Update 109
2024-12-09 09:18:41 -08:00
6d020a74b1
fix #2996
2024-12-09 16:53:07 +01:00
a8c3ff9d91
Updated TAs
2024-12-09 06:58:01 +00:00
e3d5d0eeed
typo fix
2024-12-08 01:27:58 +01:00
2abd5c3211
Merge branch 'develop' into patch-1
2024-12-07 19:25:45 +01:00
c7c32f3045
update logic
2024-12-07 19:23:43 +01:00
acbeeb7f23
linux_datasource_update
2024-12-06 09:28:19 +01:00
300af51b88
Merge pull request #3225 from splunk/bump_version_4_44_0
...
Bump version 4 44 0
I am intentionally overriding the branch protection.
2024-12-03 13:59:48 -08:00
3a7575ca64
update default.meta to remove
...
stanzas that do not need to be
present. these stanzas cause
splunk to say it needs to be
restarted after escu is installed
2024-12-03 13:54:11 -08:00
23035523f0
bump version in prep for release
2024-12-03 13:14:56 -08:00
1e5c7993b9
Merge pull request #3213 from splunk/enhance_coverage
...
Enhancing Coverage - First Batch
2024-12-03 12:52:39 -08:00
00b84023f7
Branch was auto-updated.
2024-12-03 11:29:51 -08:00
eb24889a42
Merge pull request #3221 from splunk/meduza
...
meduza
2024-12-03 11:29:36 -08:00
d2ec1eece8
Branch was auto-updated.
2024-12-03 11:11:11 -08:00
bc28c09463
Branch was auto-updated.
2024-12-03 11:11:10 -08:00
81d745d3e7
Merge pull request #3223 from ronan182/patch-1
...
Update wget_download_and_bash_execution.yml
2024-12-03 11:10:52 -08:00
acb9b7c52d
Merge branch 'develop' into patch-1
2024-12-03 11:07:52 -08:00
6afbfae376
Branch was auto-updated.
2024-12-03 11:06:22 -08:00
b2afa2d420
Branch was auto-updated.
2024-12-03 11:06:21 -08:00
dcd3286dda
Merge pull request #3222 from splunk/chmodupdate
...
Update linux_auditd_file_permission_modification_via_chmod.yml
2024-12-03 11:06:06 -08:00
6ac12f9411
Merge branch 'meduza' of https://github.com/splunk/security_content into meduza
2024-12-03 11:01:24 -08:00
23c3243573
Change many ORs to IN to improve readability
2024-12-03 11:00:56 -08:00
5e47cf7d2d
Merge branch 'develop' into enhance_coverage
2024-12-03 19:27:17 +01:00
08587b7f08
small typo fixes
2024-12-03 19:24:13 +01:00
798c27c844
reference
2024-12-03 11:02:08 -07:00
bf53ace3d5
Merge branch 'develop' into patch-1
2024-12-03 18:59:58 +01:00
dcda82b90d
Update wget_download_and_bash_execution.yml
2024-12-03 18:58:11 +01:00
f4345f98e1
Update wget_download_and_bash_execution.yml
2024-12-03 18:24:52 +01:00
a51be65f26
Update wget_download_and_bash_execution.yml
2024-12-03 18:20:24 +01:00
8c0535b96d
Update certutil_download_with_urlcache_and_split_arguments.yml
...
It looks like the Processes.process=*urlcache* condition in the rule logic will override any (Processes.process=*urlcache* Processes.process=*split*) condition. I made a change as a suggestion, but you can check it out for the correct one.
2024-12-03 16:22:22 +03:00
932513676e
Branch was auto-updated.
2024-12-02 15:01:09 -08:00
79ba298221
Branch was auto-updated.
2024-12-02 15:01:07 -08:00
4be3cf9e63
Merge pull request #3216 from splunk/add_more_win_tag
...
add_more_win_tag
2024-12-02 15:00:45 -08:00
e7bd8b6d6a
Branch was auto-updated.
2024-12-02 14:18:43 -08:00
a6f9707561
Branch was auto-updated.
2024-12-02 14:18:43 -08:00
Patrick Bareiss