Commit Graph

25268 Commits

Author SHA1 Message Date
Patrick Bareiss 9d2be764a3 improvements 2025-01-15 16:03:42 +01:00
Patrick Bareiss 2917e24177 bug fix 2025-01-15 13:23:49 +01:00
Patrick Bareiss e6dae320c3 github detections 2025-01-15 11:40:53 +01:00
Patrick Bareiss a31b2d4ee1 Improve detection 2025-01-15 11:39:58 +01:00
Patrick Bareiss 2018be8947 bug fix 2025-01-15 11:07:35 +01:00
Patrick Bareiss b7298867d3 Deprecated old GItHub detections 2025-01-15 11:01:38 +01:00
Patrick Bareiss 701a621d3c Deprecated old GItHub detections 2025-01-15 10:58:13 +01:00
Patrick Bareiss 3b1b8c3633 Merge branch 'github_detections_improvement' of github.com:splunk/security_content into github_detections_improvement 2025-01-15 10:44:35 +01:00
Patrick Bareiss 7c61973899 bug fix 2025-01-15 10:44:08 +01:00
P4T12ICK e2ca497763 Merge branch 'develop' into github_detections_improvement 2025-01-15 10:42:30 +01:00
Patrick Bareiss e11c55b69b New GitHub Enterprise detections 2025-01-15 10:39:57 +01:00
Bhavin Patel fb66f8cba2 Merge pull request #3266 from splunk/dlux_5
Dlux 5 - AAD detection
2025-01-14 10:02:21 -08:00
Bhavin Patel fa2ba7c031 Branch was auto-updated. 2025-01-14 09:04:48 -08:00
Bhavin Patel c3689f0194 Merge pull request #3237 from splunk/aws_asl_detections
Improved ASL AWS detections
2025-01-14 09:04:24 -08:00
Patrick Bareiss 3d1fde609b Add ASL AWS CloudTrail data source 2025-01-14 16:47:25 +01:00
Bhavin Patel 416c239dce Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2
Nterl0k - T1219 - RMM Detection for Registry locations.
2025-01-14 16:42:52 +01:00
research-bot ff5a16bd97 updating data sources 2025-01-13 12:18:08 -08:00
Bhavin Patel d64e5c9063 Update o365_service_principal_privilege_escalation.yml 2025-01-13 10:36:45 -08:00
research-bot a3be9d47b9 minor udpates to yaml 2025-01-10 11:46:43 -08:00
Bhavin Patel 6b9161bcea Branch was auto-updated. 2025-01-10 07:03:33 -08:00
Bhavin Patel 6d724876b6 Branch was auto-updated. 2025-01-10 07:03:31 -08:00
Lou Stella c0f0f9506d Merge pull request #3274 from splunk/auto-ta-update-141
Automated Splunk TA Update 141
2025-01-10 09:03:16 -06:00
patel-bhavin 67de6175a9 Updated TAs 2025-01-10 06:57:41 +00:00
Bhavin Patel f890159c74 Branch was auto-updated. 2025-01-09 14:18:18 -08:00
Bhavin Patel 3937f26f84 Branch was auto-updated. 2025-01-09 14:18:17 -08:00
Bhavin Patel ede80f4395 Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2
Nterl0k - T1219 - RMM Detection for Registry locations.
2025-01-09 14:17:57 -08:00
Bhavin Patel 55d4936427 update token 2025-01-09 13:26:23 -08:00
Bhavin Patel c01f87071e Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-09 13:10:22 -08:00
Bhavin Patel 045cc1994b Branch was auto-updated. 2025-01-09 11:42:58 -08:00
Bhavin Patel a746db1270 Branch was auto-updated. 2025-01-09 11:42:53 -08:00
Lou Stella d2592c5deb Merge pull request #3270 from splunk/auto-ta-update-139
Automated Splunk TA Update 139
2025-01-09 13:42:36 -06:00
ljstella 1ce4f77a4c update description 2025-01-09 12:02:56 -06:00
Patrick Bareiss 848fb18717 improvements 2025-01-09 18:19:18 +01:00
ljstella 4b28335f82 retrigger 2025-01-09 11:12:57 -06:00
ljstella 02afa4f4cb Adding PSC 2025-01-09 11:08:49 -06:00
ljstella 5b8986469e Removed parens that was killing app installs 2025-01-09 10:39:47 -06:00
Patrick Bareiss 8b30dc3e15 change 2025-01-09 14:47:11 +01:00
Patrick Bareiss 87d2ca6225 Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections 2025-01-09 14:43:06 +01:00
Patrick Bareiss 4b37788f5a new detections 2025-01-09 14:42:38 +01:00
ljstella c591ef5ff7 Adding back two containers 2025-01-08 12:45:30 -06:00
ljstella a9129bf5e3 Testing single container 2025-01-08 12:40:39 -06:00
Bhavin Patel 4c65798689 Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-08 10:22:03 -08:00
Bhavin Patel 557fdeca89 Add manual_test flag 2025-01-08 10:21:40 -08:00
Bhavin Patel 62e5a6083f Branch was auto-updated. 2025-01-08 10:11:53 -08:00
Bhavin Patel c90858719d Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel 607494bfb8 Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel be3ab3c6ed Merge pull request #3255 from nterl0k/nterl0k-T1550-netexec-usage
Nterl0k - T1550 - NetExec Usage Detection
2025-01-08 10:11:36 -08:00
Bhavin Patel 5e58179a00 file name update 2025-01-08 10:09:48 -08:00
Patrick Bareiss dc3fdda537 new detection 2025-01-08 17:05:24 +01:00
Patrick Bareiss 197881f7fa bug fix 2025-01-08 14:32:56 +01:00