 Gowthamaraj rajendran
|
9edfbeeb89
|
Update detections/cloud/azure_ad_multiple_failed_mfa_requests_for_user.yml
|
2023-08-17 13:46:12 -07:00 |
|
|
mvelazco
|
f6047aca62
|
fixing issues
|
2023-08-17 14:54:29 -04:00 |
|
|
mvelazco
|
7ff518faa4
|
update query
|
2023-08-17 14:48:25 -04:00 |
|
|
mvelazco
|
47fbcfd21b
|
update message
|
2023-08-17 14:46:46 -04:00 |
|
|
srv-rr-gh-researchbt
|
78faa909fb
|
Branch was auto-updated.
|
2023-08-07 14:22:06 -07:00 |
|
|
Bhavin Patel
|
a474fb4456
|
Update o365_added_service_principal.yml
|
2023-08-07 14:02:36 -07:00 |
|
|
Bhavin Patel
|
4c76d950f8
|
Update o365_added_service_principal.yml
|
2023-08-07 14:01:06 -07:00 |
|
|
Bhavin Patel
|
8b4de41253
|
update mode ongit add .
|
2023-08-07 13:52:27 -07:00 |
|
|
Bhavin Patel
|
424ce1f1c5
|
Update o365_new_federated_domain_added.yml
|
2023-08-07 13:03:40 -07:00 |
|
|
Bhavin Patel
|
caf4ce8fdb
|
updates
|
2023-08-07 12:58:36 -07:00 |
|
|
mvelazco
|
95f96a241b
|
updating descriptions
|
2023-08-03 16:36:36 -04:00 |
|
|
Gowthamaraj rajendran
|
e89fbc49fc
|
Update detections/cloud/azure_active_directory_high_risk_sign_in.yml
|
2023-08-03 09:54:39 -07:00 |
|
|
srv-rr-gh-researchbt
|
5292dc65f2
|
Branch was auto-updated.
|
2023-08-02 16:49:17 -07:00 |
|
|
pyth0n1c
|
583b60d911
|
Fixing 'null' name field to src_ip
|
2023-08-02 14:33:48 -07:00 |
|
|
srv-rr-gh-researchbt
|
4c8b34be57
|
Branch was auto-updated.
|
2023-08-02 10:29:10 -07:00 |
|
|
Bhavin Patel
|
6e983e5abe
|
Update o365_new_federated_domain_added.yml
|
2023-08-02 08:56:14 -07:00 |
|
|
Bhavin Patel
|
ebcbbd4261
|
Update o365_excessive_sso_logon_errors.yml
|
2023-08-02 08:55:42 -07:00 |
|
|
Bhavin Patel
|
97241fca89
|
Update o365_added_service_principal.yml
|
2023-08-02 08:55:25 -07:00 |
|
|
Gowthamaraj rajendran
|
8f69530eb0
|
Update detections/cloud/azure_ad_user_immutableid_attribute_updated.yml
|
2023-08-01 11:10:55 -07:00 |
|
|
Gowthamaraj rajendran
|
4dbbfbaf7c
|
Update detections/cloud/azure_ad_multiple_failed_mfa_requests_for_user.yml
|
2023-07-31 15:18:14 -07:00 |
|
|
Gowthamaraj rajendran
|
79935e6668
|
Update detections/cloud/azure_ad_successful_powershell_authentication.yml
|
2023-07-31 14:30:48 -07:00 |
|
|
Gowthamaraj rajendran
|
38698912d7
|
Update detections/cloud/azure_ad_authentication_failed_during_mfa_challenge.yml
|
2023-07-27 09:32:32 -07:00 |
|
|
Gowthamaraj rajendran
|
0ae61f3865
|
Update detections/cloud/azure_ad_successful_single_factor_authentication.yml
|
2023-07-27 09:03:54 -07:00 |
|
|
Gowthamaraj rajendran
|
6cc67285b1
|
Update 2 detections
1. Azure AD New Custom Domain Added
2. Azure AD New Federated Domain Added
|
2023-07-26 07:03:16 -07:00 |
|
|
tccontre
|
2cbe875ade
|
Update o365_new_federated_domain_added.yml
|
2023-07-25 20:14:50 +02:00 |
|
|
tccontre
|
3215e94a4d
|
Update o365_added_service_principal.yml
|
2023-07-25 20:03:31 +02:00 |
|
|
tccontre
|
55b7d4633a
|
Update o365_new_federated_domain_added.yml
|
2023-07-25 19:43:20 +02:00 |
|
|
Gowthamaraj rajendran
|
780e63d767
|
Merge branch 'TR-3196_AzureAD' of https://github.com/splunk/security_content into TR-3196_AzureAD
|
2023-07-24 09:56:56 -07:00 |
|
|
Gowthamaraj rajendran
|
d35835cb85
|
update datasets/attack_techniques/T1098.001/azure_ad_service_principal_credentials/azure_ad_service_principal_credentials.yml
|
2023-07-24 09:56:42 -07:00 |
|
|
srv-rr-gh-researchbt
|
3cd08287d3
|
Branch was auto-updated.
|
2023-07-24 09:41:37 -07:00 |
|
|
srv-rr-gh-researchbt
|
bb7fbca3b0
|
Branch was auto-updated.
|
2023-07-24 09:41:35 -07:00 |
|
|
Gowthamaraj rajendran
|
d517dc5df7
|
Update detections/cloud/azure_ad_user_enabled_and_password_reset.yml
|
2023-07-24 08:25:27 -07:00 |
|
|
Lou Stella
|
732c5c3631
|
Version bump
|
2023-07-24 10:07:26 -05:00 |
|
|
tccontre
|
c63002b3dc
|
Merge branch 'o365_fix_update' of github.com:splunk/security_content into o365_fix_update
|
2023-07-21 14:36:17 +02:00 |
|
|
tccontre
|
3908bc58e4
|
o365_fix_update
|
2023-07-21 12:42:47 +02:00 |
|
|
tccontre
|
81b1cb34b4
|
Update o365_new_federated_domain_added.yml
|
2023-07-20 11:23:10 +02:00 |
|
|
tccontre
|
2985bdbde8
|
Update o365_excessive_sso_logon_errors.yml
|
2023-07-20 10:51:51 +02:00 |
|
|
tccontre
|
0a2b30b556
|
o365_fix_update
|
2023-07-20 10:35:03 +02:00 |
|
|
srv-rr-gh-researchbt
|
2691278f6f
|
Branch was auto-updated.
|
2023-07-13 07:47:31 -07:00 |
|
|
Gowthamaraj rajendran
|
4b30b06446
|
Update detections/cloud/azure_ad_external_guest_user_invited.yml
|
2023-07-12 19:24:50 -07:00 |
|
|
Gowthamaraj rajendran
|
9a1678f470
|
Merge branch 'TR-3196_AzureAD' of https://github.com/splunk/security_content into TR-3196_AzureAD
|
2023-07-11 14:02:40 -07:00 |
|
|
Gowthamaraj rajendran
|
dd4ab337c5
|
Update the detection "Azure AD Multi-Factor Authentication Disabled"
Detection ID: 482dd42a-acfa-486b-a0bb-d6fcda27318e
|
2023-07-11 14:02:34 -07:00 |
|
|
srv-rr-gh-researchbt
|
75ed43411b
|
Branch was auto-updated.
|
2023-07-11 12:17:58 -07:00 |
|
|
srv-rr-gh-researchbt
|
86079e9ec8
|
Branch was auto-updated.
|
2023-07-11 12:17:57 -07:00 |
|
|
Bhavin Patel
|
fcf20c818f
|
Update o365_add_app_role_assignment_grant_user.yml
|
2023-07-11 14:08:38 -05:00 |
|
|
tccontre
|
0db4e4e3d9
|
o365_fix
|
2023-07-05 10:13:35 +02:00 |
|
|
Gowthamaraj rajendran
|
fe159f03af
|
Update 3 detections
require update because of missing an edit
|
2023-06-29 12:57:55 -07:00 |
|
|
Gowthamaraj rajendran
|
3ae03bf887
|
update T1098.003/azure_ad_assign_privileged_role/azure-audit.log
Update SPL due to Log syntax change
|
2023-06-28 15:57:43 -07:00 |
|
|
pyth0n1c
|
22eb90a78f
|
Bump detection versions because their
underlying lookups have been updated
to deal with previous formatting issues.
|
2023-06-27 12:43:09 -07:00 |
|
|
srv-rr-gh-researchbt
|
f240794129
|
Branch was auto-updated.
|
2023-06-22 16:49:24 -07:00 |
|