 Bhavin Patel
|
a33eccd846
|
wrong space
|
2025-02-18 15:34:23 -08:00 |
|
|
Bhavin Patel
|
e2863ae378
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-18 09:03:42 -08:00 |
|
|
Bhavin Patel
|
a11c4b1655
|
Merge pull request #3306 from splunk/app_dynamics_alerts
Cisco Secure Application Alerts
|
2025-02-18 08:58:42 -08:00 |
|
|
Bhavin Patel
|
3a5f6d613e
|
Merge branch 'develop' into app_dynamics_alerts
|
2025-02-18 08:30:01 -08:00 |
|
|
Bhavin Patel
|
9ae1c7acff
|
kfp
|
2025-02-18 08:13:55 -08:00 |
|
|
Patrick Bareiss
|
3563fdd417
|
Merge branch 'develop' into github_detections_improvement
|
2025-02-18 09:38:19 +01:00 |
|
|
Bhavin Patel
|
2ba144b959
|
Update cisco_secure_application_alerts.yml
|
2025-02-14 12:06:20 -08:00 |
|
|
Bhavin Patel
|
ec7faddb31
|
Merge pull request #3335 from splunk/TA-update-176
Update Crowdstrike TA
|
2025-02-14 10:52:02 -08:00 |
|
|
ljstella
|
5e0b1d66e4
|
Update crowdstrike TA
|
2025-02-14 10:06:20 -06:00 |
|
|
research-bot
|
3bb8618ac2
|
updating as per Lou's feedback
|
2025-02-13 15:57:49 -08:00 |
|
|
Bhavin Patel
|
d5f3bf613f
|
Add manual_test flag
|
2025-02-13 12:24:36 -08:00 |
|
|
Bhavin Patel
|
0392bfe9c0
|
Update cisco_secure_application_alerts.yml
|
2025-02-13 11:48:16 -08:00 |
|
|
Bhavin Patel
|
690874895b
|
Merge branch 'develop' into app_dynamics_alerts
|
2025-02-13 11:15:10 -08:00 |
|
|
Bhavin Patel
|
bc334de270
|
Merge pull request #3283 from nterl0k/nterl0k-t1200-sysmon-usb-use-execution
Nterl0k - T1200 - Are you down with USB ?
|
2025-02-13 09:58:26 -08:00 |
|
|
Bhavin Patel
|
425daf1031
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-13 09:26:11 -08:00 |
|
|
Bhavin Patel
|
e9a9b6adea
|
Merge pull request #3322 from nterl0k/nterl0k-rmm-lookup-update-20250210
Nterl0k - RMM Lookup Update 20250210
|
2025-02-13 09:01:31 -08:00 |
|
|
Bhavin Patel
|
39a5e611f4
|
Merge branch 'develop' into nterl0k-rmm-lookup-update-20250210
|
2025-02-13 08:41:54 -08:00 |
|
|
Bhavin Patel
|
e1b7aa4470
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-13 08:24:33 -08:00 |
|
|
Bhavin Patel
|
0786bf242e
|
Merge pull request #3331 from splunk/labeler-update
Add baselines to labeler
|
2025-02-13 08:23:41 -08:00 |
|
|
ljstella
|
057a3e4669
|
Add baselines to labeler
|
2025-02-13 09:26:43 -06:00 |
|
|
Bhavin Patel
|
e8c660f6a5
|
Merge pull request #3323 from splunk/remove_type_and_subtype
Clean up MITRE Tagging
|
2025-02-12 16:12:42 -08:00 |
|
|
pyth0n1c
|
de03cdd631
|
Merge branch 'develop' into remove_type_and_subtype
|
2025-02-12 16:09:20 -08:00 |
|
|
Bhavin Patel
|
b968f68437
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-12 16:05:31 -08:00 |
|
|
Bhavin Patel
|
02967574c4
|
Merge pull request #3329 from splunk/inspect_stacktype
upating appinspect command
|
2025-02-12 16:04:46 -08:00 |
|
|
pyth0n1c
|
18fea98e80
|
Merge branch 'develop' into remove_type_and_subtype
|
2025-02-12 16:04:25 -08:00 |
|
|
Bhavin Patel
|
c124468ab7
|
Merge branch 'develop' into inspect_stacktype
|
2025-02-12 15:53:48 -08:00 |
|
|
research-bot
|
903bfe6de5
|
upating appinspect command
|
2025-02-12 15:41:03 -08:00 |
|
|
Bhavin Patel
|
74cc88f29a
|
Merge branch 'develop' into nterl0k-rmm-lookup-update-20250210
|
2025-02-12 15:36:34 -08:00 |
|
|
Bhavin Patel
|
1d30f2f983
|
Merge branch 'develop' into nterl0k-t1200-sysmon-usb-use-execution
|
2025-02-12 12:42:45 -08:00 |
|
|
Bhavin Patel
|
3aef81e0e1
|
Merge pull request #3327 from splunk/slack_change
Slack link change
|
2025-02-12 12:41:32 -08:00 |
|
|
research-bot
|
af6077f5f0
|
updating spl
|
2025-02-12 12:25:10 -08:00 |
|
|
Lou Stella
|
c0a5ff84bd
|
Merge branch 'develop' into slack_change
|
2025-02-12 12:33:14 -06:00 |
|
|
ljstella
|
529121c01d
|
mend
|
2025-02-12 12:32:33 -06:00 |
|
|
ljstella
|
19242f51b9
|
Reword README
|
2025-02-12 12:31:34 -06:00 |
|
|
ljstella
|
0954e0c1a0
|
Slack link change
|
2025-02-12 12:08:17 -06:00 |
|
|
Steven Dick
|
370db3a337
|
Update and rename windows_detect_wpdbusenum_registry_key_modification.yml to windows_wpdbusenum_registry_key_modification.yml
|
2025-02-12 08:08:54 -05:00 |
|
|
Steven Dick
|
90865c04a3
|
Update and rename windows_detect_usbstor_registry_key_modification.yml to windows_usbstor_registry_key_modification.yml
|
2025-02-12 08:08:19 -05:00 |
|
|
Steven Dick
|
27c097d5de
|
Update and rename windows_detect_process_executed_from_removable_media.yml to windows_process_executed_from_removable_media.yml
|
2025-02-12 08:07:45 -05:00 |
|
|
Steven Dick
|
68d85a24e6
|
Update windows_detect_process_executed_from_removable_media.yml
|
2025-02-12 08:03:17 -05:00 |
|
|
pyth0n1c
|
b9f5735bd3
|
Merge branch 'develop' into remove_type_and_subtype
|
2025-02-11 15:38:08 -08:00 |
|
|
Bhavin Patel
|
5cabf43635
|
Merge pull request #3275 from splunk/rdp_brute
RDP bruteforce - production!
|
2025-02-11 10:27:04 -08:00 |
|
|
Bhavin Patel
|
471b49044f
|
version
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:05:52 -08:00 |
|
|
Bhavin Patel
|
a7cc4a8602
|
Merge branch 'develop' into rdp_brute
|
2025-02-11 10:04:33 -08:00 |
|
|
Bhavin Patel
|
15d12b81ee
|
Update detections/network/windows_remote_desktop_network_bruteforce_attempt.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:04:24 -08:00 |
|
|
Bhavin Patel
|
8e0c230a81
|
Update detections/deprecated/remote_desktop_network_bruteforce.yml
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
|
2025-02-11 10:03:58 -08:00 |
|
|
Bhavin Patel
|
59b99a0974
|
Merge pull request #3280 from nterl0k/nterl0k-t1114.003-o365-transport-rule-change
Nterl0k - T1114.003 O365 Transport Rule Changed
|
2025-02-11 08:59:31 -08:00 |
|
|
Bhavin Patel
|
f3e0d875e0
|
Merge branch 'develop' into nterl0k-t1114.003-o365-transport-rule-change
|
2025-02-11 08:42:28 -08:00 |
|
|
Bhavin Patel
|
25af0925e6
|
rba message
|
2025-02-11 08:41:18 -08:00 |
|
|
Bhavin Patel
|
56c4d19ea1
|
Merge pull request #3291 from splunk/analytics_enhancement
analytics_enhancement
|
2025-02-10 14:22:26 -08:00 |
|
|
Bhavin Patel
|
0468dff0a3
|
Merge branch 'develop' into analytics_enhancement
|
2025-02-10 14:02:47 -08:00 |
|