Commit Graph

26330 Commits

Author SHA1 Message Date
Bhavin Patel a7d24fb0f5 Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups 2025-02-28 15:41:17 -08:00
Bhavin Patel f0857d6fd7 Merge pull request #3292 from nterl0k/nterl0k-t1114-sus-o365-email-actions
Nterl0k - T1114 Suspect 0365 Email Actions
2025-02-28 15:27:13 -08:00
research-bot 6c5b29639b adding available fields for this data source 2025-02-28 14:33:02 -08:00
research-bot d813729588 updating test section as both dataset need to be indexed together 2025-02-28 14:29:32 -08:00
Steven Dick 03b79b651c Add files via upload 2025-02-28 15:58:44 -05:00
Steven Dick b59b41aece Merge branch 'splunk:develop' into nterl0k-t1114-sus-o365-email-actions 2025-02-28 15:50:16 -05:00
Bhavin Patel 489bcc427d Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups 2025-02-28 12:44:17 -08:00
Bhavin Patel 44c8147ba9 Merge pull request #3370 from splunk/auto-ta-update-190
Automated Splunk TA Update 190
2025-02-28 12:43:49 -08:00
Bhavin Patel cf52e66778 Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions 2025-02-28 11:52:31 -08:00
Lou Stella b4b0f8a30c Merge branch 'develop' into auto-ta-update-190 2025-02-28 13:48:25 -06:00
Bhavin Patel c254e91bde Merge pull request #3369 from splunk/dlux_6
Updating dcsync detection due to false positive
2025-02-28 11:43:02 -08:00
Bhavin Patel 8bd007e35b Merge branch 'develop' into dlux_6 2025-02-28 11:14:51 -08:00
Bhavin Patel f56cf8e2e4 revert 2025-02-28 11:14:12 -08:00
patel-bhavin ed4b0874da Updated TAs 2025-02-28 06:58:25 +00:00
dluxtron df04cd63c8 updating version and risk object 2025-02-28 12:06:04 +10:00
dluxtron 0923a79c49 updating version and risk object 2025-02-28 11:50:22 +10:00
Bhavin Patel 8a746596ba Merge pull request #3367 from splunk/auto-ta-update-189
Automated Splunk TA Update 189
2025-02-27 14:04:17 -08:00
Bhavin Patel a1eca2e737 Merge branch 'develop' into auto-ta-update-189 2025-02-27 11:02:24 -08:00
Bhavin Patel facaa0fbe8 Update linux_secure.yml to 9.2.0 2025-02-27 11:02:08 -08:00
Bhavin Patel 2eb9c03c27 Merge pull request #3352 from splunk/auditd_detection_updates
auditd_detection_updates
2025-02-27 10:13:29 -08:00
Teoderick Contreras 99871b5024 auditd_detection_updates 2025-02-27 10:36:29 +01:00
patel-bhavin b97bbac60d Updated TAs 2025-02-27 06:57:49 +00:00
dluxtron 19e1d51482 Updating detection 2025-02-27 16:44:11 +10:00
research-bot aabdf4f8f6 status deprecated 2025-02-26 16:21:16 -08:00
Bhavin Patel 4fe79f32ce Merge branch 'develop' into auditd_detection_updates 2025-02-26 13:54:51 -08:00
Bhavin Patel f0d60a471b Merge pull request #3365 from splunk/manual-ta-update-188
Manual TA Update 188
2025-02-26 12:20:07 -08:00
Bhavin Patel 52ad8c4ebb Merge branch 'develop' into auditd_detection_updates 2025-02-26 12:09:47 -08:00
ljstella 3dcc70d8e0 Weird formatting 2025-02-26 13:46:28 -06:00
ljstella c9a144b848 Merge branch 'develop' into manual-ta-update-188 2025-02-26 11:27:27 -06:00
Bhavin Patel a810c4e6bb Merge pull request #3278 from splunk/github_detections_improvement
GitHub detections improvement
2025-02-26 09:06:16 -08:00
ljstella 1583900581 GSuite TA Update 2025-02-26 09:34:57 -06:00
ljstella ed59b68532 o365 TA update 2025-02-26 09:34:22 -06:00
ljstella 6e9700b18d contentctl.yml update 2025-02-26 09:32:04 -06:00
P4T12ICK 83afe3223a Merge branch 'develop' into github_detections_improvement 2025-02-26 09:53:26 +01:00
P4T12ICK 6b6efd6752 Merge pull request #3357 from splunk/add_Data_source
Add data source objects
2025-02-26 09:50:21 +01:00
Teoderick Contreras fb67c4f6ce auditd_detection_updates 2025-02-26 09:40:27 +01:00
Teoderick Contreras b83eb77941 auditd_detection_updates 2025-02-26 09:36:14 +01:00
Patrick Bareiss e098dc93c2 version bump 2025-02-26 09:24:11 +01:00
P4T12ICK 2fd6a8fdb1 Merge branch 'develop' into add_Data_source 2025-02-26 09:15:07 +01:00
Bhavin Patel 01cfd66430 Merge branch 'develop' into github_detections_improvement 2025-02-25 12:24:59 -08:00
Bhavin Patel a3f20ac179 Merge pull request #3355 from splunk/installutil_improvement
Updating search output!
2025-02-25 12:11:55 -08:00
Bhavin Patel b2581a900a Merge branch 'develop' into installutil_improvement 2025-02-25 10:52:59 -08:00
research-bot 5204e68914 updating detection 2025-02-25 10:51:47 -08:00
Bhavin Patel de7f76de96 Merge pull request #3349 from 0xC0FFEEEE/curl_proxy_fix
0xC0FFEEEE - Improve Linux Proxy Socks Curl Detection
2025-02-25 10:30:59 -08:00
Bhavin Patel 85de9817c2 Merge branch 'develop' into curl_proxy_fix 2025-02-25 09:56:35 -08:00
Bhavin Patel c9ef436749 Merge pull request #3362 from splunk/auto_update_187
[chore] update AWS TA -> 7.9.1
2025-02-25 08:14:06 -08:00
Lou Stella d6f58a15f5 Merge branch 'develop' into auto_update_187 2025-02-25 08:45:48 -06:00
ljstella e060e96e58 [chore] update AWS TA -> 7.9.1 2025-02-25 08:44:06 -06:00
Lou Stella a1e4783098 Merge pull request #3353 from splunk/TA_Update_182
Manual Splunk TA Updated 182
2025-02-25 08:40:59 -06:00
Lou Stella fb466c980d Merge branch 'develop' into TA_Update_182 2025-02-25 08:15:22 -06:00