Commit Graph

19730 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt be637cb05c Branch was auto-updated. 2023-05-01 11:59:01 -07:00
mvelazco 3907ef5572 Merge pull request #2635 from splunk/schedule_mltk
fix MLTK scheduling
2023-05-01 14:58:41 -04:00
srv-rr-gh-researchbt 0279d259bd Branch was auto-updated. 2023-05-01 11:44:42 -07:00
srv-rr-gh-researchbt 2821624441 Branch was auto-updated. 2023-05-01 11:44:40 -07:00
Bhavin Patel c22fc6b876 Merge pull request #2636 from splunk/RIR
Create active_directory_lateral_movement_identified.yml
2023-05-01 11:44:04 -07:00
srv-rr-gh-researchbt ece9b376dd Branch was auto-updated. 2023-04-26 11:19:13 -07:00
srv-rr-gh-researchbt b2732ddd72 Branch was auto-updated. 2023-04-26 11:19:11 -07:00
srv-rr-gh-researchbt e87c3bc5f2 Branch was auto-updated. 2023-04-26 11:19:10 -07:00
Bhavin Patel 00d69b28d5 Merge pull request #2643 from splunk/yaml_create
adding required fields
2023-04-26 11:18:45 -07:00
srv-rr-gh-researchbt 2044b38acb Branch was auto-updated. 2023-04-26 10:59:54 -07:00
srv-rr-gh-researchbt 436a9304f7 Branch was auto-updated. 2023-04-26 10:59:51 -07:00
srv-rr-gh-researchbt f04ed15347 Branch was auto-updated. 2023-04-26 10:59:50 -07:00
srv-rr-gh-researchbt 05c9872651 Branch was auto-updated. 2023-04-26 10:59:49 -07:00
Bhavin Patel 6a96a3fe23 Merge pull request #2646 from splunk/ssa_gen_fix
removed sfc to normalize with 4.0.1
2023-04-26 10:59:13 -07:00
Lou Stella 20b851f643 removed sfc to normalize with 4.0.1 2023-04-26 09:12:44 -05:00
srv-rr-gh-researchbt 9e02e76ab5 Branch was auto-updated. 2023-04-25 16:58:58 -07:00
srv-rr-gh-researchbt b0f7198198 Branch was auto-updated. 2023-04-25 16:58:58 -07:00
srv-rr-gh-researchbt 8b2b09bb85 Branch was auto-updated. 2023-04-25 16:58:57 -07:00
srv-rr-gh-researchbt 00e861f8d3 Branch was auto-updated. 2023-04-25 16:58:50 -07:00
Bhavin Patel a002b14bbb Merge pull request #2641 from splunk/do_not_step_on_the_redline
do_not_step_on_the_redline
2023-04-25 16:58:32 -07:00
patel-bhavin 29c841b945 adding a field 2023-04-25 13:30:37 -07:00
tccontre 8fefd6a3f0 do_not_step_on_the_redline 2023-04-25 16:47:38 +02:00
srv-rr-gh-researchbt dd430eae7e Branch was auto-updated. 2023-04-20 13:09:36 -07:00
srv-rr-gh-researchbt dce60109ea Branch was auto-updated. 2023-04-20 13:09:35 -07:00
srv-rr-gh-researchbt ec0df44757 Branch was auto-updated. 2023-04-20 13:09:33 -07:00
research bot 16526a4b02 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-20 20:09:06 +00:00
srv-rr-gh-researchbt 530b312d1c Branch was auto-updated. 2023-04-20 12:18:32 -07:00
srv-rr-gh-researchbt a120e9b293 Branch was auto-updated. 2023-04-20 12:18:31 -07:00
srv-rr-gh-researchbt 2fb0e14deb Branch was auto-updated. 2023-04-20 12:18:30 -07:00
Lou Stella 9231773766 Merge pull request #2638 from splunk/TR-3094
[TR-3094] Removed sfc.exe, which has frequent collisions with AMP for Endpoints
v4.0.1
2023-04-20 14:17:15 -05:00
Lou Stella 838118f3ca version bump 2023-04-20 13:32:18 -05:00
Lou Stella e875bbafce Updated description for grammar 2023-04-20 12:54:02 -05:00
Lou Stella bc212909ec Removed sfc.exe, which has frequent collisions with AMP for Endpoints 2023-04-20 12:48:51 -05:00
Michael Haag ce7f5ffeb7 Create active_directory_lateral_movement_identified.yml 2023-04-19 12:37:17 -06:00
patel-bhavin a7338650fd fix scheduling 2023-04-18 16:38:53 -07:00
Lou Stella a328d91c94 Bump aws-actions/confgiure-aws-credentials version 2023-04-18 17:01:39 -05:00
research bot 7b6c1c5e0e Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-18 21:55:52 +00:00
Bhavin Patel e2c6c24bc9 Merge pull request #2633 from splunk/manual_test_flag
manual test
v4.0.0
2023-04-18 14:27:17 -07:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Bhavin Patel 2d98d82cf5 Merge pull request #2620 from splunk/blacklotus
BlackLotus Campaign
2023-04-18 12:41:48 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
Bhavin Patel 7ec528b892 Merge pull request #2632 from splunk/TR-3110
adding risk=other to all configs
2023-04-18 11:46:22 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00