 Bhavin Patel
|
bebfe2e13e
|
updating lookups from latest mapping
|
2025-03-13 18:12:45 -07:00 |
|
|
Bhavin Patel
|
97395878e9
|
updating text
|
2025-03-13 17:42:27 -07:00 |
|
|
Bhavin Patel
|
5e02c6b38c
|
updating for nexus
|
2025-03-12 14:25:10 -07:00 |
|
|
Bhavin Patel
|
726dd93059
|
adding a reason for empty detections
|
2025-03-11 17:20:32 -07:00 |
|
|
Bhavin Patel
|
a1b3940ffc
|
Merge branch 'develop' into deprecated_mapping_update
|
2025-03-11 11:03:29 -07:00 |
|
|
Bhavin Patel
|
9b15a7b61a
|
Merge pull request #3376 from 0xC0FFEEEE/yourelinuxsilly
Windows Detections - Don't trigger on linux os
|
2025-03-07 10:59:55 -08:00 |
|
|
Bhavin Patel
|
6531b31f7f
|
Merge branch 'develop' into deprecated_mapping_update
|
2025-03-07 09:34:19 -08:00 |
|
|
Bhavin Patel
|
b3e768bf9e
|
Merge branch 'develop' into yourelinuxsilly
|
2025-03-07 09:24:56 -08:00 |
|
|
Bhavin Patel
|
d67548546b
|
Merge pull request #3383 from splunk/manual-ta-update-197
Manual TA Update 197
|
2025-03-07 09:24:43 -08:00 |
|
|
Bhavin Patel
|
21bbda556f
|
Merge branch 'develop' into yourelinuxsilly
|
2025-03-07 09:12:52 -08:00 |
|
|
Bhavin Patel
|
bd54cf4d58
|
updating file name of the app
|
2025-03-07 09:00:38 -08:00 |
|
|
ljstella
|
cea71371d7
|
Cisco AppDynamics v3.1.0
|
2025-03-07 08:54:05 -06:00 |
|
|
pyth0n1c
|
d86e766720
|
updated with missing content
|
2025-03-06 13:16:16 -08:00 |
|
|
pyth0n1c
|
78cc0c0f17
|
updated deprecation mapping again
|
2025-03-05 14:24:11 -08:00 |
|
|
pyth0n1c
|
4f4f87af9f
|
Add baselines, stories, and investigations to deprecation yml.
|
2025-03-04 13:42:37 -08:00 |
|
|
Bhavin Patel
|
8a2909b8f0
|
Merge pull request #3375 from shilch/patch-1
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-04 12:44:48 -08:00 |
|
|
Bhavin Patel
|
b09805c250
|
Merge branch 'develop' into patch-1
|
2025-03-04 10:35:03 -08:00 |
|
|
Bhavin Patel
|
ae64f202ed
|
Merge pull request #3332 from splunk/haagsqldb
🎪 Haag's SQL Server Story Time: Tales of SQLCMD and Suspicious Queries 📚
|
2025-03-04 10:34:33 -08:00 |
|
|
Bhavin Patel
|
6033082600
|
Merge branch 'develop' into haagsqldb
|
2025-03-04 10:12:52 -08:00 |
|
|
Michael Haag
|
42fbaba04e
|
Update windows_sqlservr_spawning_shell.yml
|
2025-03-04 09:57:53 -07:00 |
|
|
Bhavin Patel
|
3dbc72f978
|
Merge pull request #3378 from splunk/v5.1.1
Updating lookup 5.1.1
v5.1.1
|
2025-03-04 08:49:58 -08:00 |
|
|
Michael Haag
|
827a80b69d
|
datasource
|
2025-03-03 20:30:50 -07:00 |
|
|
research-bot
|
6e84f4cab9
|
updating lookup
|
2025-03-03 16:20:52 -08:00 |
|
|
0xC0FFEEEE
|
46db370f8b
|
increment version, update date
|
2025-03-03 22:33:47 +00:00 |
|
|
0xC0FFEEEE
|
228a01acc1
|
another one
|
2025-03-03 16:27:00 +00:00 |
|
|
0xC0FFEEEE
|
64de1e5953
|
Don't trigger on linux os
|
2025-03-03 15:30:23 +00:00 |
|
|
Simon
|
ce6d61a75b
|
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-03 13:35:26 +01:00 |
|
|
Bhavin Patel
|
f0857d6fd7
|
Merge pull request #3292 from nterl0k/nterl0k-t1114-sus-o365-email-actions
Nterl0k - T1114 Suspect 0365 Email Actions
|
2025-02-28 15:27:13 -08:00 |
|
|
research-bot
|
6c5b29639b
|
adding available fields for this data source
|
2025-02-28 14:33:02 -08:00 |
|
|
research-bot
|
d813729588
|
updating test section as both dataset need to be indexed together
|
2025-02-28 14:29:32 -08:00 |
|
|
Steven Dick
|
03b79b651c
|
Add files via upload
|
2025-02-28 15:58:44 -05:00 |
|
|
Steven Dick
|
b59b41aece
|
Merge branch 'splunk:develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 15:50:16 -05:00 |
|
|
Bhavin Patel
|
44c8147ba9
|
Merge pull request #3370 from splunk/auto-ta-update-190
Automated Splunk TA Update 190
|
2025-02-28 12:43:49 -08:00 |
|
|
Bhavin Patel
|
cf52e66778
|
Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 11:52:31 -08:00 |
|
|
Lou Stella
|
b4b0f8a30c
|
Merge branch 'develop' into auto-ta-update-190
|
2025-02-28 13:48:25 -06:00 |
|
|
Bhavin Patel
|
c254e91bde
|
Merge pull request #3369 from splunk/dlux_6
Updating dcsync detection due to false positive
|
2025-02-28 11:43:02 -08:00 |
|
|
Bhavin Patel
|
8bd007e35b
|
Merge branch 'develop' into dlux_6
|
2025-02-28 11:14:51 -08:00 |
|
|
Bhavin Patel
|
f56cf8e2e4
|
revert
|
2025-02-28 11:14:12 -08:00 |
|
|
patel-bhavin
|
ed4b0874da
|
Updated TAs
|
2025-02-28 06:58:25 +00:00 |
|
|
dluxtron
|
df04cd63c8
|
updating version and risk object
|
2025-02-28 12:06:04 +10:00 |
|
|
dluxtron
|
0923a79c49
|
updating version and risk object
|
2025-02-28 11:50:22 +10:00 |
|
|
Bhavin Patel
|
8a746596ba
|
Merge pull request #3367 from splunk/auto-ta-update-189
Automated Splunk TA Update 189
|
2025-02-27 14:04:17 -08:00 |
|
|
Bhavin Patel
|
a1eca2e737
|
Merge branch 'develop' into auto-ta-update-189
|
2025-02-27 11:02:24 -08:00 |
|
|
Bhavin Patel
|
facaa0fbe8
|
Update linux_secure.yml to 9.2.0
|
2025-02-27 11:02:08 -08:00 |
|
|
Bhavin Patel
|
2eb9c03c27
|
Merge pull request #3352 from splunk/auditd_detection_updates
auditd_detection_updates
|
2025-02-27 10:13:29 -08:00 |
|
|
Teoderick Contreras
|
99871b5024
|
auditd_detection_updates
|
2025-02-27 10:36:29 +01:00 |
|
|
patel-bhavin
|
b97bbac60d
|
Updated TAs
|
2025-02-27 06:57:49 +00:00 |
|
|
dluxtron
|
19e1d51482
|
Updating detection
|
2025-02-27 16:44:11 +10:00 |
|
|
research-bot
|
aabdf4f8f6
|
status deprecated
|
2025-02-26 16:21:16 -08:00 |
|
|
Bhavin Patel
|
4fe79f32ce
|
Merge branch 'develop' into auditd_detection_updates
|
2025-02-26 13:54:51 -08:00 |
|