 Bhavin Patel
|
bedb329097
|
updating content yaml to 5.4.0
|
2025-04-16 09:40:09 -07:00 |
|
|
Bhavin Patel
|
e79eb9e515
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-16 09:39:11 -07:00 |
|
|
Bhavin Patel
|
c25f1397d3
|
Merge pull request #3464 from splunk/detection_bug_fix
bug fix detection Windows Registry Payload Injection
|
2025-04-16 09:15:09 -07:00 |
|
|
Patrick Bareiss
|
06f39d9906
|
Merge branch 'detection_bug_fix' of github.com:splunk/security_content into detection_bug_fix
|
2025-04-16 13:42:25 +02:00 |
|
|
Patrick Bareiss
|
f00967835c
|
improvements detection
|
2025-04-16 13:42:06 +02:00 |
|
|
Bhavin Patel
|
cf30fce074
|
updating versions
|
2025-04-15 15:26:10 -07:00 |
|
|
Bhavin Patel
|
bf3fe8b361
|
remove yamls and update mapping
|
2025-04-15 15:19:48 -07:00 |
|
|
Bhavin Patel
|
b175e03111
|
Update windows_registry_payload_injection.yml
|
2025-04-15 08:51:06 -07:00 |
|
|
Bhavin Patel
|
28dcd19759
|
Merge branch 'develop' into detection_bug_fix
|
2025-04-15 08:45:02 -07:00 |
|
|
Bhavin Patel
|
1a084095d5
|
Merge pull request #3456 from splunk/TR-4095
Add output fields, tighten up outputs
|
2025-04-15 08:44:42 -07:00 |
|
|
Bhavin Patel
|
78d572d49e
|
Merge branch 'develop' into TR-4095
|
2025-04-15 08:20:06 -07:00 |
|
|
Patrick Bareiss
|
63bf81a08f
|
bump version
|
2025-04-15 09:17:17 +02:00 |
|
|
Patrick Bareiss
|
318f15ce7d
|
bug fix detection Windows Registry Payload Injection
|
2025-04-15 09:05:50 +02:00 |
|
|
Bhavin Patel
|
09640e8d10
|
Merge pull request #3454 from splunk/bump_yaml
updating version contentctl.yml
|
2025-04-10 09:58:37 -07:00 |
|
|
ljstella
|
ce3755b4d8
|
Add registry_path
|
2025-04-10 11:56:28 -05:00 |
|
|
Bhavin Patel
|
0e77f7fe27
|
Merge branch 'develop' into bump_yaml
|
2025-04-10 09:52:16 -07:00 |
|
|
Bhavin Patel
|
c873289d6a
|
Merge branch 'develop' into TR-4095
|
2025-04-10 09:45:40 -07:00 |
|
|
Bhavin Patel
|
effe6c2e2f
|
Merge pull request #3452 from splunk/issue_template_update
Updating issue templates with types
|
2025-04-10 09:45:30 -07:00 |
|
|
ljstella
|
c733afbb0f
|
Update PR template for contentctl v5 lookup handling
|
2025-04-10 11:09:33 -05:00 |
|
|
ljstella
|
23f0df3e96
|
Date & Version bump
|
2025-04-10 11:07:16 -05:00 |
|
|
ljstella
|
8020e90e6d
|
Add output fields, tighten up outputs
|
2025-04-10 11:05:36 -05:00 |
|
|
Bhavin Patel
|
c79c1f63ba
|
updating version
|
2025-04-09 16:31:51 -07:00 |
|
|
ljstella
|
2b758d876a
|
Updating issue templates with types
|
2025-04-09 12:18:36 -05:00 |
|
|
Bhavin Patel
|
31deacc6bd
|
Merge pull request #3445 from sventec/patch-1
fix: remote_utility typo in remote_access_software.csv
v5.3.0
|
2025-04-04 12:50:44 -07:00 |
|
|
Bhavin Patel
|
86a0f199ba
|
Merge branch 'develop' into patch-1
|
2025-04-04 12:36:23 -07:00 |
|
|
Bhavin Patel
|
028045bd49
|
Merge pull request #3427 from splunk/jp_paranoid
Deprecate duplicate detection
|
2025-04-04 10:00:52 -07:00 |
|
|
sventec
|
889c08ebbf
|
chore: update lookup date and version
|
2025-04-04 11:32:45 -04:00 |
|
|
sventec
|
5f1d8f6b3f
|
fix: addtl remote_utility typo in remote_access_software.csv
|
2025-04-04 11:32:32 -04:00 |
|
|
sventec
|
66889be8a6
|
fix: remote_utility typo in remote_access_software.csv
|
2025-04-04 11:20:21 -04:00 |
|
|
Bhavin Patel
|
89ea90a820
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 12:52:41 -07:00 |
|
|
Bhavin Patel
|
e7263c96a7
|
Merge pull request #3411 from splunk/firewall_win_events
firewall_win_events
|
2025-04-03 12:52:23 -07:00 |
|
|
Bhavin Patel
|
39ce057227
|
fix dd
|
2025-04-03 12:18:53 -07:00 |
|
|
Bhavin Patel
|
f1561e6173
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 10:46:23 -07:00 |
|
|
Bhavin Patel
|
49d75bbc36
|
Merge branch 'develop' into firewall_win_events
|
2025-04-03 10:44:21 -07:00 |
|
|
Bhavin Patel
|
39850effa7
|
Merge pull request #3392 from splunk/medusa_ransomware
medusa_ransomware
|
2025-04-03 10:43:13 -07:00 |
|
|
Bhavin Patel
|
6b1ad9369a
|
revert powershell change and use fillnull
|
2025-04-03 09:10:34 -07:00 |
|
|
Bhavin Patel
|
0212a445f6
|
Merge branch 'develop' into jp_paranoid
|
2025-04-02 15:04:07 -07:00 |
|
|
Bhavin Patel
|
ae45debc8b
|
Merge branch 'develop' into firewall_win_events
|
2025-04-02 14:47:40 -07:00 |
|
|
Bhavin Patel
|
43abc9471f
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 14:28:10 -07:00 |
|
|
Bhavin Patel
|
af9c381948
|
Merge pull request #3407 from splunk/renamed_earth_erties
renamed_earth_erties
|
2025-04-02 14:22:52 -07:00 |
|
|
Bhavin Patel
|
70a04d7ca0
|
Merge branch 'develop' into firewall_win_events
|
2025-04-02 13:23:42 -07:00 |
|
|
Bhavin Patel
|
0d93ce9c0b
|
updating conflicts
|
2025-04-02 13:18:06 -07:00 |
|
|
Bhavin Patel
|
3bf27db466
|
updating data source and search since Path is not availble in this dataset
|
2025-04-02 12:58:26 -07:00 |
|
|
Bhavin Patel
|
23219463dc
|
Merge branch 'develop' into jp_paranoid
|
2025-04-02 12:07:51 -07:00 |
|
|
Bhavin Patel
|
f8d1d71db9
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 11:22:19 -07:00 |
|
|
Bhavin Patel
|
90ab68ee3e
|
Merge pull request #3400 from splunk/rceattack
PHP-CGI RCE Attack on Japanese Organizations
|
2025-04-02 11:21:16 -07:00 |
|
|
Bhavin Patel
|
7dabc2680f
|
Merge branch 'develop' into rceattack
|
2025-04-02 11:06:00 -07:00 |
|
|
Bhavin Patel
|
9493465161
|
adding new required fields to the new detections and fixing conflicts
|
2025-04-02 11:03:34 -07:00 |
|
|
Bhavin Patel
|
e141238eaf
|
Merge pull request #3346 from splunk/output_normalization_endpoint
Output normalization endpoint
|
2025-04-02 10:20:18 -07:00 |
|
|
Bhavin Patel
|
f03979077a
|
Merge branch 'develop' into rceattack
|
2025-04-01 15:47:23 -07:00 |
|