 Teoderick Contreras
|
bf250fe4e3
|
xworm
|
2025-05-08 20:28:47 +02:00 |
|
|
Teoderick Contreras
|
dfac5c5239
|
xworm
|
2025-05-08 11:00:32 +02:00 |
|
|
pyth0n1c
|
9e4ec592df
|
Merge pull request #3509 from splunk/ctl_bump
ctl version to 5.5
|
2025-05-05 15:56:42 -07:00 |
|
|
Bhavin Patel
|
76f544c9d5
|
bump
|
2025-05-05 15:53:09 -07:00 |
|
|
pyth0n1c
|
cf30ae64b7
|
Merge pull request #3500 from splunk/auto-ta-update-250
Automated Splunk TA Update 250
|
2025-05-05 15:51:03 -07:00 |
|
|
Bhavin Patel
|
72e1c0611c
|
Merge branch 'develop' into auto-ta-update-250
|
2025-05-05 15:05:26 -07:00 |
|
|
Bhavin Patel
|
402f87020b
|
Merge pull request #3467 from splunk/linux_syscall_auditd_update
linux_syscall_auditd_update
|
2025-05-05 12:14:48 -07:00 |
|
|
Bhavin Patel
|
3f8a13a1f5
|
Merge branch 'develop' into linux_syscall_auditd_update
|
2025-05-05 11:53:55 -07:00 |
|
|
Bhavin Patel
|
d869952052
|
Merge pull request #3492 from splunk/amos-stealer
Add AMOS Stealer Analytic
|
2025-05-05 11:51:00 -07:00 |
|
|
Bhavin Patel
|
6daa23f6ff
|
Merge branch 'develop' into amos-stealer
|
2025-05-05 11:10:21 -07:00 |
|
|
Bhavin Patel
|
8439afc8c0
|
Merge pull request #3508 from splunk/duplicate_status_in_stats
Removing duplicate group-by field
|
2025-05-05 11:09:51 -07:00 |
|
|
Bhavin Patel
|
fcb1c407cd
|
add dest to output_field
|
2025-05-05 11:07:20 -07:00 |
|
|
Br3akp0int
|
69aace2a2f
|
Merge branch 'develop' into linux_syscall_auditd_update
|
2025-05-05 19:37:41 +02:00 |
|
|
Nasreddine Bencherchali
|
1c4a531594
|
Apply suggestions from code review
|
2025-05-05 19:07:48 +02:00 |
|
|
Bhavin Patel
|
0ed0d17b10
|
Merge branch 'develop' into duplicate_status_in_stats
|
2025-05-05 10:07:19 -07:00 |
|
|
Nasreddine Bencherchali
|
7a7f6a1623
|
Merge branch 'develop' into amos-stealer
|
2025-05-05 18:53:01 +02:00 |
|
|
Bhavin Patel
|
78f52c4075
|
Merge pull request #3437 from splunk/fix_bad_attack_data_paths
fix weird attack data links
|
2025-05-05 09:50:33 -07:00 |
|
|
ljstella
|
d973e001a0
|
Removing duplicate group-by field
|
2025-05-05 09:14:39 -05:00 |
|
|
Nasreddine Bencherchali
|
cc57496610
|
add analytic story
|
2025-05-05 15:05:24 +02:00 |
|
|
Teoderick Contreras
|
8b9a070ec1
|
linux_syscall_auditd_update
|
2025-05-05 10:09:54 +02:00 |
|
|
Eric
|
d9960562b8
|
Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.
|
2025-05-02 14:10:46 -07:00 |
|
|
Bhavin Patel
|
c8d4039488
|
Merge branch 'develop' into amos-stealer
|
2025-05-02 14:08:26 -07:00 |
|
|
ljstella
|
2af5bb3aab
|
Sysmon service stop, not the generic one
|
2025-05-02 12:03:44 -05:00 |
|
|
pyth0n1c
|
2c9573e2b9
|
Merge branch 'develop' into fix_bad_attack_data_paths
|
2025-05-01 15:57:53 -07:00 |
|
|
Bhavin Patel
|
fe42046a6f
|
Merge pull request #3489 from splunk/eventlog-stuff
Add New Analytics for Eventlog Enumeration
|
2025-05-01 13:33:00 -07:00 |
|
|
Bhavin Patel
|
281f8d2f48
|
Merge branch 'develop' into eventlog-stuff
|
2025-05-01 13:09:27 -07:00 |
|
|
Bhavin Patel
|
78e3f8a06e
|
update name
|
2025-05-01 12:50:51 -07:00 |
|
|
Bhavin Patel
|
86d9e1f615
|
Merge branch 'develop' into amos-stealer
|
2025-05-01 12:50:02 -07:00 |
|
|
Bhavin Patel
|
5af589435f
|
Merge pull request #3502 from splunk/deprecate_rmm_hunt
Sebastian Wurl Feedback - Update RMM searches
|
2025-05-01 12:22:09 -07:00 |
|
|
Bhavin Patel
|
1c22f847d3
|
Merge branch 'develop' into auto-ta-update-250
|
2025-05-01 11:57:49 -07:00 |
|
|
Bhavin Patel
|
7742f511b3
|
Merge branch 'develop' into deprecate_rmm_hunt
|
2025-05-01 11:53:34 -07:00 |
|
|
Bhavin Patel
|
a26bfc0637
|
Merge pull request #3377 from splunk/small-tuning
Analytic Updates & Tunings
|
2025-05-01 11:52:48 -07:00 |
|
|
Bhavin Patel
|
a7f0e38586
|
updating removed in version
|
2025-05-01 11:33:07 -07:00 |
|
|
Bhavin Patel
|
4d1ff91ee3
|
updated messaging
|
2025-04-30 12:24:55 -07:00 |
|
|
Bhavin Patel
|
26e2f59462
|
add back manual_Test
|
2025-04-30 12:20:03 -07:00 |
|
|
Bhavin Patel
|
6b2f2e9636
|
remove manual test for a CI run
|
2025-04-30 12:15:14 -07:00 |
|
|
Bhavin Patel
|
884eede4ce
|
updating search
|
2025-04-30 12:14:30 -07:00 |
|
|
Eric
|
422a769c0d
|
final fixes
|
2025-04-29 17:04:03 -07:00 |
|
|
Eric
|
170ed93d9d
|
Merge branch 'develop' into fix_bad_attack_data_paths
|
2025-04-29 16:54:17 -07:00 |
|
|
patel-bhavin
|
15ed5d18f2
|
Updated TAs
|
2025-04-29 06:57:56 +00:00 |
|
|
Bhavin Patel
|
55461779c5
|
Merge branch 'develop' into small-tuning
|
2025-04-28 12:09:36 -07:00 |
|
|
Bhavin Patel
|
700667bda7
|
Merge pull request #3499 from splunk/weavingbaskets
🕸️ BasketNetWeaving with Haag: No Shell Left Behind!
|
2025-04-28 12:09:17 -07:00 |
|
|
Michael Haag
|
0c67bd001c
|
Delete java_spawning_command_shells.yml
|
2025-04-28 12:01:09 -06:00 |
|
|
Michael Haag
|
074c90ceb4
|
ver and date
|
2025-04-28 10:37:57 -06:00 |
|
|
Michael Haag
|
074d13f001
|
BasketNetWeaving with Haag: No Shell Left Behind!
|
2025-04-28 10:33:17 -06:00 |
|
|
Bhavin Patel
|
9ac544fb8e
|
Merge branch 'develop' into linux_syscall_auditd_update
|
2025-04-25 08:54:50 -07:00 |
|
|
Bhavin Patel
|
be0e06c743
|
Merge pull request #3493 from splunk/taskhost_counting
Taskhost counting
|
2025-04-25 08:54:30 -07:00 |
|
|
ljstella
|
511221ba1e
|
version bump
|
2025-04-25 08:58:58 -05:00 |
|
|
ljstella
|
31e2c03b8d
|
Add where clause back
|
2025-04-25 08:44:50 -05:00 |
|
|
Nasreddine Bencherchali
|
677c3b0df4
|
Update macos_amos_stealer___virtual_machine_check_activity.yml
|
2025-04-25 13:24:48 +02:00 |
|