 Bhavin Patel
|
db9a5aed2c
|
Branch was auto-updated.
|
2024-08-12 11:58:44 -07:00 |
|
|
pyth0n1c
|
26ef46dbbc
|
A baseline referenced a detection
incorrectly. Remove the reference
to that detection.
|
2024-08-12 11:58:27 -07:00 |
|
|
Bhavin Patel
|
17e6c307b0
|
Branch was auto-updated.
|
2024-08-09 14:25:17 -07:00 |
|
|
pyth0n1c
|
ef2489aa9a
|
Merge pull request #3088 from splunk/fix_missing_fields
add missing version and id fields to story
|
2024-08-09 14:24:59 -07:00 |
|
|
pyth0n1c
|
97ad5a62b6
|
add missing version and id fields to story
|
2024-08-08 17:26:28 -07:00 |
|
|
Bhavin Patel
|
f3b09bdb40
|
Branch was auto-updated.
|
2024-08-08 06:20:13 -07:00 |
|
|
P4T12ICK
|
fc2c1507b2
|
Merge pull request #3087 from splunk/auditd_data_source
auditd_data_source
|
2024-08-08 15:19:49 +02:00 |
|
|
tccontre
|
f16501ec86
|
auditd_data_source
|
2024-08-08 15:06:44 +02:00 |
|
|
tccontre
|
d0b5537cc5
|
auditd_data_source
|
2024-08-08 15:00:58 +02:00 |
|
|
Br3akp0int
|
35e2f0d0cc
|
Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml
|
2024-08-08 14:56:03 +02:00 |
|
|
Br3akp0int
|
98b7916636
|
Rename Linux_Auditd_Service_Stop.yml to linux_auditd_service_stop.yml
|
2024-08-08 14:55:44 +02:00 |
|
|
Br3akp0int
|
8ebc697d5f
|
Rename Linux_Auditd_Proctitle.yml to linux_auditd_proctitle.yml
|
2024-08-08 14:55:24 +02:00 |
|
|
Br3akp0int
|
d1f13df7c5
|
Rename Linux_Auditd_Path.yml to linux_auditd_path.yml
|
2024-08-08 14:55:03 +02:00 |
|
|
Br3akp0int
|
65df507595
|
Rename Linux_Auditd_Execve.yml to linux_auditd_execve.yml
|
2024-08-08 14:54:44 +02:00 |
|
|
Br3akp0int
|
250ff001f2
|
Rename Linux_Auditd_Add_User.yml to linux_auditd_add_user.yml
|
2024-08-08 14:54:21 +02:00 |
|
|
tccontre
|
89902ee34b
|
auditd_data_source
|
2024-08-08 14:47:22 +02:00 |
|
|
Bhavin Patel
|
864758ce0b
|
Branch was auto-updated.
|
2024-08-07 14:08:12 -07:00 |
|
|
Bhavin Patel
|
883729353d
|
Merge pull request #3085 from splunk/risk_message_validation
Updating risk_message
|
2024-08-07 14:07:54 -07:00 |
|
|
Bhavin Patel
|
c0755594e0
|
Merge branch 'develop' into risk_message_validation
|
2024-08-07 12:51:53 -07:00 |
|
|
Bhavin Patel
|
201b46252f
|
updating risk_message
|
2024-08-07 12:50:29 -07:00 |
|
|
Bhavin Patel
|
181eb2a769
|
Branch was auto-updated.
|
2024-08-07 12:24:40 -07:00 |
|
|
Bhavin Patel
|
d067238e4c
|
Merge pull request #3084 from splunk/data_source_bug_fix
Data Source Bug Fix
|
2024-08-07 12:24:23 -07:00 |
|
|
Bhavin Patel
|
32544bbce9
|
Branch was auto-updated.
|
2024-08-07 12:12:27 -07:00 |
|
|
Bhavin Patel
|
c3506341bc
|
Branch was auto-updated.
|
2024-08-07 12:12:25 -07:00 |
|
|
Bhavin Patel
|
865d52592d
|
Merge pull request #2999 from nterl0k/nterl0k-o365-azure-workload-1
Nterl0k [T1098] - O365 Azure Workload things
|
2024-08-07 12:12:06 -07:00 |
|
|
ljstella
|
5f30d2989b
|
Remove old version
|
2024-08-07 13:34:36 -05:00 |
|
|
Lou Stella
|
863813645f
|
Merge branch 'develop' into nterl0k-o365-azure-workload-1
|
2024-08-07 13:31:17 -05:00 |
|
|
ljstella
|
0091d78210
|
Account for new name
|
2024-08-07 13:30:26 -05:00 |
|
|
ljstella
|
f01f6957f9
|
Updating datestamp
|
2024-08-07 13:29:34 -05:00 |
|
|
ljstella
|
ca30ffcc40
|
Updating lookup name
|
2024-08-07 13:20:21 -05:00 |
|
|
Patrick Bareiss
|
9ce5478271
|
Data Source Bug Fix
|
2024-08-07 16:21:33 +02:00 |
|
|
Bhavin Patel
|
b4fdd79e28
|
Branch was auto-updated.
|
2024-08-05 17:51:34 -07:00 |
|
|
Bhavin Patel
|
b91c4ece95
|
Merge pull request #2979 from nterl0k/nterl0k-T1110.003-NTLM-bruteforce
Nterl0k - T1110.003 NTLM Bruteforce
|
2024-08-05 17:51:18 -07:00 |
|
|
Bhavin Patel
|
6e2d8fc0b5
|
Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce
|
2024-08-05 17:48:59 -07:00 |
|
|
Bhavin Patel
|
f6f30d451e
|
Branch was auto-updated.
|
2024-08-05 17:48:51 -07:00 |
|
|
Bhavin Patel
|
39004ed767
|
Merge pull request #3074 from splunk/crowdstrike_analytics
crowstrikes_analytics
|
2024-08-05 17:48:37 -07:00 |
|
|
Bhavin Patel
|
a7dee27ff0
|
Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce
|
2024-08-05 17:41:05 -07:00 |
|
|
Bhavin Patel
|
19b63ed0da
|
update narrative
|
2024-08-05 17:33:49 -07:00 |
|
|
Bhavin Patel
|
f59961e22b
|
Branch was auto-updated.
|
2024-08-05 17:03:32 -07:00 |
|
|
Bhavin Patel
|
6c3971db92
|
Branch was auto-updated.
|
2024-08-05 17:03:27 -07:00 |
|
|
Bhavin Patel
|
59c8fbbba5
|
Merge pull request #3072 from splunk/data_source_improvements
Improve TA names to match the naming in Splunk
|
2024-08-05 17:03:12 -07:00 |
|
|
pyth0n1c
|
19a1470d14
|
Update crowdstrike ta
|
2024-08-05 16:42:40 -07:00 |
|
|
Bhavin Patel
|
9809f49b18
|
Update contentctl.yml
|
2024-08-05 14:35:48 -07:00 |
|
|
Bhavin Patel
|
cb664da1fb
|
Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce
|
2024-08-05 14:30:48 -07:00 |
|
|
Bhavin Patel
|
5cb0d54dba
|
Branch was auto-updated.
|
2024-08-05 14:17:03 -07:00 |
|
|
Bhavin Patel
|
1658842634
|
Branch was auto-updated.
|
2024-08-05 14:17:02 -07:00 |
|
|
Bhavin Patel
|
49aba8c955
|
Branch was auto-updated.
|
2024-08-05 14:17:00 -07:00 |
|
|
Lou Stella
|
7a71b722b6
|
Merge pull request #3080 from splunk/env_issue
trigger condition and remove contentctl version variable
|
2024-08-05 16:16:46 -05:00 |
|
|
Bhavin Patel
|
14904fb97c
|
shrink codeowners
|
2024-08-05 14:15:00 -07:00 |
|
|
Bhavin Patel
|
91ace87f67
|
version > to appinsepct
|
2024-08-05 14:03:26 -07:00 |
|