Commit Graph

19702 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt dce60109ea Branch was auto-updated. 2023-04-20 13:09:35 -07:00
research bot 16526a4b02 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-20 20:09:06 +00:00
srv-rr-gh-researchbt a120e9b293 Branch was auto-updated. 2023-04-20 12:18:31 -07:00
Lou Stella 9231773766 Merge pull request #2638 from splunk/TR-3094
[TR-3094] Removed sfc.exe, which has frequent collisions with AMP for Endpoints
v4.0.1
2023-04-20 14:17:15 -05:00
Lou Stella 838118f3ca version bump 2023-04-20 13:32:18 -05:00
Lou Stella e875bbafce Updated description for grammar 2023-04-20 12:54:02 -05:00
Lou Stella bc212909ec Removed sfc.exe, which has frequent collisions with AMP for Endpoints 2023-04-20 12:48:51 -05:00
patel-bhavin a7338650fd fix scheduling 2023-04-18 16:38:53 -07:00
research bot 7b6c1c5e0e Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-04-18 21:55:52 +00:00
Bhavin Patel e2c6c24bc9 Merge pull request #2633 from splunk/manual_test_flag
manual test
v4.0.0
2023-04-18 14:27:17 -07:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Bhavin Patel 2d98d82cf5 Merge pull request #2620 from splunk/blacklotus
BlackLotus Campaign
2023-04-18 12:41:48 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
Bhavin Patel 7ec528b892 Merge pull request #2632 from splunk/TR-3110
adding risk=other to all configs
2023-04-18 11:46:22 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 1a73d58514 Branch was auto-updated. 2023-04-17 17:03:24 -07:00
Bhavin Patel 4261e70954 Merge pull request #2613 from splunk/sandworm_data_destruction
sandworm_data_destruction
2023-04-17 17:03:05 -07:00
srv-rr-gh-researchbt 14d5e4f739 Branch was auto-updated. 2023-04-17 16:57:26 -07:00
srv-rr-gh-researchbt 0f03e6211c Branch was auto-updated. 2023-04-17 16:57:24 -07:00
srv-rr-gh-researchbt d55b3753f9 Branch was auto-updated. 2023-04-17 16:57:10 -07:00
Bhavin Patel 9924a35dd0 Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks
virustotal_v3_dynamic_analysis_playbooks
2023-04-17 16:56:49 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00
srv-rr-gh-researchbt 939e1d4ae6 Branch was auto-updated. 2023-04-17 16:53:23 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
srv-rr-gh-researchbt 5f5f0aa76b Branch was auto-updated. 2023-04-17 16:53:09 -07:00
Bhavin Patel 2b5558c553 Merge pull request #2619 from splunk/data_destruction_wiper_story
data_destruction_wiper_story
2023-04-17 16:52:51 -07:00
Bhavin Patel 69296ac7d1 Update okta_threatinsight_suspected_passwordspray_attack.yml 2023-04-17 16:46:08 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt ec104c0d19 Branch was auto-updated. 2023-04-17 16:26:23 -07:00
srv-rr-gh-researchbt 2a717b761a Branch was auto-updated. 2023-04-17 16:26:22 -07:00
srv-rr-gh-researchbt 73f0a8dc50 Branch was auto-updated. 2023-04-17 16:26:21 -07:00
srv-rr-gh-researchbt d3ebc2795c Branch was auto-updated. 2023-04-17 16:26:19 -07:00
Bhavin Patel 290dfde752 Merge pull request #2625 from splunk/bugfix_2622
Macro name change in one detection
2023-04-17 16:26:01 -07:00
Bhavin Patel 0d2826b215 Update data_destruction.yml 2023-04-17 16:23:21 -07:00
patel-bhavin 59443bd27e remove tests 2023-04-17 16:19:43 -07:00
patel-bhavin 932b49ccfd fixes to validate 2023-04-17 16:06:37 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
patel-bhavin 4a9ce12739 adding risk=other to all configs 2023-04-17 15:00:26 -07:00
Michael Haag 747bf67e8a I AM THE RDP 2023-04-17 15:18:40 -06:00
srv-rr-gh-researchbt febf103b87 Branch was auto-updated. 2023-04-17 13:11:24 -07:00
srv-rr-gh-researchbt 37b753cd78 Branch was auto-updated. 2023-04-17 13:11:23 -07:00