ddcad598fc
Branch was auto-updated.
2023-05-01 12:47:34 -07:00
866397b62d
Merge pull request #2639 from splunk/dep_mimi
...
Deprecate : Detect Mimikatz Using Loaded Images
2023-05-01 12:47:05 -07:00
57330c02bb
Branch was auto-updated.
2023-05-01 12:37:31 -07:00
ca14763fea
Branch was auto-updated.
2023-05-01 12:37:21 -07:00
c1facdf6a6
Merge pull request #2591 from splunk/dispatch_dynamic_analysis
...
dispatch_dynamic_analysis
2023-05-01 12:36:50 -07:00
8fe842639e
Branch was auto-updated.
2023-05-01 12:25:18 -07:00
a9982acb05
Branch was auto-updated.
2023-05-01 12:25:09 -07:00
db08cf28cd
Branch was auto-updated.
2023-05-01 12:25:07 -07:00
e97f18f13e
Merge pull request #2615 from splunk/rename-dynamic-to-dispatch
...
Rename dynamic to dispatch
2023-05-01 12:24:25 -07:00
97fa0546ff
Branch was auto-updated.
2023-05-01 12:22:30 -07:00
3e921957de
Branch was auto-updated.
2023-05-01 12:22:21 -07:00
f3249f76bb
Branch was auto-updated.
2023-05-01 12:22:14 -07:00
e7f4568596
Branch was auto-updated.
2023-05-01 12:22:13 -07:00
5979f3257c
Merge pull request #2618 from splunk/splunk_attack_analyzer_playbook
...
splunk_attack_analyzer_playbook
2023-05-01 12:21:55 -07:00
2a72972b6f
Branch was auto-updated.
2023-05-01 11:59:10 -07:00
0e799764f5
Branch was auto-updated.
2023-05-01 11:59:09 -07:00
0efafd346a
Branch was auto-updated.
2023-05-01 11:59:07 -07:00
b875cfdab0
Branch was auto-updated.
2023-05-01 11:59:04 -07:00
6f2ae390a3
Branch was auto-updated.
2023-05-01 11:58:59 -07:00
3907ef5572
Merge pull request #2635 from splunk/schedule_mltk
...
fix MLTK scheduling
2023-05-01 14:58:41 -04:00
337766f904
Branch was auto-updated.
2023-05-01 11:44:45 -07:00
0279d259bd
Branch was auto-updated.
2023-05-01 11:44:42 -07:00
9c0bf31a86
Branch was auto-updated.
2023-05-01 11:44:36 -07:00
95d11a3f06
Branch was auto-updated.
2023-05-01 11:44:33 -07:00
073a5c4f2b
Branch was auto-updated.
2023-05-01 11:44:30 -07:00
5baff0b09a
Branch was auto-updated.
2023-05-01 11:44:29 -07:00
c22fc6b876
Merge pull request #2636 from splunk/RIR
...
Create active_directory_lateral_movement_identified.yml
2023-05-01 11:44:04 -07:00
6542f1afa3
Fixed reference to different playbook.
2023-04-29 16:56:39 -05:00
b1688fd2ec
Made required changes. See description.
...
Playbook is failing when only some reputation results were returned.
These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.
2023-04-29 16:43:09 -05:00
5c3d8b4125
Rename playbooks and minor grammatical changes in .yml
2023-04-29 16:06:17 -05:00
a0ad583a55
Fixed bug with scoring and changed categories to classifications
2023-04-28 20:29:24 -05:00
7cf8ed5d94
Recommended changes to attack analyzer playbook
2023-04-28 20:12:29 -05:00
72792fc2a0
Update to detection tags validator
2023-04-28 14:49:00 +02:00
97a1ec3bd5
bug fix validation
2023-04-28 13:53:52 +02:00
bf7d9f10d2
Branch was auto-updated.
2023-04-26 11:19:19 -07:00
3dc07a4d09
Branch was auto-updated.
2023-04-26 11:19:16 -07:00
5dc1df466e
Branch was auto-updated.
2023-04-26 11:19:15 -07:00
b2732ddd72
Branch was auto-updated.
2023-04-26 11:19:11 -07:00
e87c3bc5f2
Branch was auto-updated.
2023-04-26 11:19:10 -07:00
8d439e76e4
Branch was auto-updated.
2023-04-26 11:19:07 -07:00
00d69b28d5
Merge pull request #2643 from splunk/yaml_create
...
adding required fields
2023-04-26 11:18:45 -07:00
2044b38acb
Branch was auto-updated.
2023-04-26 10:59:54 -07:00
cfb9513fa7
Branch was auto-updated.
2023-04-26 10:59:52 -07:00
436a9304f7
Branch was auto-updated.
2023-04-26 10:59:51 -07:00
f04ed15347
Branch was auto-updated.
2023-04-26 10:59:50 -07:00
3929e2df0b
Branch was auto-updated.
2023-04-26 10:59:46 -07:00
676c6105ad
Branch was auto-updated.
2023-04-26 10:59:46 -07:00
4efe2d5e7d
Branch was auto-updated.
2023-04-26 10:59:42 -07:00
6a96a3fe23
Merge pull request #2646 from splunk/ssa_gen_fix
...
removed sfc to normalize with 4.0.1
2023-04-26 10:59:13 -07:00
20b851f643
removed sfc to normalize with 4.0.1
2023-04-26 09:12:44 -05:00
srv-rr-gh-researchbt