42 Commits

Author	SHA1	Message	Date
Nasreddine Bencherchali	be9873d4a4	remove incompatible data sources	2025-02-19 17:46:22 +01:00
pyth0n1c	45599e0b18	Clean up MITRE Tagging. When a type is defined, such as T1003, DO NOT allow a subtype such as T1003.001 to be defined. Remove the generic type T1003 and keep the subtype T1003.001. However, it is acceptable for a subtype to be defined or for a type to be defined separately. It is also okay for multiple subtypes to be defined.	2025-02-10 12:28:22 -08:00
pyth0n1c	fdaa038eab	Finish removing extra fields, or renaming ... misnamed fields, in endpoint detections	2025-01-03 15:47:32 -08:00
ljstella	d30e04fc65	small grammar fix	2024-12-10 16:18:08 -06:00
ljstella	6357f1830f	Merge branch 'develop' into rba_migration	2024-12-10 11:50:25 -06:00
tccontre	5a47ecf5c7	meduza	2024-12-02 13:42:14 +01:00
ljstella	bc14854c55	endpoint: more typefixes	2024-11-15 10:36:13 -06:00
ljstella	c9186e0b7d	endpoint: lowercase rba types	2024-11-15 10:16:37 -06:00
ljstella	514123089d	endpoint detection score field rename	2024-11-15 09:49:53 -06:00
ljstella	f88eb16c6f	endpoint detection score fix	2024-11-15 09:34:59 -06:00
ljstella	92cc97a5a7	endpoint first pass	2024-11-14 15:44:51 -06:00
research-bot	7eafc7cd60	updating sysmon to XML	2024-11-01 13:40:43 -07:00
research-bot	d1c7e1b6e5	udpating sysmon source	2024-10-30 18:42:30 -07:00
Bhavin Patel	0bb378b19b	updating drilldowns	2024-10-24 14:13:05 -07:00
Bhavin Patel	8b03f3d58f	updating all detections with quotes	2024-10-24 14:08:37 -07:00
Bhavin Patel	7bc11be7dc	updating drilldown_formatting	2024-10-23 18:25:39 -07:00
Bhavin Patel	385ac7adc1	remove end hours	2024-10-23 17:52:24 -07:00
Bhavin Patel	cf169b3de0	adding drilldowns to all	2024-09-30 22:04:57 +05:30
Patrick	87108a5aac	Improved data sources	2024-07-17 14:41:50 +02:00
Patrick	9e0d8426c1	improved data source field	2024-07-16 14:06:31 +02:00
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Gowthamaraj rajendran	e06cfa133d	Edit how_to_implement for Endpoint.Processes	2023-09-15 10:58:38 -07:00
tccontre	ace4c91d2a	warzone_rat	2023-07-26 14:53:43 +02:00
tccontre	f78e4404d2	blackbyte_campaign	2023-07-10 12:55:29 +02:00
tccontre	f276d22e6c	data_destruction_wiper_story	2023-04-14 10:50:14 +02:00
P4T12ICK	78909f6429	merged with develop	2023-03-03 12:40:16 +01:00
P4T12ICK	fd0c8b349f	updated tags	2023-01-09 09:33:30 +01:00
P4T12ICK	5ae53c9368	Migrated all detections to v4	2023-01-03 13:42:10 +01:00
P4T12ICK	6f0ee68913	Refactored security content	2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez	d78bb53baa	Revert "Refactored security content"	2022-03-04 15:13:04 -05:00
P4T12ICK	68543a8dc1	merged with develop	2022-03-03 13:11:56 +01:00
truptilangalia-crest	179134e8ef	test:removed cim version	2022-02-08 12:05:05 +05:30
P4T12ICK	1d880e6b0e	merged with latest content and fixed bugs	2022-02-07 15:58:50 +01:00
truptilangalia-crest	08f0ff6405	test: Removed tas with mapping from detection files	2022-01-31 19:46:09 +05:30
Detection Testing Service	5bc6118cb0	test:updated logic to remove unnesseary tas	2022-01-27 02:18:31 +05:30
research bot	e91c2b737d	updating docs and package bits [ci skip]	2022-01-25 02:37:48 +00:00
mvelazco	321fd725f1	minor changes	2022-01-24 13:23:11 -05:00
Michael Haag	fbbaef0c99	Quick fixes	2022-01-24 07:33:36 -07:00
root	83e24a88e9	Added detection testing service results inPing Sleep Batch Command	2022-01-24 09:12:02 +00:00
tccontre	742441eb3d	Update ping_sleep_batch_command.yml	2022-01-21 09:45:25 +01:00
tccontre	1b510a0929	WhisperGateIsOpen	2022-01-20 15:11:12 +01:00