Commit Graph

26599 Commits

Author SHA1 Message Date
Bhavin Patel e7e5dcbc03 Merge branch 'develop' into process-injection-detection-enhanced 2025-03-26 11:05:22 -07:00
Bhavin Patel 0f102fcfcd Merge pull request #3325 from splunk/output_normalization_o365
o365 detections output normalization
2025-03-25 13:56:31 -07:00
Bhavin Patel 63380103e5 udpate date format 2025-03-25 12:07:17 -07:00
Bhavin Patel 87eeec65a6 updating dates and verrsion 2025-03-25 11:21:38 -07:00
Bhavin Patel 09f12546fb Merge branch 'develop' into output_normalization_o365 2025-03-25 10:42:52 -07:00
Bhavin Patel 5768076812 Merge pull request #3420 from splunk/auto-ta-update-215
Automated Splunk TA Update 215
2025-03-25 09:01:24 -07:00
ljstella 843ab78068 Revert linux TA 2025-03-25 09:46:21 -05:00
patel-bhavin 5886f46ba5 Updated TAs 2025-03-25 06:58:01 +00:00
Bhavin Patel b186cc921e Merge pull request #3409 from splunk/auto-ta-update-210
Automated Splunk TA Update 210
2025-03-24 15:03:24 -07:00
Bhavin Patel 5bb6ac53b3 Empty commit 2025-03-24 14:41:21 -07:00
Bhavin Patel 753cf9e3f5 Update linux_secure.yml 2025-03-20 09:42:10 -07:00
patel-bhavin d3f6dc856d Updated TAs 2025-03-20 06:58:09 +00:00
Michael Haag feb0f44dad updates 2025-03-19 10:25:30 -06:00
Michael Haag e38e283413 Add new detection for process injection into commonly abused processes
Replacing #3389
2025-03-19 10:19:14 -06:00
P4T12ICK f243d22f61 Merge branch 'develop' into output_normalization_o365 2025-03-19 15:02:08 +01:00
Bhavin Patel 45838649b8 Merge pull request #3366 from splunk/remove_detections
Remove 151 Deprecated detections, stories, baselines, investigations - Github
v5.2.0
2025-03-18 16:14:36 -07:00
Eric 011b33cb5b Merge branch 'remove_detections' of https://github.com/splunk/security_content into remove_detections 2025-03-18 15:42:04 -07:00
Eric 58aca7db99 Update the deprecation_info.csv file, manually generated with a version of contentctl that has not yet been merged or released in main branch. 2025-03-18 15:41:21 -07:00
Bhavin Patel 59b9657e4a Merge branch 'develop' into remove_detections 2025-03-18 15:32:53 -07:00
Bhavin Patel 7ba4dc0a4d Merge pull request #3405 from splunk/risk_message
update spl
2025-03-18 15:22:18 -07:00
Bhavin Patel 2f128036c1 Merge branch 'develop' into risk_message 2025-03-18 15:08:01 -07:00
Bhavin Patel df44136390 Merge pull request #3287 from delgado-jacob/datasource_enrichment
Add descriptions and Mitre components to data sources
2025-03-18 15:07:51 -07:00
Bhavin Patel ea3fa4daf6 updating search 2025-03-18 14:52:30 -07:00
delgado-jacob 4b70500f07 Merge remote-tracking branch 'origin/datasource_enrichment' into datasource_enrichment 2025-03-18 14:29:50 -07:00
delgado-jacob 6488af7c57 Add Zeek TA, fix detection source list 2025-03-18 14:29:30 -07:00
Eric f096d77d6f Changed the names of some fields due to the use of both deprecated and removed to refer to content in different stages of removal 2025-03-18 14:25:56 -07:00
Eric b1d1ae90d9 rename deprecated directory to removed 2025-03-18 14:14:37 -07:00
Bhavin Patel 0d2d727083 updating replace 2025-03-18 13:39:46 -07:00
Bhavin Patel ebe5db35ae Merge branch 'develop' into datasource_enrichment 2025-03-18 12:55:17 -07:00
Eric ad55d26fe4 add 'status: removed' instead of 'status: deprecated' to removed detections 2025-03-18 12:33:06 -07:00
Eric 5e0d59e186 bump version in prep for release
and so that deprecation stuff
works properly.
2025-03-18 12:07:47 -07:00
delgado-jacob da5c9b9bbd fix separator_value field 2025-03-18 11:37:35 -07:00
Bhavin Patel 86e7863669 updating file name 2025-03-18 11:16:32 -07:00
Bhavin Patel 6a53b8c61b adding 2 splunk detections 2025-03-18 10:52:47 -07:00
Bhavin Patel 030b038245 Merge branch 'develop' into remove_detections 2025-03-18 10:33:41 -07:00
Bhavin Patel 505c176c62 Merge pull request #3403 from splunk/aws_output_improvements
output improvements
2025-03-18 09:13:01 -07:00
Patrick Bareiss 81e0801829 rerun CI 2025-03-18 13:55:20 +01:00
Patrick Bareiss 3122cbbc8b output improvements 2025-03-18 12:56:30 +01:00
Patrick Bareiss 33461bfe7c improvements 2025-03-18 08:13:17 +01:00
P4T12ICK 029788ae05 Merge branch 'develop' into output_normalization_o365 2025-03-18 08:09:11 +01:00
Patrick Bareiss 8415182547 improvements 2025-03-18 08:08:43 +01:00
P4T12ICK 2d498dd311 Merge pull request #3401 from splunk/moar_5.2.0_fixes
integration fixes for 5.2.0
2025-03-18 08:03:18 +01:00
Bhavin Patel f04362d709 sort 2025-03-17 19:41:07 -07:00
Bhavin Patel 3819c6864d updating detections 2025-03-17 19:14:58 -07:00
Bhavin Patel ca86201823 adding 2 deprecated baselines 2025-03-17 18:28:42 -07:00
Bhavin Patel 4d4a1c6649 adding cross account stuff 2025-03-17 18:19:56 -07:00
Bhavin Patel 99a4b6fa4b adding missing baselines 2025-03-17 18:09:42 -07:00
Bhavin Patel c345f920ed adding gitkeep for empty folders 2025-03-17 18:04:26 -07:00
Bhavin Patel f672cb55c0 updating missing detections 2025-03-17 17:55:30 -07:00
Bhavin Patel 1ad53e770f Merge branch 'develop' into remove_detections 2025-03-17 17:29:49 -07:00