Commit Graph

25311 Commits

Author SHA1 Message Date
Patrick Bareiss ebca30164d new asl aws detections 2025-01-15 14:00:57 -06:00
Patrick Bareiss 22c3c2dc08 bug fixes 2025-01-15 13:57:30 -06:00
Patrick Bareiss f727062aa9 bug fixes 2025-01-15 13:56:19 -06:00
Patrick Bareiss 56074f2ea4 Improved ASL AWS detections 2025-01-15 13:55:16 -06:00
research-bot 437368d3ab updating data sources 2025-01-15 13:53:20 -06:00
Bhavin Patel e013fd8c76 Update o365_service_principal_privilege_escalation.yml 2025-01-15 13:53:20 -06:00
dluxtron 37f2760df3 reverting macro change 2025-01-15 13:53:20 -06:00
research-bot e06b07f793 udpating SPL 2025-01-15 13:53:20 -06:00
research-bot dbc17805f3 updating macro 2025-01-15 13:53:20 -06:00
research-bot dc1672d901 updating risk 2025-01-15 13:53:20 -06:00
research-bot 71e6dd7c7a fixing up yamls for testing 2025-01-15 13:53:20 -06:00
dluxtron 0282aff10b fixing syntax & updating macro 2025-01-15 13:53:19 -06:00
dluxtron 5ba40b34df Adding intune detections & updating dataset links 2025-01-15 13:53:19 -06:00
dluxtron 4761a49d0c Uploading new detections 2025-01-15 13:53:19 -06:00
dluxtron a0a7dc4efd Uploading new detections 2025-01-15 13:53:19 -06:00
ljstella 6f56a467c1 New detection conversion 2025-01-10 14:07:48 -06:00
Bhavin Patel db1e1bb45e Branch was auto-updated. 2025-01-10 07:03:36 -08:00
Lou Stella c0f0f9506d Merge pull request #3274 from splunk/auto-ta-update-141
Automated Splunk TA Update 141
2025-01-10 09:03:16 -06:00
patel-bhavin 67de6175a9 Updated TAs 2025-01-10 06:57:41 +00:00
Bhavin Patel 83ecc74952 Branch was auto-updated. 2025-01-09 14:18:14 -08:00
Bhavin Patel ede80f4395 Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2
Nterl0k - T1219 - RMM Detection for Registry locations.
2025-01-09 14:17:57 -08:00
Bhavin Patel 55d4936427 update token 2025-01-09 13:26:23 -08:00
Bhavin Patel c01f87071e Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-09 13:10:22 -08:00
ljstella ad772ee1ee More stragglers 2025-01-09 14:57:36 -06:00
Bhavin Patel 6f3c999416 Branch was auto-updated. 2025-01-09 11:43:00 -08:00
Lou Stella d2592c5deb Merge pull request #3270 from splunk/auto-ta-update-139
Automated Splunk TA Update 139
2025-01-09 13:42:36 -06:00
ljstella 1ce4f77a4c update description 2025-01-09 12:02:56 -06:00
ljstella 4b28335f82 retrigger 2025-01-09 11:12:57 -06:00
ljstella 02afa4f4cb Adding PSC 2025-01-09 11:08:49 -06:00
ljstella 5b8986469e Removed parens that was killing app installs 2025-01-09 10:39:47 -06:00
ljstella c591ef5ff7 Adding back two containers 2025-01-08 12:45:30 -06:00
ljstella a9129bf5e3 Testing single container 2025-01-08 12:40:39 -06:00
Bhavin Patel 4c65798689 Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-08 10:22:03 -08:00
Bhavin Patel 557fdeca89 Add manual_test flag 2025-01-08 10:21:40 -08:00
Bhavin Patel 0e6251e06a Branch was auto-updated. 2025-01-08 10:11:59 -08:00
Bhavin Patel 607494bfb8 Branch was auto-updated. 2025-01-08 10:11:52 -08:00
Bhavin Patel be3ab3c6ed Merge pull request #3255 from nterl0k/nterl0k-T1550-netexec-usage
Nterl0k - T1550 - NetExec Usage Detection
2025-01-08 10:11:36 -08:00
Bhavin Patel 5e58179a00 file name update 2025-01-08 10:09:48 -08:00
patel-bhavin 7c7904265a Updated TAs 2025-01-08 06:58:09 +00:00
Steven Dick 50fd37accd Update windows_process_with_netexec_command_line_parameters.yml
Adding drilldowns
2025-01-07 15:49:16 -05:00
Steven Dick 2627b4bea5 Update detect_remote_access_software_usage_registry.yml
add drilldowns
2025-01-07 15:39:12 -05:00
Nasreddine Bencherchali e8f9c1ddd0 Merge branch 'develop' into nterl0k-T1550-netexec-usage 2025-01-07 17:45:50 +01:00
Nasreddine Bencherchali 662b542299 Apply suggestions from code review 2025-01-07 17:44:25 +01:00
Lou Stella f49899a983 Merge branch 'develop' into rba_migration 2025-01-07 09:47:21 -06:00
ljstella 9fb7b90549 Stragglers migration 2025-01-07 09:45:30 -06:00
Bhavin Patel 263db16960 author update 2025-01-06 14:42:03 -08:00
Bhavin Patel 35368173c0 observable type 2025-01-06 14:41:11 -08:00
Bhavin Patel 736bcb3660 Merge branch 'develop' into nterl0k-t1219-rmm-update-2 2025-01-06 14:31:00 -08:00
Steven Dick 36a79d6b99 Update detect_remote_access_software_usage_registry.yml 2025-01-06 17:21:02 -05:00
Steven Dick ff408f240c Update detect_remote_access_software_usage_registry.yml 2025-01-06 17:19:33 -05:00