Commit Graph

20188 Commits

Author SHA1 Message Date
srv-rr-gh-researchbt ecb446c275 Branch was auto-updated. 2023-05-08 08:50:44 -07:00
P4T12ICK 7eee8815b4 Merge pull request #2594 from splunk/TR2894
CrowdStrike OAuth API Identifier Activity Analysis
2023-05-08 17:50:22 +02:00
srv-rr-gh-researchbt f0275438ee Branch was auto-updated. 2023-05-08 08:36:45 -07:00
srv-rr-gh-researchbt b5553ed82c Branch was auto-updated. 2023-05-08 08:36:36 -07:00
P4T12ICK 34f4a5dceb Merge pull request #2595 from splunk/TR-2903
Windows Defender ATP Identifier Activity Analysis
2023-05-08 17:36:06 +02:00
Lou Stella d220cf41a5 Addressed Kelby's Findings 2023-05-04 14:17:57 -05:00
Lou Stella c5ea510e8f Addressed Kelby's points 2023-05-04 13:55:12 -05:00
srv-rr-gh-researchbt 18298d91c9 Branch was auto-updated. 2023-05-03 12:09:50 -07:00
srv-rr-gh-researchbt 367e116829 Branch was auto-updated. 2023-05-03 12:09:49 -07:00
srv-rr-gh-researchbt 2ce90e820e Branch was auto-updated. 2023-05-03 12:09:45 -07:00
Bhavin Patel 0c76f0139e Merge pull request #2663 from splunk/revert-2662-deprecate_pth
Revert "deprecate Pth"
2023-05-03 12:09:28 -07:00
patel-bhavin 8ef2a73122 mionr 2023-05-03 11:58:17 -07:00
patel-bhavin 63abc37beb deprecated note update 2023-05-03 11:57:27 -07:00
Bhavin Patel 444dde5d66 Revert "deprecate Pth" 2023-05-03 11:51:24 -07:00
srv-rr-gh-researchbt 59fe143f40 Branch was auto-updated. 2023-05-03 11:50:31 -07:00
srv-rr-gh-researchbt 5f44b4ca50 Branch was auto-updated. 2023-05-03 11:50:27 -07:00
srv-rr-gh-researchbt fbb094e28c Branch was auto-updated. 2023-05-03 11:50:26 -07:00
Bhavin Patel 799a636a73 Merge pull request #2662 from splunk/deprecate_pth
deprecate Pth
2023-05-03 11:50:06 -07:00
patel-bhavin ae89db26ea deprecate this 2023-05-03 11:44:31 -07:00
srv-rr-gh-researchbt 691cb7eb11 Branch was auto-updated. 2023-05-03 09:41:10 -07:00
srv-rr-gh-researchbt 524547ab82 Branch was auto-updated. 2023-05-03 09:41:09 -07:00
srv-rr-gh-researchbt 14dd3faed7 Branch was auto-updated. 2023-05-03 09:41:04 -07:00
Bhavin Patel 9a442a3bd1 Merge pull request #2648 from splunk/ba_detection_spec
Add BA detection schema and validator
2023-05-03 09:41:01 -07:00
Bhavin Patel 9f120ad765 Merge pull request #2647 from splunk/bug_fixes_sec_cont_4
Improve Detection Validation
2023-05-03 09:40:39 -07:00
P4T12ICK 44b98b61c1 improved detections 2023-05-03 15:13:10 +02:00
srv-rr-gh-researchbt 84c6096f4a Branch was auto-updated. 2023-05-02 15:23:39 -07:00
srv-rr-gh-researchbt a35648eb74 Branch was auto-updated. 2023-05-02 15:23:35 -07:00
srv-rr-gh-researchbt 2ee69fb765 Branch was auto-updated. 2023-05-02 15:23:34 -07:00
srv-rr-gh-researchbt 6c3c4876e8 Branch was auto-updated. 2023-05-02 15:23:33 -07:00
srv-rr-gh-researchbt fd50f2738b Branch was auto-updated. 2023-05-02 15:23:32 -07:00
research bot 9b995551aa Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-05-02 22:23:11 +00:00
srv-rr-gh-researchbt 4aac79147d Branch was auto-updated. 2023-05-02 15:02:47 -07:00
srv-rr-gh-researchbt e2df0d4c9e Branch was auto-updated. 2023-05-02 15:02:46 -07:00
srv-rr-gh-researchbt 0e5329d54c Branch was auto-updated. 2023-05-02 15:02:45 -07:00
srv-rr-gh-researchbt b954ccf537 Branch was auto-updated. 2023-05-02 15:02:44 -07:00
srv-rr-gh-researchbt 0f853111fe Branch was auto-updated. 2023-05-02 15:02:39 -07:00
Bhavin Patel c80c0aecec Merge pull request #2661 from splunk/security_content_4_phase_2
SmokeTest part 2
v4.1.0
2023-05-02 15:02:17 -07:00
patel-bhavin e51757ca9f conflicts 2023-05-02 14:56:38 -07:00
pyth0n1c aac32ae63c Update detection-smoketesting.yml
Update the smoketest workflow so
that it only runs nightly instead of
on every push.  This workflow takes
a very long time to run (about 1 hour)
so we don't want to run it all the time.
2023-05-02 14:48:17 -07:00
pyth0n1c 5912e876a8 Update windows_ad_domain_replication_acl_addition.yml
Revert syntax changes so that this search 
continues to fail smoketesting. This way, we
know to come back and update it.
2023-05-02 14:47:11 -07:00
pyth0n1c 6323c28e96 Rename detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml to detect_suspicious_processnames_using_a_pretrained_model_in_dsdl.yml
Updated name of filter and name of search file.
Did not touch the apply or name of the search
because these two run other lookups + we cannot
change the name of a search once it has been deployed.
2023-05-02 14:45:57 -07:00
srv-rr-gh-researchbt 851d014f1d Branch was auto-updated. 2023-05-02 12:58:48 -07:00
srv-rr-gh-researchbt 283f7b32f2 Branch was auto-updated. 2023-05-02 12:58:45 -07:00
srv-rr-gh-researchbt c450eb5b28 Branch was auto-updated. 2023-05-02 12:58:43 -07:00
srv-rr-gh-researchbt 6f8d21cb96 Branch was auto-updated. 2023-05-02 12:58:42 -07:00
srv-rr-gh-researchbt 30b88e1862 Branch was auto-updated. 2023-05-02 12:58:41 -07:00
Bhavin Patel f0f5feafd1 Merge pull request #2658 from splunk/do_not_step_on_redline3
do_not_step_on_redline3
2023-05-02 12:58:16 -07:00
patel-bhavin 68748537d9 minor fixes 2023-05-02 12:55:11 -07:00
srv-rr-gh-researchbt d60cb0afd1 Branch was auto-updated. 2023-05-02 12:49:16 -07:00
srv-rr-gh-researchbt 9226eb8ad1 Branch was auto-updated. 2023-05-02 12:49:10 -07:00