 Bhavin Patel
|
f8cd6cf14e
|
Merge branch 'develop' into headless_bee
|
2025-03-12 11:07:41 -07:00 |
|
|
Bhavin Patel
|
5e5d72a4bb
|
Merge pull request #3316 from nterl0k/nterl0k-t1053-suspicious-task-lookups
Nterl0k - T1053 Windows Suspicious Sheduled Task + Lookup
|
2025-03-12 11:06:48 -07:00 |
|
|
Steven Dick
|
5060b8cefd
|
Update windows_event_log_security_4700.yml
|
2025-03-11 22:59:08 -04:00 |
|
|
Steven Dick
|
8295f6139b
|
Add files via upload
|
2025-03-11 22:56:06 -04:00 |
|
|
Steven Dick
|
9b794adc7b
|
Merge branch 'splunk:develop' into nterl0k-t1053-suspicious-task-lookups
|
2025-03-11 21:59:12 -04:00 |
|
|
Bhavin Patel
|
11322825a6
|
Merge pull request #3336 from 0xC0FFEEEE/susmailrule
0xC0FFEEEE - O365 Suspicious Mailbox Rule Created
|
2025-03-11 14:41:45 -07:00 |
|
|
Bhavin Patel
|
93b714ec08
|
Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups
|
2025-03-11 13:26:31 -07:00 |
|
|
Bhavin Patel
|
d5feba1042
|
drilldown update- minor
|
2025-03-11 13:22:04 -07:00 |
|
|
Bhavin Patel
|
e1b41cc05a
|
Merge branch 'develop' into susmailrule
|
2025-03-11 13:19:20 -07:00 |
|
|
Bhavin Patel
|
1d1d0dbd38
|
Merge branch 'develop' into headless_bee
|
2025-03-07 11:00:15 -08:00 |
|
|
Bhavin Patel
|
9b15a7b61a
|
Merge pull request #3376 from 0xC0FFEEEE/yourelinuxsilly
Windows Detections - Don't trigger on linux os
|
2025-03-07 10:59:55 -08:00 |
|
|
Bhavin Patel
|
6ff8fe0fb3
|
Merge branch 'develop' into susmailrule
|
2025-03-07 09:26:12 -08:00 |
|
|
Bhavin Patel
|
b3e768bf9e
|
Merge branch 'develop' into yourelinuxsilly
|
2025-03-07 09:24:56 -08:00 |
|
|
Bhavin Patel
|
d67548546b
|
Merge pull request #3383 from splunk/manual-ta-update-197
Manual TA Update 197
|
2025-03-07 09:24:43 -08:00 |
|
|
Bhavin Patel
|
817612a7b4
|
Merge branch 'develop' into headless_bee
|
2025-03-07 09:14:25 -08:00 |
|
|
Bhavin Patel
|
21bbda556f
|
Merge branch 'develop' into yourelinuxsilly
|
2025-03-07 09:12:52 -08:00 |
|
|
Bhavin Patel
|
bd54cf4d58
|
updating file name of the app
|
2025-03-07 09:00:38 -08:00 |
|
|
ljstella
|
cea71371d7
|
Cisco AppDynamics v3.1.0
|
2025-03-07 08:54:05 -06:00 |
|
|
Bhavin Patel
|
8a2909b8f0
|
Merge pull request #3375 from shilch/patch-1
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-04 12:44:48 -08:00 |
|
|
Bhavin Patel
|
b09805c250
|
Merge branch 'develop' into patch-1
|
2025-03-04 10:35:03 -08:00 |
|
|
Bhavin Patel
|
ae64f202ed
|
Merge pull request #3332 from splunk/haagsqldb
🎪 Haag's SQL Server Story Time: Tales of SQLCMD and Suspicious Queries 📚
|
2025-03-04 10:34:33 -08:00 |
|
|
Bhavin Patel
|
6033082600
|
Merge branch 'develop' into haagsqldb
|
2025-03-04 10:12:52 -08:00 |
|
|
Michael Haag
|
42fbaba04e
|
Update windows_sqlservr_spawning_shell.yml
|
2025-03-04 09:57:53 -07:00 |
|
|
Bhavin Patel
|
3dbc72f978
|
Merge pull request #3378 from splunk/v5.1.1
Updating lookup 5.1.1
v5.1.1
|
2025-03-04 08:49:58 -08:00 |
|
|
Michael Haag
|
827a80b69d
|
datasource
|
2025-03-03 20:30:50 -07:00 |
|
|
research-bot
|
6e84f4cab9
|
updating lookup
|
2025-03-03 16:20:52 -08:00 |
|
|
0xC0FFEEEE
|
46db370f8b
|
increment version, update date
|
2025-03-03 22:33:47 +00:00 |
|
|
0xC0FFEEEE
|
228a01acc1
|
another one
|
2025-03-03 16:27:00 +00:00 |
|
|
0xC0FFEEEE
|
64de1e5953
|
Don't trigger on linux os
|
2025-03-03 15:30:23 +00:00 |
|
|
Simon
|
ce6d61a75b
|
Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml
|
2025-03-03 13:35:26 +01:00 |
|
|
☕️
|
ff7729e418
|
Merge branch 'develop' into susmailrule
|
2025-03-01 01:10:19 +00:00 |
|
|
Bhavin Patel
|
a7d24fb0f5
|
Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups
|
2025-02-28 15:41:17 -08:00 |
|
|
Bhavin Patel
|
f0857d6fd7
|
Merge pull request #3292 from nterl0k/nterl0k-t1114-sus-o365-email-actions
Nterl0k - T1114 Suspect 0365 Email Actions
|
2025-02-28 15:27:13 -08:00 |
|
|
research-bot
|
6c5b29639b
|
adding available fields for this data source
|
2025-02-28 14:33:02 -08:00 |
|
|
research-bot
|
d813729588
|
updating test section as both dataset need to be indexed together
|
2025-02-28 14:29:32 -08:00 |
|
|
Steven Dick
|
03b79b651c
|
Add files via upload
|
2025-02-28 15:58:44 -05:00 |
|
|
Steven Dick
|
b59b41aece
|
Merge branch 'splunk:develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 15:50:16 -05:00 |
|
|
Bhavin Patel
|
489bcc427d
|
Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups
|
2025-02-28 12:44:17 -08:00 |
|
|
Bhavin Patel
|
44c8147ba9
|
Merge pull request #3370 from splunk/auto-ta-update-190
Automated Splunk TA Update 190
|
2025-02-28 12:43:49 -08:00 |
|
|
Bhavin Patel
|
cf52e66778
|
Merge branch 'develop' into nterl0k-t1114-sus-o365-email-actions
|
2025-02-28 11:52:31 -08:00 |
|
|
Lou Stella
|
b4b0f8a30c
|
Merge branch 'develop' into auto-ta-update-190
|
2025-02-28 13:48:25 -06:00 |
|
|
Bhavin Patel
|
c254e91bde
|
Merge pull request #3369 from splunk/dlux_6
Updating dcsync detection due to false positive
|
2025-02-28 11:43:02 -08:00 |
|
|
Bhavin Patel
|
8bd007e35b
|
Merge branch 'develop' into dlux_6
|
2025-02-28 11:14:51 -08:00 |
|
|
Bhavin Patel
|
f56cf8e2e4
|
revert
|
2025-02-28 11:14:12 -08:00 |
|
|
Br3akp0int
|
1ac0217f39
|
Merge branch 'develop' into headless_bee
|
2025-02-28 11:59:04 +01:00 |
|
|
patel-bhavin
|
ed4b0874da
|
Updated TAs
|
2025-02-28 06:58:25 +00:00 |
|
|
dluxtron
|
df04cd63c8
|
updating version and risk object
|
2025-02-28 12:06:04 +10:00 |
|
|
dluxtron
|
0923a79c49
|
updating version and risk object
|
2025-02-28 11:50:22 +10:00 |
|
|
Bhavin Patel
|
8a746596ba
|
Merge pull request #3367 from splunk/auto-ta-update-189
Automated Splunk TA Update 189
|
2025-02-27 14:04:17 -08:00 |
|
|
Bhavin Patel
|
a1eca2e737
|
Merge branch 'develop' into auto-ta-update-189
|
2025-02-27 11:02:24 -08:00 |
|