 Nasreddine Bencherchali
|
f98fe82f49
|
Merge branch 'develop' into csftd_third_batch
|
2025-04-17 18:06:43 +02:00 |
|
|
Bhavin Patel
|
9bb83d7703
|
Merge pull request #3443 from splunk/csftd_first_batch
Cisco Secure Firewall Detections - Connection Event Based
|
2025-04-17 08:54:18 -07:00 |
|
|
Bhavin Patel
|
704e9ccdd7
|
missed a threat object
|
2025-04-16 16:51:46 -07:00 |
|
|
Bhavin Patel
|
7fdcb4e7e0
|
adding drilldown
|
2025-04-16 16:31:04 -07:00 |
|
|
Bhavin Patel
|
b6f87ba697
|
make it production
|
2025-04-16 16:26:45 -07:00 |
|
|
Bhavin Patel
|
226dabdf34
|
fillnull for url
|
2025-04-16 16:09:07 -07:00 |
|
|
Bhavin Patel
|
e1dc36ad07
|
revert wrong commit
|
2025-04-16 16:00:23 -07:00 |
|
|
Bhavin Patel
|
b154c14045
|
remove static loookup
|
2025-04-16 15:52:45 -07:00 |
|
|
Bhavin Patel
|
de93d96862
|
updating RBA
|
2025-04-16 15:45:14 -07:00 |
|
|
Nasreddine Bencherchali
|
4c8c3cea78
|
update risk objects type
|
2025-04-17 00:24:46 +02:00 |
|
|
Nasreddine Bencherchali
|
6b64604903
|
resolve review comments
|
2025-04-17 00:22:13 +02:00 |
|
|
Nasreddine Bencherchali
|
b9d06c166f
|
update fields to cim and add output fields
|
2025-04-16 20:37:37 +02:00 |
|
|
Nasreddine Bencherchali
|
97800f4fdb
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-16 20:19:57 +02:00 |
|
|
Nasreddine Bencherchali
|
56cc3f5928
|
update fields to cim and add output fields
|
2025-04-16 19:57:13 +02:00 |
|
|
Bhavin Patel
|
c25f1397d3
|
Merge pull request #3464 from splunk/detection_bug_fix
bug fix detection Windows Registry Payload Injection
|
2025-04-16 09:15:09 -07:00 |
|
|
Nasreddine Bencherchali
|
96294957a3
|
add datasource and corresponding field
|
2025-04-16 17:19:21 +02:00 |
|
|
Nasreddine Bencherchali
|
3480c1b6b3
|
renamed analytic
|
2025-04-16 17:13:50 +02:00 |
|
|
Nasreddine Bencherchali
|
f23304e5be
|
cisco secure firewall detections - third batch
|
2025-04-16 17:11:11 +02:00 |
|
|
Patrick Bareiss
|
06f39d9906
|
Merge branch 'detection_bug_fix' of github.com:splunk/security_content into detection_bug_fix
|
2025-04-16 13:42:25 +02:00 |
|
|
Patrick Bareiss
|
f00967835c
|
improvements detection
|
2025-04-16 13:42:06 +02:00 |
|
|
Bhavin Patel
|
3aa4e698dd
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-15 15:53:13 -07:00 |
|
|
Bhavin Patel
|
b175e03111
|
Update windows_registry_payload_injection.yml
|
2025-04-15 08:51:06 -07:00 |
|
|
Bhavin Patel
|
28dcd19759
|
Merge branch 'develop' into detection_bug_fix
|
2025-04-15 08:45:02 -07:00 |
|
|
Bhavin Patel
|
1a084095d5
|
Merge pull request #3456 from splunk/TR-4095
Add output fields, tighten up outputs
|
2025-04-15 08:44:42 -07:00 |
|
|
Bhavin Patel
|
78d572d49e
|
Merge branch 'develop' into TR-4095
|
2025-04-15 08:20:06 -07:00 |
|
|
Patrick Bareiss
|
63bf81a08f
|
bump version
|
2025-04-15 09:17:17 +02:00 |
|
|
Patrick Bareiss
|
318f15ce7d
|
bug fix detection Windows Registry Payload Injection
|
2025-04-15 09:05:50 +02:00 |
|
|
Bhavin Patel
|
09640e8d10
|
Merge pull request #3454 from splunk/bump_yaml
updating version contentctl.yml
|
2025-04-10 09:58:37 -07:00 |
|
|
ljstella
|
ce3755b4d8
|
Add registry_path
|
2025-04-10 11:56:28 -05:00 |
|
|
Bhavin Patel
|
0e77f7fe27
|
Merge branch 'develop' into bump_yaml
|
2025-04-10 09:52:16 -07:00 |
|
|
Bhavin Patel
|
c873289d6a
|
Merge branch 'develop' into TR-4095
|
2025-04-10 09:45:40 -07:00 |
|
|
Bhavin Patel
|
effe6c2e2f
|
Merge pull request #3452 from splunk/issue_template_update
Updating issue templates with types
|
2025-04-10 09:45:30 -07:00 |
|
|
ljstella
|
c733afbb0f
|
Update PR template for contentctl v5 lookup handling
|
2025-04-10 11:09:33 -05:00 |
|
|
ljstella
|
23f0df3e96
|
Date & Version bump
|
2025-04-10 11:07:16 -05:00 |
|
|
ljstella
|
8020e90e6d
|
Add output fields, tighten up outputs
|
2025-04-10 11:05:36 -05:00 |
|
|
Bhavin Patel
|
c79c1f63ba
|
updating version
|
2025-04-09 16:31:51 -07:00 |
|
|
ljstella
|
2b758d876a
|
Updating issue templates with types
|
2025-04-09 12:18:36 -05:00 |
|
|
Nasreddine Bencherchali
|
953c8d59da
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-09 16:34:47 +02:00 |
|
|
Nasreddine Bencherchali
|
2392ffd68d
|
Update cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml
|
2025-04-08 17:12:31 +02:00 |
|
|
Bhavin Patel
|
31deacc6bd
|
Merge pull request #3445 from sventec/patch-1
fix: remote_utility typo in remote_access_software.csv
v5.3.0
|
2025-04-04 12:50:44 -07:00 |
|
|
Bhavin Patel
|
86a0f199ba
|
Merge branch 'develop' into patch-1
|
2025-04-04 12:36:23 -07:00 |
|
|
Bhavin Patel
|
028045bd49
|
Merge pull request #3427 from splunk/jp_paranoid
Deprecate duplicate detection
|
2025-04-04 10:00:52 -07:00 |
|
|
sventec
|
889c08ebbf
|
chore: update lookup date and version
|
2025-04-04 11:32:45 -04:00 |
|
|
sventec
|
5f1d8f6b3f
|
fix: addtl remote_utility typo in remote_access_software.csv
|
2025-04-04 11:32:32 -04:00 |
|
|
sventec
|
66889be8a6
|
fix: remote_utility typo in remote_access_software.csv
|
2025-04-04 11:20:21 -04:00 |
|
|
Bhavin Patel
|
89ea90a820
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 12:52:41 -07:00 |
|
|
Bhavin Patel
|
e7263c96a7
|
Merge pull request #3411 from splunk/firewall_win_events
firewall_win_events
|
2025-04-03 12:52:23 -07:00 |
|
|
Bhavin Patel
|
39ce057227
|
fix dd
|
2025-04-03 12:18:53 -07:00 |
|
|
Nasreddine Bencherchali
|
53e3105db8
|
Merge branch 'develop' into csftd_first_batch
|
2025-04-03 20:59:14 +02:00 |
|
|
Bhavin Patel
|
f1561e6173
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 10:46:23 -07:00 |
|