19693 Commits

Author SHA1 Message Date
Bhavin Patel e2c6c24bc9 Merge pull request #2633 from splunk/manual_test_flag
manual test
v4.0.0
2023-04-18 14:27:17 -07:00
Bhavin Patel 64f4af2b09 Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:15:23 -07:00
Bhavin Patel d1d72506cb Update aws_multiple_users_failing_to_authenticate_from_ip.yml 2023-04-18 14:14:15 -07:00
patel-bhavin e9a68e2d5a aafter Erics feedback 2023-04-18 14:13:30 -07:00
Bhavin Patel c86fe48dfa Update windows_ad_domain_controller_audit_policy_disabled.yml 2023-04-18 14:08:19 -07:00
patel-bhavin 13c4b3f1e3 3 more 2023-04-18 13:13:57 -07:00
patel-bhavin 159f22e9af manual test 2023-04-18 13:00:52 -07:00
Bhavin Patel 2d98d82cf5 Merge pull request #2620 from splunk/blacklotus
BlackLotus Campaign
2023-04-18 12:41:48 -07:00
Michael Haag 67f4155367 the fox and the hen 2023-04-18 13:17:55 -06:00
Bhavin Patel cab29b15db Update windows_rdp_connection_successful.yml 2023-04-18 12:01:58 -07:00
srv-rr-gh-researchbt 39a3446248 Branch was auto-updated. 2023-04-18 11:46:39 -07:00
Bhavin Patel 7ec528b892 Merge pull request #2632 from splunk/TR-3110
adding risk=other to all configs
2023-04-18 11:46:22 -07:00
patel-bhavin a9c33e7702 fixing observables 2023-04-18 09:53:16 -07:00
patel-bhavin dc44d23e81 issue 2568 fix 2023-04-17 17:19:34 -07:00
srv-rr-gh-researchbt 664fafdd1c Branch was auto-updated. 2023-04-17 17:03:37 -07:00
srv-rr-gh-researchbt 1a73d58514 Branch was auto-updated. 2023-04-17 17:03:24 -07:00
Bhavin Patel 4261e70954 Merge pull request #2613 from splunk/sandworm_data_destruction
sandworm_data_destruction
2023-04-17 17:03:05 -07:00
srv-rr-gh-researchbt 14d5e4f739 Branch was auto-updated. 2023-04-17 16:57:26 -07:00
srv-rr-gh-researchbt 0f03e6211c Branch was auto-updated. 2023-04-17 16:57:24 -07:00
srv-rr-gh-researchbt d55b3753f9 Branch was auto-updated. 2023-04-17 16:57:10 -07:00
Bhavin Patel 9924a35dd0 Merge pull request #2584 from splunk/virustotal_v3_dynamic_analysis_playbooks
virustotal_v3_dynamic_analysis_playbooks
2023-04-17 16:56:49 -07:00
srv-rr-gh-researchbt 6a2f587aeb Branch was auto-updated. 2023-04-17 16:53:24 -07:00
srv-rr-gh-researchbt 939e1d4ae6 Branch was auto-updated. 2023-04-17 16:53:23 -07:00
srv-rr-gh-researchbt 72ab2d082e Branch was auto-updated. 2023-04-17 16:53:10 -07:00
srv-rr-gh-researchbt 5f5f0aa76b Branch was auto-updated. 2023-04-17 16:53:09 -07:00
Bhavin Patel 2b5558c553 Merge pull request #2619 from splunk/data_destruction_wiper_story
data_destruction_wiper_story
2023-04-17 16:52:51 -07:00
Bhavin Patel 69296ac7d1 Update okta_threatinsight_suspected_passwordspray_attack.yml 2023-04-17 16:46:08 -07:00
Bhavin Patel 2aafdb6cfe Merge branch 'develop' into sandworm_data_destruction 2023-04-17 16:44:20 -07:00
srv-rr-gh-researchbt ec104c0d19 Branch was auto-updated. 2023-04-17 16:26:23 -07:00
srv-rr-gh-researchbt 2a717b761a Branch was auto-updated. 2023-04-17 16:26:22 -07:00
srv-rr-gh-researchbt 73f0a8dc50 Branch was auto-updated. 2023-04-17 16:26:21 -07:00
srv-rr-gh-researchbt d3ebc2795c Branch was auto-updated. 2023-04-17 16:26:19 -07:00
Bhavin Patel 290dfde752 Merge pull request #2625 from splunk/bugfix_2622
Macro name change in one detection
2023-04-17 16:26:01 -07:00
Bhavin Patel 0d2826b215 Update data_destruction.yml 2023-04-17 16:23:21 -07:00
patel-bhavin 59443bd27e remove tests 2023-04-17 16:19:43 -07:00
patel-bhavin 932b49ccfd fixes to validate 2023-04-17 16:06:37 -07:00
patel-bhavin fc34672ca4 updates to ymls 2023-04-17 15:23:53 -07:00
patel-bhavin 4a9ce12739 adding risk=other to all configs 2023-04-17 15:00:26 -07:00
Michael Haag 747bf67e8a I AM THE RDP 2023-04-17 15:18:40 -06:00
srv-rr-gh-researchbt febf103b87 Branch was auto-updated. 2023-04-17 13:11:24 -07:00
srv-rr-gh-researchbt 37b753cd78 Branch was auto-updated. 2023-04-17 13:11:23 -07:00
srv-rr-gh-researchbt 02803d91be Branch was auto-updated. 2023-04-17 13:11:16 -07:00
srv-rr-gh-researchbt 126c88c59b Branch was auto-updated. 2023-04-17 13:11:12 -07:00
Michael Haag 03041105aa Merge pull request #2629 from splunk/bugfix_2623
Removing extra characters around field name
2023-04-17 14:10:54 -06:00
srv-rr-gh-researchbt 6a6fb9a0c1 Branch was auto-updated. 2023-04-17 13:04:10 -07:00
srv-rr-gh-researchbt 21c5a0bcae Branch was auto-updated. 2023-04-17 13:04:05 -07:00
srv-rr-gh-researchbt 3aeb70a13b Branch was auto-updated. 2023-04-17 13:03:54 -07:00
srv-rr-gh-researchbt 6955f7d8c6 Branch was auto-updated. 2023-04-17 13:03:53 -07:00
srv-rr-gh-researchbt 50f7e69d8f Branch was auto-updated. 2023-04-17 13:03:52 -07:00
Bhavin Patel bfd03a449c Merge pull request #2606 from splunk/winter_vivern_analytics
winter_vivern_analytics
2023-04-17 13:03:33 -07:00