 pyth0n1c
|
300af51b88
|
Merge pull request #3225 from splunk/bump_version_4_44_0
Bump version 4 44 0
I am intentionally overriding the branch protection.
v4.44.0
|
2024-12-03 13:59:48 -08:00 |
|
|
pyth0n1c
|
3a7575ca64
|
update default.meta to remove
stanzas that do not need to be
present. these stanzas cause
splunk to say it needs to be
restarted after escu is installed
|
2024-12-03 13:54:11 -08:00 |
|
|
pyth0n1c
|
23035523f0
|
bump version in prep for release
|
2024-12-03 13:14:56 -08:00 |
|
|
pyth0n1c
|
1e5c7993b9
|
Merge pull request #3213 from splunk/enhance_coverage
Enhancing Coverage - First Batch
|
2024-12-03 12:52:39 -08:00 |
|
|
Bhavin Patel
|
00b84023f7
|
Branch was auto-updated.
|
2024-12-03 11:29:51 -08:00 |
|
|
pyth0n1c
|
eb24889a42
|
Merge pull request #3221 from splunk/meduza
meduza
|
2024-12-03 11:29:36 -08:00 |
|
|
Bhavin Patel
|
d2ec1eece8
|
Branch was auto-updated.
|
2024-12-03 11:11:11 -08:00 |
|
|
Bhavin Patel
|
bc28c09463
|
Branch was auto-updated.
|
2024-12-03 11:11:10 -08:00 |
|
|
pyth0n1c
|
81d745d3e7
|
Merge pull request #3223 from ronan182/patch-1
Update wget_download_and_bash_execution.yml
|
2024-12-03 11:10:52 -08:00 |
|
|
pyth0n1c
|
acb9b7c52d
|
Merge branch 'develop' into patch-1
|
2024-12-03 11:07:52 -08:00 |
|
|
Bhavin Patel
|
6afbfae376
|
Branch was auto-updated.
|
2024-12-03 11:06:22 -08:00 |
|
|
Bhavin Patel
|
b2afa2d420
|
Branch was auto-updated.
|
2024-12-03 11:06:21 -08:00 |
|
|
pyth0n1c
|
dcd3286dda
|
Merge pull request #3222 from splunk/chmodupdate
Update linux_auditd_file_permission_modification_via_chmod.yml
|
2024-12-03 11:06:06 -08:00 |
|
|
pyth0n1c
|
6ac12f9411
|
Merge branch 'meduza' of https://github.com/splunk/security_content into meduza
|
2024-12-03 11:01:24 -08:00 |
|
|
pyth0n1c
|
23c3243573
|
Change many ORs to IN to improve readability
|
2024-12-03 11:00:56 -08:00 |
|
|
Nasreddine Bencherchali
|
5e47cf7d2d
|
Merge branch 'develop' into enhance_coverage
|
2024-12-03 19:27:17 +01:00 |
|
|
Nasreddine Bencherchali
|
08587b7f08
|
small typo fixes
|
2024-12-03 19:24:13 +01:00 |
|
|
Michael Haag
|
798c27c844
|
reference
|
2024-12-03 11:02:08 -07:00 |
|
|
Nasreddine Bencherchali
|
bf53ace3d5
|
Merge branch 'develop' into patch-1
|
2024-12-03 18:59:58 +01:00 |
|
|
Nasreddine Bencherchali
|
dcda82b90d
|
Update wget_download_and_bash_execution.yml
|
2024-12-03 18:58:11 +01:00 |
|
|
Nasreddine Bencherchali
|
f4345f98e1
|
Update wget_download_and_bash_execution.yml
|
2024-12-03 18:24:52 +01:00 |
|
|
Nasreddine Bencherchali
|
a51be65f26
|
Update wget_download_and_bash_execution.yml
|
2024-12-03 18:20:24 +01:00 |
|
|
Bhavin Patel
|
932513676e
|
Branch was auto-updated.
|
2024-12-02 15:01:09 -08:00 |
|
|
Bhavin Patel
|
79ba298221
|
Branch was auto-updated.
|
2024-12-02 15:01:07 -08:00 |
|
|
pyth0n1c
|
4be3cf9e63
|
Merge pull request #3216 from splunk/add_more_win_tag
add_more_win_tag
|
2024-12-02 15:00:45 -08:00 |
|
|
Bhavin Patel
|
e7bd8b6d6a
|
Branch was auto-updated.
|
2024-12-02 14:18:43 -08:00 |
|
|
Bhavin Patel
|
a6f9707561
|
Branch was auto-updated.
|
2024-12-02 14:18:43 -08:00 |
|
|
Bhavin Patel
|
2c19182820
|
Branch was auto-updated.
|
2024-12-02 14:18:42 -08:00 |
|
|
Bhavin Patel
|
197997fe7c
|
Branch was auto-updated.
|
2024-12-02 14:18:41 -08:00 |
|
|
pyth0n1c
|
7ae38fe43e
|
Merge pull request #3211 from splunk/rdpland
Raiders of the Lost RDP: The Haag Crusade
|
2024-12-02 14:18:23 -08:00 |
|
|
Bhavin Patel
|
851944e6ff
|
Branch was auto-updated.
|
2024-12-02 13:58:39 -08:00 |
|
|
Bhavin Patel
|
78f0ef8afa
|
Branch was auto-updated.
|
2024-12-02 13:58:38 -08:00 |
|
|
Bhavin Patel
|
5f6fba81e6
|
Branch was auto-updated.
|
2024-12-02 13:58:37 -08:00 |
|
|
Bhavin Patel
|
6e4134ed42
|
Branch was auto-updated.
|
2024-12-02 13:58:36 -08:00 |
|
|
pyth0n1c
|
9c15fd045a
|
Merge branch 'develop' into rdpland
|
2024-12-02 13:58:34 -08:00 |
|
|
pyth0n1c
|
b8ad19cb6f
|
Merge pull request #3220 from splunk/auto-ta-update-102
Automated Splunk TA Update 102
|
2024-12-02 13:58:20 -08:00 |
|
|
pyth0n1c
|
5276854ae8
|
Move data_source to middle of yml. Fix
minor typos or <update> still present
in drilldown.
|
2024-12-02 13:52:40 -08:00 |
|
|
pyth0n1c
|
4b3a3dffea
|
Make formatting easier to read
for example logs in auto-
updated data_sources
|
2024-12-02 13:23:36 -08:00 |
|
|
tccontre
|
e5137759b6
|
meduza
|
2024-12-02 19:58:33 +01:00 |
|
|
Michael Haag
|
676bbd9b8e
|
Update linux_auditd_file_permission_modification_via_chmod.yml
Update based on feedback from Ivar Nygård
Thank you!
|
2024-12-02 11:01:06 -07:00 |
|
|
Br3akp0int
|
39b67ab9ac
|
Update detections/endpoint/windows_credentials_access_via_vaultcli_module.yml
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2024-12-02 16:25:19 +01:00 |
|
|
Br3akp0int
|
3fb1c35f9c
|
Update detections/endpoint/windows_credentials_access_via_vaultcli_module.yml
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2024-12-02 16:24:25 +01:00 |
|
|
Ronan Duffy
|
9b06386793
|
Update wget_download_and_bash_execution.yml
Change "Processes.process_name=wget" to "Processes.process_name=wget.exe" as process_name is always the executable file. =wget* would also work
|
2024-12-02 15:12:49 +00:00 |
|
|
tccontre
|
a534ca78eb
|
meduza
|
2024-12-02 13:53:45 +01:00 |
|
|
tccontre
|
3893833b7c
|
meduza
|
2024-12-02 13:48:52 +01:00 |
|
|
tccontre
|
5a47ecf5c7
|
meduza
|
2024-12-02 13:42:14 +01:00 |
|
|
patel-bhavin
|
89401d3170
|
Updated TAs
|
2024-12-02 06:57:46 +00:00 |
|
|
tccontre
|
1761f3dbe4
|
add_more_win_tag
|
2024-11-28 09:42:44 +01:00 |
|
|
Nasreddine Bencherchali
|
369e895d1f
|
batch 3
|
2024-11-27 00:10:38 +01:00 |
|
|
Nasreddine Bencherchali
|
d4aed3d50c
|
fix env typo in macros
|
2024-11-26 23:43:48 +01:00 |
|