21702 Commits

Author SHA1 Message Date
Bhavin Patel b133cf8888 Merge pull request #2778 from splunk/revert-2768-new_description_v1
Revert "20 description and how to implement"
v4.7.0
2023-07-24 16:12:08 -05:00
srv-rr-gh-researchbt ac79bf8eae Branch was auto-updated. 2023-07-24 09:41:36 -07:00
Bhavin Patel 5bb2b1962c Merge pull request #2779 from splunk/o365_version_bump
Version bump
2023-07-24 11:41:15 -05:00
Lou Stella 732c5c3631 Version bump 2023-07-24 10:07:26 -05:00
Lou Stella 2113e862ce Revert "20 description and how to implement" 2023-07-24 10:05:25 -05:00
pyth0n1c 4222212c0b Merge pull request #2776 from splunk/adc
Citrix Netscaler ADC CVE-2023-3519
2023-07-21 15:29:31 -07:00
pyth0n1c 449a12a1a7 Add ref link to story and detection.
Ref link is official documentation
and guidance from citirx.
2023-07-21 15:13:31 -07:00
Michael Haag 05d32c6c3d analytic + text update 2023-07-21 14:47:56 -07:00
Michael Haag ecb51ccc17 Create citrix_netscaler_adc_cve_2023_3519.yml 2023-07-20 16:57:57 -07:00
Bhavin Patel 209a82d628 Merge pull request #2774 from splunk/spl_fix_dest
Risk objects require fields be present
2023-07-18 10:38:50 -07:00
Lou Stella af65cf63ab Risk objects require fields be present 2023-07-18 12:10:59 -05:00
Bhavin Patel 906b267152 Merge pull request #2768 from splunk/new_description_v1
20 description and how to implement
2023-07-14 13:51:23 -05:00
Michael Haag ae164e946a Update detect_prohibited_applications_spawning_cmd_exe.yml 2023-07-14 12:30:17 -06:00
Michael Haag 32548ab410 Update bcdedit_command_back_to_normal_mode_boot.yml 2023-07-14 12:29:49 -06:00
Bhavin Patel bf41c25534 first 20 description and how to implment 2023-07-13 13:07:12 -05:00
Bhavin Patel ad9a3aa25b Merge pull request #2720 from splunk/recon_correlation
recon_correlation
2023-07-13 11:34:52 -05:00
srv-rr-gh-researchbt f79ecca515 Branch was auto-updated. 2023-07-13 07:49:45 -07:00
Bhavin Patel 4aa5e08b0c Merge pull request #2721 from splunk/post_expoitation_correlation
post_expoitation_correlation
2023-07-13 09:49:08 -05:00
srv-rr-gh-researchbt 20e50557d4 Branch was auto-updated. 2023-07-13 07:47:34 -07:00
srv-rr-gh-researchbt 2387d7f6c1 Branch was auto-updated. 2023-07-13 07:47:33 -07:00
Bhavin Patel deac608058 Merge pull request #2746 from splunk/additional_lookup_file_quoting_validation
Improve lookup file csv validation
2023-07-13 09:47:14 -05:00
Bhavin Patel 7fb40505f8 Update windows_post_exploitation_risk_behavior.yml 2023-07-12 17:35:57 -05:00
Bhavin Patel e4ef2171a4 Update windows_common_abused_cmd_shell_risk_behavior.yml 2023-07-12 17:32:12 -05:00
Bhavin Patel 1761687bf6 Update windows_common_abused_cmd_shell_risk_behavior.yml 2023-07-12 17:28:41 -05:00
srv-rr-gh-researchbt 7732ef6591 Branch was auto-updated. 2023-07-12 15:17:20 -07:00
srv-rr-gh-researchbt 2ac45c7807 Branch was auto-updated. 2023-07-12 15:17:19 -07:00
srv-rr-gh-researchbt af6c78ab98 Branch was auto-updated. 2023-07-12 15:17:09 -07:00
Bhavin Patel 9f70e6b348 Merge pull request #2726 from splunk/win_modify_reg_correlation
win_modify_reg_correlation
2023-07-12 17:16:47 -05:00
Bhavin Patel adfc1e8f10 Update windows_modify_registry_risk_behavior.yml 2023-07-11 16:47:37 -05:00
Bhavin Patel 689caaf2ac Updated description 2023-07-11 16:46:13 -05:00
srv-rr-gh-researchbt 869e908606 Branch was auto-updated. 2023-07-11 13:25:42 -07:00
srv-rr-gh-researchbt f406010b37 Branch was auto-updated. 2023-07-11 13:25:30 -07:00
srv-rr-gh-researchbt 608eb182d7 Branch was auto-updated. 2023-07-11 13:25:28 -07:00
srv-rr-gh-researchbt 20315b3678 Branch was auto-updated. 2023-07-11 13:25:26 -07:00
Bhavin Patel 90f212bf9f Merge pull request #2764 from splunk/moveitupdate
Update moveit_transfer_critical_vulnerability.yml
2023-07-11 15:24:25 -05:00
srv-rr-gh-researchbt 37b631dab9 Branch was auto-updated. 2023-07-11 13:23:53 -07:00
srv-rr-gh-researchbt b5be78d2a8 Branch was auto-updated. 2023-07-11 13:23:52 -07:00
srv-rr-gh-researchbt dcbb780a85 Branch was auto-updated. 2023-07-11 13:23:50 -07:00
srv-rr-gh-researchbt 78d81dafb6 Branch was auto-updated. 2023-07-11 13:23:48 -07:00
srv-rr-gh-researchbt bfed239ab2 Branch was auto-updated. 2023-07-11 13:23:39 -07:00
Bhavin Patel f77ea198bb Merge pull request #2763 from splunk/blackbyte_campaign
blackbyte_campaign
2023-07-11 15:23:18 -05:00
srv-rr-gh-researchbt 676a43e150 Branch was auto-updated. 2023-07-11 13:18:24 -07:00
srv-rr-gh-researchbt c68f450b5a Branch was auto-updated. 2023-07-11 13:18:22 -07:00
srv-rr-gh-researchbt 71d02cfa3b Branch was auto-updated. 2023-07-11 13:18:14 -07:00
srv-rr-gh-researchbt 606063e921 Branch was auto-updated. 2023-07-11 13:18:12 -07:00
srv-rr-gh-researchbt 75b3ed3031 Branch was auto-updated. 2023-07-11 13:18:09 -07:00
srv-rr-gh-researchbt e88f932c33 Branch was auto-updated. 2023-07-11 13:18:08 -07:00
Bhavin Patel ca60c3b4f6 Merge pull request #2765 from splunk/mshtmlcve
CVE-2023-36884 coverage
2023-07-11 15:17:47 -05:00
srv-rr-gh-researchbt ba31d3dfd0 Branch was auto-updated. 2023-07-11 13:03:20 -07:00
srv-rr-gh-researchbt 0f9c9183ff Branch was auto-updated. 2023-07-11 13:03:18 -07:00