21718 Commits

Author SHA1 Message Date
Bhavin Patel 2b4e96f2a9 Merge pull request #2788 from splunk/rodbh
Rodbh
v4.8.0
2023-07-31 11:19:38 -05:00
Bhavin Patel 8a05a0f4c2 Update splunk_unauthenticated_log_injection_web_service_log.yml 2023-07-31 09:02:03 -07:00
Bhavin Patel d3806e5a35 Update splunk_unauthenticated_log_injection_web_service_log.yml 2023-07-31 08:59:56 -07:00
Rod Soto 908e686283 morefixes 2023-07-31 08:36:43 -07:00
Rod Soto e5b9e9437b fixes2 2023-07-31 08:32:33 -07:00
Rod Soto 59e5d6da72 typos 2023-07-31 08:18:50 -07:00
Rod Soto 29bf8975eb addeddollarsign 2023-07-31 08:05:51 -07:00
research bot 68b47d1e2c Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2023-07-25 20:43:13 +00:00
Bhavin Patel b133cf8888 Merge pull request #2778 from splunk/revert-2768-new_description_v1
Revert "20 description and how to implement"
v4.7.0
2023-07-24 16:12:08 -05:00
srv-rr-gh-researchbt ac79bf8eae Branch was auto-updated. 2023-07-24 09:41:36 -07:00
Bhavin Patel 5bb2b1962c Merge pull request #2779 from splunk/o365_version_bump
Version bump
2023-07-24 11:41:15 -05:00
Lou Stella 732c5c3631 Version bump 2023-07-24 10:07:26 -05:00
Lou Stella 2113e862ce Revert "20 description and how to implement" 2023-07-24 10:05:25 -05:00
pyth0n1c 4222212c0b Merge pull request #2776 from splunk/adc
Citrix Netscaler ADC CVE-2023-3519
2023-07-21 15:29:31 -07:00
pyth0n1c 449a12a1a7 Add ref link to story and detection.
Ref link is official documentation
and guidance from citirx.
2023-07-21 15:13:31 -07:00
Michael Haag 05d32c6c3d analytic + text update 2023-07-21 14:47:56 -07:00
Michael Haag ecb51ccc17 Create citrix_netscaler_adc_cve_2023_3519.yml 2023-07-20 16:57:57 -07:00
Bhavin Patel 209a82d628 Merge pull request #2774 from splunk/spl_fix_dest
Risk objects require fields be present
2023-07-18 10:38:50 -07:00
Lou Stella af65cf63ab Risk objects require fields be present 2023-07-18 12:10:59 -05:00
Rod Soto 387c4bd2e2 7bh 2023-07-14 18:01:32 -07:00
Rod Soto c1188551d2 6bh 2023-07-14 17:55:29 -07:00
Bhavin Patel 906b267152 Merge pull request #2768 from splunk/new_description_v1
20 description and how to implement
2023-07-14 13:51:23 -05:00
Michael Haag ae164e946a Update detect_prohibited_applications_spawning_cmd_exe.yml 2023-07-14 12:30:17 -06:00
Michael Haag 32548ab410 Update bcdedit_command_back_to_normal_mode_boot.yml 2023-07-14 12:29:49 -06:00
Rod Soto 8c9bcf49b4 6bh 2023-07-13 18:06:10 -07:00
Rod Soto fb13d95e4a 5bh 2023-07-13 17:42:22 -07:00
Rod Soto 6514087bfa bh4 2023-07-13 17:05:56 -07:00
Rod Soto 4db0f1f52f 3bh 2023-07-13 16:52:29 -07:00
Rod Soto 170779311d 2bh 2023-07-13 16:44:51 -07:00
Rod Soto ef63dc97e1 1bh 2023-07-13 16:23:43 -07:00
Bhavin Patel bf41c25534 first 20 description and how to implment 2023-07-13 13:07:12 -05:00
Bhavin Patel ad9a3aa25b Merge pull request #2720 from splunk/recon_correlation
recon_correlation
2023-07-13 11:34:52 -05:00
srv-rr-gh-researchbt f79ecca515 Branch was auto-updated. 2023-07-13 07:49:45 -07:00
Bhavin Patel 4aa5e08b0c Merge pull request #2721 from splunk/post_expoitation_correlation
post_expoitation_correlation
2023-07-13 09:49:08 -05:00
srv-rr-gh-researchbt 20e50557d4 Branch was auto-updated. 2023-07-13 07:47:34 -07:00
srv-rr-gh-researchbt 2387d7f6c1 Branch was auto-updated. 2023-07-13 07:47:33 -07:00
Bhavin Patel deac608058 Merge pull request #2746 from splunk/additional_lookup_file_quoting_validation
Improve lookup file csv validation
2023-07-13 09:47:14 -05:00
Bhavin Patel 7fb40505f8 Update windows_post_exploitation_risk_behavior.yml 2023-07-12 17:35:57 -05:00
Bhavin Patel e4ef2171a4 Update windows_common_abused_cmd_shell_risk_behavior.yml 2023-07-12 17:32:12 -05:00
Bhavin Patel 1761687bf6 Update windows_common_abused_cmd_shell_risk_behavior.yml 2023-07-12 17:28:41 -05:00
srv-rr-gh-researchbt 7732ef6591 Branch was auto-updated. 2023-07-12 15:17:20 -07:00
srv-rr-gh-researchbt 2ac45c7807 Branch was auto-updated. 2023-07-12 15:17:19 -07:00
srv-rr-gh-researchbt af6c78ab98 Branch was auto-updated. 2023-07-12 15:17:09 -07:00
Bhavin Patel 9f70e6b348 Merge pull request #2726 from splunk/win_modify_reg_correlation
win_modify_reg_correlation
2023-07-12 17:16:47 -05:00
Bhavin Patel adfc1e8f10 Update windows_modify_registry_risk_behavior.yml 2023-07-11 16:47:37 -05:00
Bhavin Patel 689caaf2ac Updated description 2023-07-11 16:46:13 -05:00
srv-rr-gh-researchbt 869e908606 Branch was auto-updated. 2023-07-11 13:25:42 -07:00
srv-rr-gh-researchbt f406010b37 Branch was auto-updated. 2023-07-11 13:25:30 -07:00
srv-rr-gh-researchbt 608eb182d7 Branch was auto-updated. 2023-07-11 13:25:28 -07:00
srv-rr-gh-researchbt 20315b3678 Branch was auto-updated. 2023-07-11 13:25:26 -07:00