26572 Commits

Author SHA1 Message Date
Bhavin Patel 45838649b8 Merge pull request #3366 from splunk/remove_detections
Remove 151 Deprecated detections, stories, baselines, investigations - Github
v5.2.0
2025-03-18 16:14:36 -07:00
Eric 011b33cb5b Merge branch 'remove_detections' of https://github.com/splunk/security_content into remove_detections 2025-03-18 15:42:04 -07:00
Eric 58aca7db99 Update the deprecation_info.csv file, manually generated with a version of contentctl that has not yet been merged or released in main branch. 2025-03-18 15:41:21 -07:00
Bhavin Patel 59b9657e4a Merge branch 'develop' into remove_detections 2025-03-18 15:32:53 -07:00
Bhavin Patel 7ba4dc0a4d Merge pull request #3405 from splunk/risk_message
update spl
2025-03-18 15:22:18 -07:00
Bhavin Patel 2f128036c1 Merge branch 'develop' into risk_message 2025-03-18 15:08:01 -07:00
Bhavin Patel df44136390 Merge pull request #3287 from delgado-jacob/datasource_enrichment
Add descriptions and Mitre components to data sources
2025-03-18 15:07:51 -07:00
Bhavin Patel ea3fa4daf6 updating search 2025-03-18 14:52:30 -07:00
delgado-jacob 4b70500f07 Merge remote-tracking branch 'origin/datasource_enrichment' into datasource_enrichment 2025-03-18 14:29:50 -07:00
delgado-jacob 6488af7c57 Add Zeek TA, fix detection source list 2025-03-18 14:29:30 -07:00
Eric f096d77d6f Changed the names of some fields due to the use of both deprecated and removed to refer to content in different stages of removal 2025-03-18 14:25:56 -07:00
Eric b1d1ae90d9 rename deprecated directory to removed 2025-03-18 14:14:37 -07:00
Bhavin Patel 0d2d727083 updating replace 2025-03-18 13:39:46 -07:00
Bhavin Patel ebe5db35ae Merge branch 'develop' into datasource_enrichment 2025-03-18 12:55:17 -07:00
Eric ad55d26fe4 add 'status: removed' instead of 'status: deprecated' to removed detections 2025-03-18 12:33:06 -07:00
Eric 5e0d59e186 bump version in prep for release
and so that deprecation stuff
works properly.
2025-03-18 12:07:47 -07:00
delgado-jacob da5c9b9bbd fix separator_value field 2025-03-18 11:37:35 -07:00
Bhavin Patel 86e7863669 updating file name 2025-03-18 11:16:32 -07:00
Bhavin Patel 6a53b8c61b adding 2 splunk detections 2025-03-18 10:52:47 -07:00
Bhavin Patel 030b038245 Merge branch 'develop' into remove_detections 2025-03-18 10:33:41 -07:00
Bhavin Patel 505c176c62 Merge pull request #3403 from splunk/aws_output_improvements
output improvements
2025-03-18 09:13:01 -07:00
Patrick Bareiss 81e0801829 rerun CI 2025-03-18 13:55:20 +01:00
Patrick Bareiss 3122cbbc8b output improvements 2025-03-18 12:56:30 +01:00
P4T12ICK 2d498dd311 Merge pull request #3401 from splunk/moar_5.2.0_fixes
integration fixes for 5.2.0
2025-03-18 08:03:18 +01:00
Bhavin Patel f04362d709 sort 2025-03-17 19:41:07 -07:00
Bhavin Patel 3819c6864d updating detections 2025-03-17 19:14:58 -07:00
Bhavin Patel ca86201823 adding 2 deprecated baselines 2025-03-17 18:28:42 -07:00
Bhavin Patel 4d4a1c6649 adding cross account stuff 2025-03-17 18:19:56 -07:00
Bhavin Patel 99a4b6fa4b adding missing baselines 2025-03-17 18:09:42 -07:00
Bhavin Patel c345f920ed adding gitkeep for empty folders 2025-03-17 18:04:26 -07:00
Bhavin Patel f672cb55c0 updating missing detections 2025-03-17 17:55:30 -07:00
Bhavin Patel 1ad53e770f Merge branch 'develop' into remove_detections 2025-03-17 17:29:49 -07:00
Bhavin Patel 218ee15dcd Merge pull request #3368 from nterl0k/nterl0k-T1552-sus-o365-searches
Nterl0k - T1552 Suspect o365 Searches
2025-03-17 17:29:33 -07:00
delgado-jacob 53b1928512 normalize quotes 2025-03-17 17:07:03 -07:00
delgado-jacob bb134be861 Merge remote-tracking branch 'upstream/develop' into datasource_enrichment 2025-03-17 17:04:08 -07:00
Bhavin Patel 276d45b485 Merge branch 'develop' into nterl0k-T1552-sus-o365-searches 2025-03-17 16:47:27 -07:00
Bhavin Patel 77dfe52b89 Update macro 2025-03-17 16:44:09 -07:00
pyth0n1c 990b544271 Fixed spacing in improperly formatted YML file 2025-03-17 16:41:52 -07:00
Bhavin Patel f262a36557 Merge pull request #3363 from splunk/deprecated_mapping_update
Proposed format update for deprecation file
2025-03-17 16:06:01 -07:00
pyth0n1c 5dcad4a631 remove deprecated_date and
replacement_content if there is
no content defined
2025-03-17 15:35:21 -07:00
Bhavin Patel a24a2f0a1b updating next batch to 5.4.0 2025-03-17 15:30:39 -07:00
Bhavin Patel 89cc1aca90 replacement stories 2025-03-17 15:12:39 -07:00
Bhavin Patel 7f3276c872 Merge branch 'develop' into remove_detections 2025-03-17 14:38:06 -07:00
Bhavin Patel 81a16341a3 Revert "version updates"
This reverts commit 58d7d6052c.
2025-03-17 14:28:53 -07:00
Michael Haag 58d7d6052c version updates 2025-03-17 13:25:49 -06:00
Bhavin Patel 1b65d10a98 Merge pull request #3391 from splunk/auto-ta-update-204
Automated Splunk TA Update 204
2025-03-17 11:45:00 -07:00
Bhavin Patel 1dca8f9f38 Merge branch 'develop' into deprecated_mapping_update 2025-03-17 11:43:14 -07:00
Bhavin Patel cfaa0320a8 Merge branch 'develop' into auto-ta-update-204 2025-03-17 11:29:39 -07:00
Bhavin Patel a227cf81b0 Merge pull request #3371 from splunk/systembc
systembc
2025-03-17 11:25:10 -07:00
Bhavin Patel 1b845ba176 Merge branch 'develop' into systembc 2025-03-17 10:27:20 -07:00