 Bhavin Patel
|
31deacc6bd
|
Merge pull request #3445 from sventec/patch-1
fix: remote_utility typo in remote_access_software.csv
v5.3.0
|
2025-04-04 12:50:44 -07:00 |
|
|
Bhavin Patel
|
86a0f199ba
|
Merge branch 'develop' into patch-1
|
2025-04-04 12:36:23 -07:00 |
|
|
Bhavin Patel
|
028045bd49
|
Merge pull request #3427 from splunk/jp_paranoid
Deprecate duplicate detection
|
2025-04-04 10:00:52 -07:00 |
|
|
sventec
|
889c08ebbf
|
chore: update lookup date and version
|
2025-04-04 11:32:45 -04:00 |
|
|
sventec
|
5f1d8f6b3f
|
fix: addtl remote_utility typo in remote_access_software.csv
|
2025-04-04 11:32:32 -04:00 |
|
|
sventec
|
66889be8a6
|
fix: remote_utility typo in remote_access_software.csv
|
2025-04-04 11:20:21 -04:00 |
|
|
Bhavin Patel
|
89ea90a820
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 12:52:41 -07:00 |
|
|
Bhavin Patel
|
e7263c96a7
|
Merge pull request #3411 from splunk/firewall_win_events
firewall_win_events
|
2025-04-03 12:52:23 -07:00 |
|
|
Bhavin Patel
|
39ce057227
|
fix dd
|
2025-04-03 12:18:53 -07:00 |
|
|
Bhavin Patel
|
f1561e6173
|
Merge branch 'develop' into jp_paranoid
|
2025-04-03 10:46:23 -07:00 |
|
|
Bhavin Patel
|
49d75bbc36
|
Merge branch 'develop' into firewall_win_events
|
2025-04-03 10:44:21 -07:00 |
|
|
Bhavin Patel
|
39850effa7
|
Merge pull request #3392 from splunk/medusa_ransomware
medusa_ransomware
|
2025-04-03 10:43:13 -07:00 |
|
|
Bhavin Patel
|
6b1ad9369a
|
revert powershell change and use fillnull
|
2025-04-03 09:10:34 -07:00 |
|
|
Bhavin Patel
|
0212a445f6
|
Merge branch 'develop' into jp_paranoid
|
2025-04-02 15:04:07 -07:00 |
|
|
Bhavin Patel
|
ae45debc8b
|
Merge branch 'develop' into firewall_win_events
|
2025-04-02 14:47:40 -07:00 |
|
|
Bhavin Patel
|
43abc9471f
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 14:28:10 -07:00 |
|
|
Bhavin Patel
|
af9c381948
|
Merge pull request #3407 from splunk/renamed_earth_erties
renamed_earth_erties
|
2025-04-02 14:22:52 -07:00 |
|
|
Bhavin Patel
|
70a04d7ca0
|
Merge branch 'develop' into firewall_win_events
|
2025-04-02 13:23:42 -07:00 |
|
|
Bhavin Patel
|
0d93ce9c0b
|
updating conflicts
|
2025-04-02 13:18:06 -07:00 |
|
|
Bhavin Patel
|
3bf27db466
|
updating data source and search since Path is not availble in this dataset
|
2025-04-02 12:58:26 -07:00 |
|
|
Bhavin Patel
|
23219463dc
|
Merge branch 'develop' into jp_paranoid
|
2025-04-02 12:07:51 -07:00 |
|
|
Bhavin Patel
|
f8d1d71db9
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-02 11:22:19 -07:00 |
|
|
Bhavin Patel
|
90ab68ee3e
|
Merge pull request #3400 from splunk/rceattack
PHP-CGI RCE Attack on Japanese Organizations
|
2025-04-02 11:21:16 -07:00 |
|
|
Bhavin Patel
|
7dabc2680f
|
Merge branch 'develop' into rceattack
|
2025-04-02 11:06:00 -07:00 |
|
|
Bhavin Patel
|
9493465161
|
adding new required fields to the new detections and fixing conflicts
|
2025-04-02 11:03:34 -07:00 |
|
|
Bhavin Patel
|
e141238eaf
|
Merge pull request #3346 from splunk/output_normalization_endpoint
Output normalization endpoint
|
2025-04-02 10:20:18 -07:00 |
|
|
Bhavin Patel
|
f03979077a
|
Merge branch 'develop' into rceattack
|
2025-04-01 15:47:23 -07:00 |
|
|
Bhavin Patel
|
c407bb8aa0
|
Merge branch 'develop' into jp_paranoid
|
2025-04-01 15:46:14 -07:00 |
|
|
Bhavin Patel
|
a679c2e510
|
Merge branch 'develop' into medusa_ransomware
|
2025-04-01 14:52:23 -07:00 |
|
|
Bhavin Patel
|
e6db474205
|
two new Mike detection fixes
|
2025-04-01 14:51:22 -07:00 |
|
|
Bhavin Patel
|
00253f3c6e
|
Merge branch 'develop' into output_normalization_endpoint
|
2025-04-01 14:45:19 -07:00 |
|
|
Bhavin Patel
|
2c2e127a88
|
Merge pull request #3440 from splunk/integration_fixes_endpoint
integration fixes for endpoint detections
|
2025-04-01 14:45:03 -07:00 |
|
|
Bhavin Patel
|
041054cf08
|
Merge pull request #3417 from splunk/ZDI-CAN-25373
Clear and Present Haag-er: ZDI-CAN-25373
|
2025-04-01 14:43:34 -07:00 |
|
|
Bhavin Patel
|
72e2438196
|
Merge branch 'develop' into rceattack
|
2025-04-01 14:34:38 -07:00 |
|
|
Bhavin Patel
|
deb9ca1eba
|
Merge branch 'develop' into ZDI-CAN-25373
|
2025-04-01 14:22:38 -07:00 |
|
|
Bhavin Patel
|
783b77f66f
|
Merge branch 'develop' into jp_paranoid
|
2025-04-01 14:19:53 -07:00 |
|
|
Bhavin Patel
|
452411530f
|
Merge pull request #3421 from splunk/sunnyside
Tomcat CVE-2025-24813: Haag Story 3: Attack Analytics to the Rescue
|
2025-04-01 14:19:39 -07:00 |
|
|
Bhavin Patel
|
7168e32ea6
|
Merge branch 'develop' into sunnyside
|
2025-04-01 14:05:53 -07:00 |
|
|
Michael Haag
|
6c40990600
|
fixes
|
2025-04-01 15:05:10 -06:00 |
|
|
Bhavin Patel
|
1201ccae64
|
udpating spl tick
|
2025-04-01 14:01:43 -07:00 |
|
|
Michael Haag
|
e393aaad5c
|
done
|
2025-04-01 14:53:17 -06:00 |
|
|
Michael Haag
|
7c4ef721c2
|
donez
|
2025-04-01 14:52:17 -06:00 |
|
|
Michael Haag
|
09e184389b
|
Merge branch 'develop' into ZDI-CAN-25373
|
2025-04-01 14:49:25 -06:00 |
|
|
Michael Haag
|
55b5bc77d2
|
fixagai
|
2025-04-01 14:48:54 -06:00 |
|
|
Michael Haag
|
452378b283
|
fixor
|
2025-04-01 14:37:35 -06:00 |
|
|
Michael Haag
|
f435240b83
|
fixes
|
2025-04-01 14:34:18 -06:00 |
|
|
Bhavin Patel
|
488debfe2b
|
fixing failed detections
|
2025-04-01 12:55:52 -07:00 |
|
|
Bhavin Patel
|
c85370b142
|
Merge branch 'develop' into firewall_win_events
|
2025-04-01 12:44:49 -07:00 |
|
|
Bhavin Patel
|
7ae5e1a2fe
|
Merge pull request #3439 from splunk/output_normalization_endpoint_fixes
Integration Testing bug fixes
|
2025-04-01 09:15:00 -07:00 |
|
|
Teoderick Contreras
|
b31f246793
|
medusa_ransomware
|
2025-04-01 12:54:03 +02:00 |
|