 Bhavin Patel
|
de5542c9c1
|
Merge pull request #3481 from splunk/revert_prestats_optimization
Revert prestats optimization
v5.4.0
|
2025-04-22 14:19:44 -07:00 |
|
|
pyth0n1c
|
08dac066e8
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 13:52:23 -07:00 |
|
|
pyth0n1c
|
4c1dbbb3ac
|
Merge pull request #3486 from splunk/shadow_single
Update attack data - Delete ShadowCopy With PowerShell
|
2025-04-22 13:51:59 -07:00 |
|
|
Lou Stella
|
3b73f92315
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 15:42:09 -05:00 |
|
|
Lou Stella
|
91e97c147c
|
Merge branch 'develop' into shadow_single
|
2025-04-22 15:37:34 -05:00 |
|
|
pyth0n1c
|
ac5b667bd7
|
Merge pull request #3485 from splunk/version_adjustments
Version adjustments for new detection metadata validation check
|
2025-04-22 13:37:08 -07:00 |
|
|
Bhavin Patel
|
5158549d8b
|
updating dataset
|
2025-04-22 13:32:12 -07:00 |
|
|
Lou Stella
|
f0e662bd6f
|
Merge branch 'develop' into version_adjustments
|
2025-04-22 15:04:40 -05:00 |
|
|
ljstella
|
6fc106b995
|
Version adjustments for new detection metadata validation check
|
2025-04-22 15:03:23 -05:00 |
|
|
Bhavin Patel
|
34d33627b3
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 12:12:45 -07:00 |
|
|
pyth0n1c
|
2bbcdd5032
|
Merge pull request #3484 from splunk/cisco_slashn
Cisco slashn
|
2025-04-22 12:12:32 -07:00 |
|
|
Bhavin Patel
|
3fb1a7ad96
|
Merge branch 'develop' into revert_prestats_optimization
|
2025-04-22 12:11:41 -07:00 |
|
|
pyth0n1c
|
1411dac82f
|
Merge branch 'develop' into cisco_slashn
|
2025-04-22 12:11:23 -07:00 |
|
|
pyth0n1c
|
45af4dedab
|
Merge pull request #3483 from splunk/mitre_17
updating ids in new branch
|
2025-04-22 12:11:02 -07:00 |
|
|
Bhavin Patel
|
f37ca5fc68
|
update message formatting
|
2025-04-22 12:05:49 -07:00 |
|
|
Bhavin Patel
|
4a1547b9c9
|
updating message
|
2025-04-22 11:51:26 -07:00 |
|
|
Bhavin Patel
|
b1ff40dfd4
|
updating ids in new branch
|
2025-04-22 11:24:52 -07:00 |
|
|
Bhavin Patel
|
f8df5c4491
|
Update windows_deleted_registry_by_a_non_critical_process_file_path.yml
fix data source
|
2025-04-22 10:33:39 -07:00 |
|
|
Patrick Bareiss
|
967b689501
|
bump version
|
2025-04-22 11:06:07 +02:00 |
|
|
Patrick Bareiss
|
08294f4123
|
bug fix
|
2025-04-22 10:57:45 +02:00 |
|
|
Patrick Bareiss
|
a24c72d431
|
Revert prestats optimization
|
2025-04-22 10:32:24 +02:00 |
|
|
Bhavin Patel
|
262d492358
|
Merge pull request #3479 from splunk/integration_v5.4.0
Integration fixes - v5.4.0
|
2025-04-21 14:12:34 -07:00 |
|
|
Bhavin Patel
|
0c729cc37d
|
Merge branch 'develop' into integration_v5.4.0
|
2025-04-21 13:44:34 -07:00 |
|
|
Bhavin Patel
|
d85a312259
|
Merge pull request #3472 from splunk/water
Haag's Ruse: The MSC EvilTwin Detector - Unmasking Path Manipulators & Digital Spies
|
2025-04-21 13:37:44 -07:00 |
|
|
Bhavin Patel
|
b5258b99e4
|
Update detect_psexec_with_accepteula_flag.yml
|
2025-04-21 13:00:03 -07:00 |
|
|
Bhavin Patel
|
366474792d
|
Update cisco_secure_firewall___rare_snort_rule_triggered.yml
|
2025-04-21 12:52:17 -07:00 |
|
|
Bhavin Patel
|
bd617e1211
|
Update windows_powershell_invoke_restmethod_ip_information_collection.yml
fix threat object
|
2025-04-21 12:27:30 -07:00 |
|
|
Bhavin Patel
|
5bd5a53938
|
updating searches
|
2025-04-21 12:13:42 -07:00 |
|
|
Eric
|
a219deb751
|
Merge branch 'develop' into water
|
2025-04-21 10:25:16 -07:00 |
|
|
Michael Haag
|
677fe6a7f9
|
Update windows_msc_eviltwin_directory_path_manipulation.yml
|
2025-04-21 10:25:39 -06:00 |
|
|
Bhavin Patel
|
078b89e774
|
Merge pull request #3475 from splunk/dep_cli
Deprecate CLI updates
|
2025-04-18 13:56:23 -07:00 |
|
|
Bhavin Patel
|
067eb13fe1
|
Merge branch 'develop' into dep_cli
|
2025-04-18 13:48:27 -07:00 |
|
|
Bhavin Patel
|
482cdc2ee9
|
Merge pull request #3462 from splunk/crushingit
Haag's Crushed Shell: A Tale of CrushFTP Exploitation
|
2025-04-18 13:48:18 -07:00 |
|
|
Bhavin Patel
|
f26d6beda1
|
updating yaml
|
2025-04-18 13:42:29 -07:00 |
|
|
Bhavin Patel
|
93a1b752fe
|
updating this detection
|
2025-04-18 13:35:11 -07:00 |
|
|
Bhavin Patel
|
426d54d99d
|
updating cli flags
|
2025-04-18 13:29:32 -07:00 |
|
|
Bhavin Patel
|
bb2045cce0
|
Merge branch 'develop' into crushingit
|
2025-04-18 12:45:18 -07:00 |
|
|
Michael Haag
|
9f8f28c0b5
|
Update crushftp_max_simultaneous_users_from_ip.yml
|
2025-04-18 13:27:09 -06:00 |
|
|
Michael Haag
|
95049154e9
|
Update crushftp_authentication_bypass_exploitation.yml
|
2025-04-18 13:25:39 -06:00 |
|
|
pyth0n1c
|
e5e7fc032c
|
Merge pull request #3465 from splunk/remove_v5.4.0
Removed/ Deprecated content update for v5.4.0
|
2025-04-18 10:57:26 -07:00 |
|
|
Michael Haag
|
6bd0f5ab8f
|
Update windows_shell_process_from_crushftp.yml
|
2025-04-18 11:28:32 -06:00 |
|
|
Bhavin Patel
|
614721e681
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-18 10:26:39 -07:00 |
|
|
Bhavin Patel
|
3bf8bc509c
|
Merge pull request #3404 from splunk/cactus
Haag's Last Shadow: The Cactus Ransomware Chronicles
|
2025-04-18 10:25:23 -07:00 |
|
|
pyth0n1c
|
aa3187d61e
|
Merge branch 'develop' into remove_v5.4.0
|
2025-04-18 10:13:12 -07:00 |
|
|
Bhavin Patel
|
949b59900f
|
Merge branch 'develop' into water
|
2025-04-18 10:11:56 -07:00 |
|
|
Bhavin Patel
|
9ae046285e
|
Merge branch 'develop' into cactus
|
2025-04-18 09:52:02 -07:00 |
|
|
Bhavin Patel
|
a62ab6a00a
|
Merge pull request #3453 from splunk/aws_bedrock
AWS Bedrock detections
|
2025-04-18 09:51:02 -07:00 |
|
|
Michael Haag
|
19221004d3
|
round 2
|
2025-04-18 10:22:37 -06:00 |
|
|
Michael Haag
|
32962c745b
|
versions
|
2025-04-18 10:00:01 -06:00 |
|
|
Michael Haag
|
8ca79f3f56
|
Merge branch 'develop' into cactus
|
2025-04-18 09:33:17 -06:00 |
|