Commit Graph

  • c21bff696b Merge branch 'esxi_detections' of https://github.com/splunk/security_content into esxi_detections Raven Tait 2025-07-18 12:13:03 -04:00
  • aba2939a07 Fix host field Raven Tait 2025-07-18 12:13:00 -04:00
  • dc8cd1dee4 Merge branch 'develop' into citrixbleed2 Bhavin Patel 2025-07-18 09:10:33 -07:00
  • 1ee72dcd07 Merge pull request #3611 from splunk/auto-ta-update-330 Bhavin Patel 2025-07-18 09:09:57 -07:00
  • 2418f8cd13 Updated TAs patel-bhavin 2025-07-18 07:01:20 +00:00
  • 4523ce47fe Merge branch 'scheduling_experiments' of https://github.com/splunk/security_content into scheduling_experiments scheduling_experiments Eric 2025-07-17 16:29:03 -07:00
  • 60a4d687b2 Another update to defaults in deployments Eric 2025-07-17 16:28:57 -07:00
  • 77de82e744 Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml Nasreddine Bencherchali 2025-07-18 01:08:25 +02:00
  • 4a390ac106 Merge branch 'develop' into scheduling_experiments pyth0n1c 2025-07-17 16:06:44 -07:00
  • 669eb8b4ba Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml Nasreddine Bencherchali 2025-07-17 20:58:55 +02:00
  • 799faa2a1e Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml Nasreddine Bencherchali 2025-07-17 20:46:33 +02:00
  • 523e5f4b94 add ftd equivalent analytic Nasreddine Bencherchali 2025-07-17 20:43:29 +02:00
  • 627e4a263f quasar_and_loader Teoderick Contreras 2025-07-17 16:09:40 +02:00
  • 548df90b7e quasar_and_loader Teoderick Contreras 2025-07-17 16:04:27 +02:00
  • dbc8b8a649 quasar_and_loader Teoderick Contreras 2025-07-17 15:32:38 +02:00
  • b3e5d275ec quasar_and_loader Teoderick Contreras 2025-07-17 15:29:14 +02:00
  • 483e79feae Update citrix_adc_and_gateway_citrixbleed_2_memory_disclosure.yml Nasreddine Bencherchali 2025-07-17 14:56:14 +02:00
  • d5402b4dcc quasar_and_loader Teoderick Contreras 2025-07-17 14:51:43 +02:00
  • 1d5e468d18 Merge branch 'develop' into esxi_detections Lou Stella 2025-07-16 13:20:54 -05:00
  • e16ce3b350 Add vmware data source Raven Tait 2025-07-16 14:16:23 -04:00
  • f0eac4d185 Change host to dest Raven Tait 2025-07-16 13:55:49 -04:00
  • 351d61449e quasar_and_loader Teoderick Contreras 2025-07-16 14:58:24 +02:00
  • 0cefaef363 quasar_and_loader Teoderick Contreras 2025-07-16 10:45:30 +02:00
  • f3ad6abf6d quasar_and_loader Teoderick Contreras 2025-07-16 10:35:59 +02:00
  • 1cd2c88cbb quasar_and_loader Teoderick Contreras 2025-07-16 10:33:44 +02:00
  • 98a7e95306 quasar_and_loader Teoderick Contreras 2025-07-16 10:23:20 +02:00
  • 125a1080ba Merge pull request #3600 from splunk/remove_510 Bhavin Patel 2025-07-15 11:59:21 -07:00
  • fd9bc712c2 Merge branch 'develop' into remove_510 Bhavin Patel 2025-07-15 11:53:50 -07:00
  • 38f0b4451f Merge pull request #3603 from splunk/update_sourcetype Bhavin Patel 2025-07-15 11:53:08 -07:00
  • ec852f64fd Merge branch 'develop' into citrixbleed2 Nasreddine Bencherchali 2025-07-14 17:35:21 +02:00
  • bea4627008 Add TAs for ESXi Raven Tait 2025-07-11 12:06:47 -04:00
  • a71c6fb38a Initial batch of ESXi content Raven Tait 2025-07-11 11:59:37 -04:00
  • 63ef9cc053 updating sourcetype values to PascalCase Bhavin Patel 2025-07-10 13:21:47 -07:00
  • e01414036e Merge pull request #3601 from splunk/auto-ta-update-322 Lou Stella 2025-07-10 11:53:32 -05:00
  • fb59e54ffe bug fix Patrick Bareiss 2025-07-10 16:45:20 +02:00
  • ad398c0707 small tweaks Nasreddine Bencherchali 2025-07-10 16:43:54 +02:00
  • 909693a201 update action value to alight with new ta ver Nasreddine Bencherchali 2025-07-10 16:41:49 +02:00
  • f63c5d26ea bug fix Patrick Bareiss 2025-07-10 15:50:47 +02:00
  • 7da4b85353 add macros Patrick Bareiss 2025-07-10 15:45:40 +02:00
  • 2b388b09c4 bug fix Patrick Bareiss 2025-07-10 14:03:01 +02:00
  • 551d45ffa5 Merge branch 'duo_detections_1' of github.com:splunk/security_content into duo_detections_1 Patrick Bareiss 2025-07-10 13:54:43 +02:00
  • 036eb92f17 update filter macro name Patrick Bareiss 2025-07-10 13:54:00 +02:00
  • e143fac759 Merge branch 'develop' into duo_detections_1 P4T12ICK 2025-07-10 13:51:02 +02:00
  • 8601a2174a Cisco Duo Detections Patrick Bareiss 2025-07-10 13:39:55 +02:00
  • e9ab572d46 Updated TAs patel-bhavin 2025-07-10 07:00:35 +00:00
  • 3666bfa9f4 prep for next release Bhavin Patel 2025-07-09 11:25:06 -07:00
  • c6af7c5b52 Update citrix_adc_and_gateway_citrixbleed_2_memory_disclosure.yml Michael Haag 2025-07-09 11:49:23 -06:00
  • c082681dfc Merge pull request #3599 from splunk/auto-ta-update-321 Lou Stella 2025-07-09 12:29:28 -05:00
  • 5646b6e64e Update citrix_netscaler_adc_and_netscaler_gateway_cve_2025_5777.yml Michael Haag 2025-07-09 10:46:27 -06:00
  • 2d930a03c7 Updated TAs patel-bhavin 2025-07-09 07:00:28 +00:00
  • 5cacb254f3 Merge branch 'develop' into scheduling_experiments pyth0n1c 2025-07-08 15:21:05 -07:00
  • 039947b0a1 Merge pull request #3598 from splunk/spl_updates v5.9.0 Bhavin Patel 2025-07-08 10:00:26 -07:00
  • 9bc9e5f649 adding parent process name Bhavin Patel 2025-07-08 09:15:47 -07:00
  • 149b362602 updating spl Bhavin Patel 2025-07-08 09:09:17 -07:00
  • 8fb5c82571 Updated TAs auto-ta-update-320 patel-bhavin 2025-07-08 07:00:35 +00:00
  • 3179fe81c6 Merge pull request #3596 from splunk/integration_590 Bhavin Patel 2025-07-07 20:31:58 -07:00
  • 41a54d10a8 updating from integration failures Bhavin Patel 2025-07-07 18:56:41 -07:00
  • 5230fba619 Merge pull request #3595 from splunk/update_name Bhavin Patel 2025-07-07 16:20:44 -07:00
  • 77f35fab0a updating app name Bhavin Patel 2025-07-07 16:00:11 -07:00
  • 1b5d0d28f5 updating the app_name Bhavin Patel 2025-07-07 15:55:23 -07:00
  • ba1326f6de Merge pull request #3594 from splunk/falcon_update Bhavin Patel 2025-07-07 14:52:59 -07:00
  • cccea2183d Merge branch 'develop' into falcon_update Bhavin Patel 2025-07-07 13:57:23 -07:00
  • a9b986c28e Merge pull request #3585 from splunk/nvm-batch1 Bhavin Patel 2025-07-07 13:48:02 -07:00
  • e344c2ad06 updating the eval Bhavin Patel 2025-07-07 13:14:30 -07:00
  • 9ba254c26d Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-07 21:38:05 +02:00
  • 879a3d5646 Merge branch 'develop' into falcon_update pyth0n1c 2025-07-07 11:59:54 -07:00
  • e9d1bceb00 pushing update Bhavin Patel 2025-07-07 11:58:50 -07:00
  • 39cdbb648f Merge pull request #3576 from ccl0utier/develop pyth0n1c 2025-07-07 11:57:39 -07:00
  • 3826785ee2 updating eval Bhavin Patel 2025-07-07 11:49:21 -07:00
  • 80092eceb1 Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-07 20:46:28 +02:00
  • 4faaa1d5d4 Merge branch 'develop' into develop Lou Stella 2025-07-07 13:04:57 -05:00
  • cac4a8812d Updating name to match ljstella 2025-07-07 13:01:07 -05:00
  • 4222d2e1dd Update name to match ccl0utier/develop ljstella 2025-07-07 12:57:25 -05:00
  • de55408d51 Merge pull request #3544 from splunk/cs_events Bhavin Patel 2025-07-07 10:45:52 -07:00
  • 5b825ab466 Merge branch 'develop' into cs_events Bhavin Patel 2025-07-07 10:09:37 -07:00
  • 61f635161e update by clause Nasreddine Bencherchali 2025-07-07 18:51:58 +02:00
  • 5d39e987a4 Merge branch 'develop' into develop Lou Stella 2025-07-07 11:37:58 -05:00
  • 16653a331f Merge pull request #3593 from splunk/contentctl_5_5_7 pyth0n1c 2025-07-07 09:37:36 -07:00
  • 67ed6458fb bump to contentctl 5.5.7 pyth0n1c 2025-07-07 09:34:46 -07:00
  • d9fd704404 Merge branch 'develop' into develop pyth0n1c 2025-07-07 09:31:01 -07:00
  • 4c7219f7e9 Merge pull request #3586 from 0xC0FFEEEE/bec_rule_update Bhavin Patel 2025-07-07 08:23:00 -07:00
  • 584ed27ec4 Update attacker_tools_on_endpoint.yml Nasreddine Bencherchali 2025-07-07 17:22:35 +02:00
  • 91c6bd2d13 Apply suggestion from @nasbench Nasreddine Bencherchali 2025-07-07 17:18:19 +02:00
  • ba171477f3 Merge branch 'develop' into bec_rule_update Bhavin Patel 2025-07-07 08:15:49 -07:00
  • fda81f65cc Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-07 17:14:48 +02:00
  • cb8f4bb6f3 Update removed/deprecation_mapping.YML Nasreddine Bencherchali 2025-07-07 17:13:15 +02:00
  • 254d92ebc9 Merge branch 'develop' into cs_events Bhavin Patel 2025-07-07 07:58:47 -07:00
  • b39292c744 Merge pull request #3589 from sventec/refactor-attacker_tools_on_endpoint Bhavin Patel 2025-07-07 07:58:23 -07:00
  • b67fb01202 Merge branch 'develop' into refactor-attacker_tools_on_endpoint Bhavin Patel 2025-07-07 07:56:47 -07:00
  • 8ffb683440 Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-07 01:23:13 +02:00
  • afe0991589 fix incorrect names and filter macros Nasreddine Bencherchali 2025-07-06 03:00:43 +02:00
  • e3bfb2da07 the final countdown Nasreddine Bencherchali 2025-07-06 02:57:39 +02:00
  • e12035e391 Merge pull request #3590 from splunk/snort_description Nasreddine Bencherchali 2025-07-05 12:15:56 +02:00
  • c1deef27df Merge branch 'develop' into snort_description Nasreddine Bencherchali 2025-07-04 18:19:40 +02:00
  • 58627bd35e Merge pull request #3592 from splunk/auto-ta-update-316 Nasreddine Bencherchali 2025-07-04 18:18:47 +02:00
  • 5ea6155d96 Updated TAs patel-bhavin 2025-07-04 07:00:30 +00:00
  • 879259dd8b map existing rclone analytic and add a dedicated nvm one Nasreddine Bencherchali 2025-07-04 02:21:13 +02:00
  • 7723704e17 add author tag sventec 2025-07-03 19:32:26 -04:00
  • e151b4e1ae Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-04 00:33:26 +02:00
  • 6b72dcb76f fix ci issues Nasreddine Bencherchali 2025-07-04 00:07:36 +02:00