Commit Graph

  • 0ab6a67556 lemme add a couple more rules Nasreddine Bencherchali 2025-07-04 00:04:39 +02:00
  • e6e3145dc0 updating description Bhavin Patel 2025-07-03 14:26:07 -07:00
  • 65a097a8cc Merge branch 'develop' into cs_events Bhavin Patel 2025-07-03 10:36:27 -07:00
  • f04d3879c7 Merge branch 'develop' into bec_rule_update Bhavin Patel 2025-07-03 10:35:17 -07:00
  • 1132d0d4ec refactor: attacker_tools_on_endpoint performance sventec 2025-07-03 10:37:56 -04:00
  • a278863c13 remove unneccesary json normalization 0xC0FFEEEE 2025-07-03 09:17:50 +01:00
  • 287b0d8d60 Merge pull request #3556 from splunk/linux_auditd_daemon_update Bhavin Patel 2025-07-02 16:48:03 -07:00
  • b80d4fe2af Update cisco_nvm___non_network_binary_making_network_connection.yml Nasreddine Bencherchali 2025-07-03 01:14:13 +02:00
  • 029b912b8c fix ci error with name and filter macro Nasreddine Bencherchali 2025-07-03 00:38:21 +02:00
  • 375dc32251 oh wow, much detection Nasreddine Bencherchali 2025-07-03 00:32:11 +02:00
  • cd073f9273 minor fixes Bhavin Patel 2025-07-02 12:25:53 -07:00
  • 130d322497 make it a TTP and adding $ to the message Bhavin Patel 2025-07-02 12:19:02 -07:00
  • b74094eb74 CitrixBleed2 Michael Haag 2025-07-02 10:33:13 -06:00
  • 9f7b6e36cd linux_auditd_daemon_update Teoderick Contreras 2025-07-02 09:23:14 +02:00
  • edf99faca6 update deployments and baselines with modified scheduling Eric 2025-07-01 15:23:47 -07:00
  • cdfc690acd remove detections Bhavin Patel 2025-07-01 14:53:45 -07:00
  • 1fb8c8e155 adding a new data source file Bhavin Patel 2025-07-01 14:53:03 -07:00
  • 4d846877d5 Merge branch 'develop' into cs_events Bhavin Patel 2025-07-01 14:20:59 -07:00
  • 6527190e18 up version for ci overlords Nasreddine Bencherchali 2025-07-01 23:18:54 +02:00
  • 983b3b9263 updating SPL syntax and comment the inputlookup for testing Bhavin Patel 2025-07-01 14:17:53 -07:00
  • b90359fd46 fix rba and filter macro issue Nasreddine Bencherchali 2025-07-01 23:11:48 +02:00
  • 544645b87b Update suspicious_ports_list.csv Nasreddine Bencherchali 2025-07-01 23:07:46 +02:00
  • 75ec47e99a add new detections, story and other cool things Nasreddine Bencherchali 2025-07-01 23:04:48 +02:00
  • 6b8761b5a6 comment out manual test for unit-testing Bhavin Patel 2025-07-01 13:27:26 -07:00
  • 7a4699098b updating formatting of spl and update risk_message as it is not present in the spl Bhavin Patel 2025-07-01 13:26:21 -07:00
  • e09fcea176 Merge branch 'develop' into linux_auditd_daemon_update Bhavin Patel 2025-07-01 10:55:46 -07:00
  • 3ba50a2d97 Add support for Set-InboxRule 0xC0FFEEEE 2025-07-01 16:42:06 +01:00
  • 8d10847fbc Merge branch 'develop' into nvm-batch1 Nasreddine Bencherchali 2025-07-01 00:08:17 +02:00
  • 1601ff777a small updates Nasreddine Bencherchali 2025-06-30 23:41:42 +02:00
  • e9af0c988d Merge pull request #3584 from splunk/diskwiper Bhavin Patel 2025-06-30 14:00:05 -07:00
  • 7bce976e2c Merge branch 'develop' into diskwiper Bhavin Patel 2025-06-30 12:55:40 -07:00
  • 71a57cdc64 Merge pull request #3582 from splunk/manul_Test Bhavin Patel 2025-06-30 12:27:36 -07:00
  • 242cf2b41e Merge branch 'develop' into diskwiper Bhavin Patel 2025-06-30 11:59:41 -07:00
  • ccc1946e64 Update potential_password_in_username.yml Bhavin Patel 2025-06-30 11:58:48 -07:00
  • e876b8dee5 Merge branch 'develop' into manul_Test Bhavin Patel 2025-06-30 10:27:53 -07:00
  • 857d4da497 Merge branch 'develop' into nvm-batch1 pyth0n1c 2025-06-30 13:14:34 -04:00
  • d66b88d2ff add new ta-cisco-nvm app to support new detections pyth0n1c 2025-06-30 12:26:52 -04:00
  • c36a2668cb update dataset url Nasreddine Bencherchali 2025-06-30 14:30:26 +02:00
  • 52d97d3207 rename datasrouce files Nasreddine Bencherchali 2025-06-30 14:01:14 +02:00
  • f49bd318d9 update time 🚀 Nasreddine Bencherchali 2025-06-30 13:55:55 +02:00
  • 422ce34414 Merge pull request #3580 from splunk/auto-ta-update-307 Lou Stella 2025-06-27 09:01:30 -05:00
  • c4982909ad diskwiper Teoderick Contreras 2025-06-27 09:44:32 +02:00
  • 4d9f9be0d6 diskwiper Teoderick Contreras 2025-06-27 09:40:18 +02:00
  • 8449ba8525 Updated TAs auto-ta-update-309 patel-bhavin 2025-06-27 06:59:35 +00:00
  • e8c046ac1c update ctl version Bhavin Patel 2025-06-26 12:56:41 -07:00
  • 1f92fa7b7e tests section Bhavin Patel 2025-06-26 11:32:00 -07:00
  • 94b0321bbc test Bhavin Patel 2025-06-26 11:30:30 -07:00
  • f5c8bb352d adding manual_Test Bhavin Patel 2025-06-26 11:28:56 -07:00
  • 0e4ae6a753 Migrate detection to xml ljstella 2025-06-26 11:42:00 -05:00
  • 6280ad9331 search and drilldown updates Bryan Pluta 2025-06-26 08:08:21 -05:00
  • 48b8c01807 Merge branch 'develop' into auto-ta-update-307 Lou Stella 2025-06-26 07:48:27 -05:00
  • f757a996fa linux_auditd_daemon_update Teoderick Contreras 2025-06-26 10:45:53 +02:00
  • 5f2408a0d5 linux_auditd_daemon_update Teoderick Contreras 2025-06-26 10:42:07 +02:00
  • 18addb2fd7 Updated TAs auto-ta-update-308 patel-bhavin 2025-06-26 06:59:58 +00:00
  • 33cb1ed7b0 Merge branch 'develop' into cs_events Bhavin Patel 2025-06-25 15:22:43 -07:00
  • 33ae33b2e7 Merge pull request #3577 from splunk/docs_links Bhavin Patel 2025-06-25 14:24:11 -07:00
  • 9e0fcea198 updated name and desc Bryan Pluta 2025-06-25 16:10:03 -05:00
  • 349aedd53d Merge branch 'develop' into docs_links Bhavin Patel 2025-06-25 13:19:46 -07:00
  • 6adf897880 Merge pull request #3579 from splunk/ctl_5.9 Lou Stella 2025-06-25 15:16:18 -05:00
  • b548db13e4 Add Nav Bar change ljstella 2025-06-25 15:14:01 -05:00
  • 38922323cd Merge branch 'develop' into cs_events Jose Enrique Hernandez 2025-06-25 12:01:14 -04:00
  • f6e6827dbd Updated TAs patel-bhavin 2025-06-25 06:59:36 +00:00
  • 0a774c9748 updating version Bhavin Patel 2025-06-24 12:50:02 -07:00
  • c71cc823a3 Remove wineventlog from source macros ljstella 2025-06-24 13:44:20 -05:00
  • c7cff2e6a7 Correct versions ljstella 2025-06-24 13:03:16 -05:00
  • 0f3feac263 Version bumps ljstella 2025-06-24 12:43:01 -05:00
  • f50dad58d8 Adding miscellaneous docs fixes ljstella 2025-06-24 11:29:10 -05:00
  • 034fe1187e Updated docs links in baselines ljstella 2025-06-24 11:28:14 -05:00
  • 397107f88a Updated docs links in detections ljstella 2025-06-24 11:27:59 -05:00
  • 252da8d1ef Updated links in story yamls ljstella 2025-06-24 11:27:39 -05:00
  • e2b479c16f Updated links in playbook yamls ljstella 2025-06-24 11:27:20 -05:00
  • d7b6081f2c Merge pull request #3570 from splunk/data_source_typo Bhavin Patel 2025-06-23 14:22:57 -07:00
  • bb6f9c773f Merge branch 'develop' into data_source_typo Bhavin Patel 2025-06-23 14:20:25 -07:00
  • 2298bf1557 Fix parsing issue Christian Cloutier 2025-06-20 14:26:45 -04:00
  • 8c7650575d Add missing GUIDs Christian Cloutier 2025-06-20 14:22:43 -04:00
  • 21802e0bed Added Playbooks from the CrowdStrike EDR Pack Christian Cloutier 2025-06-20 11:42:52 -04:00
  • b63c1bbca6 Merge pull request #3573 from splunk/auto-ta-update-302 Lou Stella 2025-06-20 08:31:24 -05:00
  • 537a670992 Updated TAs patel-bhavin 2025-06-20 06:59:37 +00:00
  • 63e40aedee Updated TAs auto-ta-update-301 patel-bhavin 2025-06-19 06:59:17 +00:00
  • 1a176b3d29 Merge pull request #3571 from splunk/fix_5_8_1_integration_test_result v5.8.0 pyth0n1c 2025-06-18 07:26:53 -07:00
  • babd9df0d6 Update print_processor_registry_autostart.yml pyth0n1c 2025-06-17 17:09:39 -07:00
  • ae60d4fa69 Updated typo in zeek_conn.yml ljstella 2025-06-17 17:28:00 -05:00
  • 5fa73118ce Merge pull request #3567 from splunk/bump_version_5_8_0 pyth0n1c 2025-06-17 13:05:03 -07:00
  • 81efb271c3 fixed status of newly removed detection remove_content_for_580 Eric McGinnis 2025-06-17 12:47:33 -07:00
  • 64aac40e82 Remove deprecated detections in line with prepublished guidance Eric McGinnis 2025-06-17 12:44:39 -07:00
  • 88156acf5a Update contentctl.yml pyth0n1c 2025-06-17 12:31:32 -07:00
  • 6ca51e1e68 Merge pull request #3565 from splunk/auto-ta-update-299 pyth0n1c 2025-06-17 12:29:29 -07:00
  • 9bf5388bd8 Merge branch 'develop' into auto-ta-update-299 pyth0n1c 2025-06-17 12:12:51 -07:00
  • 342ee7f6a1 Merge pull request #3553 from splunk/updates-june pyth0n1c 2025-06-17 12:12:41 -07:00
  • 60656154e7 Merge branch 'develop' into updates-june pyth0n1c 2025-06-17 11:54:36 -07:00
  • 669fedc667 Merge pull request #3537 from splunk/innoloader pyth0n1c 2025-06-17 11:54:20 -07:00
  • 5ccd548758 Merge branch 'develop' into innoloader Nasreddine Bencherchali 2025-06-17 20:33:26 +02:00
  • cb45d9d030 quick fixes and updates Nasreddine Bencherchali 2025-06-17 20:32:55 +02:00
  • 584473c342 Merge branch 'develop' into auto-ta-update-299 pyth0n1c 2025-06-17 10:59:01 -07:00
  • 799b276880 Merge pull request #3564 from splunk/fixing-issues-5.8 pyth0n1c 2025-06-17 10:58:50 -07:00
  • 3f3763176b Merge branch 'develop' into innoloader pyth0n1c 2025-06-17 10:56:19 -07:00
  • 437b5cf59c Version bump ljstella 2025-06-17 09:14:07 -05:00
  • bded2e9379 Silly casing... ljstella 2025-06-17 09:09:53 -05:00
  • 342b06c308 Swap detections to experimental as test data no longer matches expectations of TA ljstella 2025-06-17 09:08:59 -05:00
  • ff624b020a change to supported sourcetype ljstella 2025-06-17 09:08:10 -05:00