Commit Graph

  • 5315627185 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:15 -08:00
  • 9fce7756a2 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:13 -08:00
  • aca553e02b Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:13 -08:00
  • 3c051a1f8f Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:29:12 -08:00
  • c960b4a358 Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag research bot 2023-01-24 23:28:55 +00:00
  • 36b96aca95 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:27 -08:00
  • 1c2ca5afa4 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:27 -08:00
  • 244504ae2d Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:25 -08:00
  • 7d295c0a13 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:24 -08:00
  • 6ee99c01e6 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:24 -08:00
  • 60cba55835 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:23 -08:00
  • 13d71a84cb Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:20 -08:00
  • 559f285ace Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 15:06:19 -08:00
  • b3ebd4b2a9 Merge pull request #2514 from splunk/detect_suspicious_txt_records_using_pretrained_model_in_dsdl v3.57.0 Bhavin Patel 2023-01-24 15:06:04 -08:00
  • d8e55b085d updating the download link for the model Namratha Sreekanta 2023-01-24 14:53:36 -08:00
  • 820f3c935e fixing error with model dir and result column Namratha Sreekanta 2023-01-24 14:42:32 -08:00
  • af8cd582e4 dropping some updates Michael Haag 2023-01-24 14:41:22 -07:00
  • 4580d11fa9 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:58 -08:00
  • 480f7ee83d Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:57 -08:00
  • 6a278486b9 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:56 -08:00
  • 8c45240160 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:55 -08:00
  • a9242d7e60 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:52 -08:00
  • b82cb5b661 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:51 -08:00
  • b7e0e32c82 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:37:50 -08:00
  • 1d34c766ae Merge pull request #2494 from splunk/loldrive Bhavin Patel 2023-01-24 12:37:30 -08:00
  • 727a085721 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:13 -08:00
  • e18b3a89c9 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:12 -08:00
  • 1acbc9eabe Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:10 -08:00
  • dc676a8320 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:09 -08:00
  • e84899ada2 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:07 -08:00
  • 122fba3918 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:06 -08:00
  • 22b95a6d6c Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:05 -08:00
  • 59954ea010 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 12:36:04 -08:00
  • 1cdade8907 Merge pull request #2508 from splunk/suspicious_dns_txt_records_ml_dsdl Bhavin Patel 2023-01-24 12:35:46 -08:00
  • 002972b41a Update detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml mvelazco 2023-01-24 15:03:01 -05:00
  • f374ec7c97 Update detect_dga_domains_using_pretrained_model_in_dsdl.yml mvelazco 2023-01-24 15:01:52 -05:00
  • 69fcf8cf33 Update detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml mvelazco 2023-01-24 14:59:14 -05:00
  • 2dfdaa9561 Update detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml mvelazco 2023-01-24 14:58:21 -05:00
  • ffa10d7f9e Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:19:00 -08:00
  • 8760b04825 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:59 -08:00
  • b0b89a6cd9 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:58 -08:00
  • 442657616a Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:56 -08:00
  • 4562759834 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:52 -08:00
  • 8534f82ed4 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:51 -08:00
  • af60fd3d8c Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:50 -08:00
  • 4c961f2d4f Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:49 -08:00
  • f9b08d7a55 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-24 11:18:48 -08:00
  • 80b62c4c20 Merge pull request #2507 from splunk/lockbit-chaos-ransomware Bhavin Patel 2023-01-24 11:18:29 -08:00
  • 743a76c677 Update windows_phishing_pdf_file_executes_url_link.yml Bhavin Patel 2023-01-24 11:04:46 -08:00
  • faedd6645a adding new detection for azure ad session hijacking mvelazco 2023-01-24 14:02:06 -05:00
  • 42f4eefeae more onenotes Michael Haag 2023-01-24 10:20:15 -07:00
  • 3877ea13a3 converted ssa detections to sigma P4T12ICK 2023-01-24 15:35:23 +01:00
  • 8f4edfa557 Update windows_powershell_add_module_to_global_assembly_cache.yml Michael Haag 2023-01-24 06:53:00 -07:00
  • c5fb07f2f5 createdump Michael Haag 2023-01-24 06:49:27 -07:00
  • 11ff0fa87d onenote Michael Haag 2023-01-24 06:38:23 -07:00
  • b3d7d27b89 asyncrat-onenote-chain tccontre 2023-01-24 12:58:06 +01:00
  • 97cefeabcf asyncrat-onenote-chain tccontre 2023-01-24 11:00:35 +01:00
  • a7f6ddbfeb adding new azure ad brute force detection mvelazco 2023-01-23 20:46:00 -05:00
  • 5f16506697 adding new azure ad brute force detection mvelazco 2023-01-23 17:31:48 -05:00
  • 99ba6b503f yaml updates patel-bhavin 2023-01-23 11:59:16 -08:00
  • 944b7a7e82 Detect Suspicious Filename Kumar Sharad 2023-01-23 17:24:37 +01:00
  • 3e2f231282 Added data sources P4T12ICK 2023-01-23 16:55:32 +01:00
  • 59b4786cc6 converter improvements P4T12ICK 2023-01-23 09:38:17 +01:00
  • eec8968a85 Added sigma detections into dev folder P4T12ICK 2023-01-20 13:24:15 +01:00
  • a23b2470fe Converted detections v3 to v4 P4T12ICK 2023-01-20 11:12:47 +01:00
  • 49c16a3548 Merge pull request #2509 from splunk/security_content_4_phase_2_with_detection_testing P4T12ICK 2023-01-20 08:03:19 +01:00
  • 4fc89cfa7b resolved merge conflict P4T12ICK 2023-01-20 08:02:00 +01:00
  • 090e5c4bee yml changes patel-bhavin 2023-01-19 16:38:20 -08:00
  • 512f15e77d removing context of model from detection Namratha Sreekanta 2023-01-19 16:36:08 -08:00
  • 4b24cc6d53 tagging aws relevant detection draft patel-bhavin 2023-01-19 16:01:20 -08:00
  • 05aca8a58e new aws detection patel-bhavin 2023-01-19 15:49:02 -08:00
  • d78f2a9eb7 new analytic story mvelazco 2023-01-19 17:01:48 -05:00
  • be23f35432 Moved the updated version out of the directory back where it will need to eventually be David Dorsey 2023-01-19 13:25:57 -06:00
  • d8245bebf1 pwsh gac Michael Haag 2023-01-18 13:13:41 -07:00
  • e136e5212b Update windows_server_software_component_gacutil_install_to_gac.yml Michael Haag 2023-01-18 12:54:08 -07:00
  • f864c488cc GACutil 1 Michael Haag 2023-01-18 12:35:42 -07:00
  • c39d297e47 making minor changes to yml file Namratha Sreekanta 2023-01-18 11:18:02 -08:00
  • 178edfd4fa lockbit-chaos-ransomware tccontre 2023-01-18 14:55:46 +01:00
  • 6195517045 adding detect suspicious dns txt records using pretrained model in dsdl Namratha Sreekanta 2023-01-17 15:26:01 -08:00
  • 96d2e4818b Change data file ingest_test pyth0n1c 2023-01-17 10:21:40 -08:00
  • 6142913d96 added a real search to the test yml file. ignore it and used config file instead pyth0n1c 2023-01-17 09:37:22 -08:00
  • a7a02507c7 Manually added tests to show issue pyth0n1c 2023-01-17 09:33:36 -08:00
  • bf8f2339b8 lockbit-chaos-ransomware tccontre 2023-01-17 15:37:37 +01:00
  • 5dc0520ae3 Update windows_user_execution_malicious_url_shortcut_file.yml tccontre 2023-01-16 15:55:05 +01:00
  • 4b2cf3aaf1 lockbit-chaos-ransomware tccontre 2023-01-16 15:50:50 +01:00
  • 5955920298 lockbit-chaos-ransomware tccontre 2023-01-16 10:10:28 +01:00
  • 761771524c windows ngrok update Michael Haag 2023-01-12 13:49:35 -07:00
  • 7ac4a7e167 Linux Ngrok Michael Haag 2023-01-12 13:39:06 -07:00
  • a5ae096334 Merge branch 'ocsf_detection_example' of github.com:splunk/security-content into ocsf_detection_example David Dorsey 2023-01-12 11:25:23 -06:00
  • 1d4367287e Updated to reference latest OCSF version and detection report David Dorsey 2023-01-12 11:24:58 -06:00
  • 53aff264db Branch was auto-updated. srv-rr-gh-researchbt 2023-01-11 12:58:06 -08:00
  • 6d23b9ee19 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-11 12:58:05 -08:00
  • 60110a0a26 Branch was auto-updated. srv-rr-gh-researchbt 2023-01-11 12:58:05 -08:00
  • 6a7c9fb46f Branch was auto-updated. srv-rr-gh-researchbt 2023-01-11 12:58:04 -08:00
  • fa88d589aa Branch was auto-updated. srv-rr-gh-researchbt 2023-01-11 12:58:03 -08:00
  • f8c7874b15 Merge pull request #2505 from splunk/playbooks_reputation trogdorsey 2023-01-11 14:57:45 -06:00
  • 43dfab998a Fixed reference links Lou Stella 2023-01-11 11:44:08 -06:00
  • 0247dd62a6 fixed name in VT Lou Stella 2023-01-11 11:34:08 -06:00
  • 62f62137fb new SOAR content Lou Stella 2023-01-11 11:08:28 -06:00
  • 5941ac006e Branch was auto-updated. srv-rr-gh-researchbt 2023-01-10 14:40:39 -08:00