Commit Graph

  • e342920f37 Update windows_rundll32_webdav_with_network_connection.yml Nasreddine Bencherchali 2025-06-17 11:44:13 +02:00
  • 4801780532 Merge branch 'develop' into updates-june Nasreddine Bencherchali 2025-06-17 11:15:26 +02:00
  • 06d9ce5d6c Merge branch 'develop' into fixing-issues-5.8 Nasreddine Bencherchali 2025-06-17 11:15:23 +02:00
  • 9db42a7401 Updated TAs patel-bhavin 2025-06-17 06:59:26 +00:00
  • 27575a878b fix typos Nasreddine Bencherchali 2025-06-17 02:30:48 +02:00
  • c46c948ae4 more fixes Nasreddine Bencherchali 2025-06-17 02:20:37 +02:00
  • b0df2c1973 Update windows_files_and_dirs_access_rights_modification_via_icacls.yml Nasreddine Bencherchali 2025-06-17 01:42:32 +02:00
  • aeeb471de2 Update suspicious_copy_on_system32.yml Nasreddine Bencherchali 2025-06-17 01:38:33 +02:00
  • dba17e70d0 Update suspicious_copy_on_system32.yml Nasreddine Bencherchali 2025-06-17 01:35:02 +02:00
  • 1d2e689e99 Update suspicious_copy_on_system32.yml Nasreddine Bencherchali 2025-06-17 01:28:45 +02:00
  • 99d3d28654 multiple updates and fixes Nasreddine Bencherchali 2025-06-17 01:22:13 +02:00
  • 71c6916485 Merge pull request #3558 from splunk/remote_emp_fraud Lou Stella 2025-06-16 17:14:31 -05:00
  • 6c5aa91dbf more updates Nasreddine Bencherchali 2025-06-16 23:38:10 +02:00
  • 6541bc7ee7 Merge branch 'develop' into innoloader pyth0n1c 2025-06-16 08:52:25 -07:00
  • 235f3519a4 Merge branch 'develop' into linux_auditd_daemon_update pyth0n1c 2025-06-16 08:52:09 -07:00
  • feb9ec41b2 update to fix ci errors Nasreddine Bencherchali 2025-06-16 16:24:51 +02:00
  • 00725c018b Merge branch 'develop' into remote_emp_fraud Nasreddine Bencherchali 2025-06-16 10:29:04 +02:00
  • 0946ff7833 Merge pull request #3563 from splunk/auto-ta-update-298 Nasreddine Bencherchali 2025-06-16 10:28:47 +02:00
  • 9036d18489 Updated TAs patel-bhavin 2025-06-16 06:59:54 +00:00
  • dc296d219a Updated TAs auto-ta-update-297 patel-bhavin 2025-06-15 06:57:46 +00:00
  • f1708bd543 Updated TAs auto-ta-update-296 patel-bhavin 2025-06-14 06:57:54 +00:00
  • 97ba77f6e0 Merge branch 'develop' into remote_emp_fraud pyth0n1c 2025-06-13 09:06:34 -07:00
  • c9b30e0392 Merge branch 'develop' into cs_events pyth0n1c 2025-06-13 09:06:30 -07:00
  • 7de836374b Merge pull request #3560 from splunk/contentctl_bump pyth0n1c 2025-06-13 09:05:57 -07:00
  • e082b94415 Updating requirements.txt ljstella 2025-06-13 11:03:03 -05:00
  • 6472e0360c bump to latest version of contentctl bump_requirements_to_5_5_5 pyth0n1c 2025-06-13 09:02:15 -07:00
  • b4f74c3a94 Merge pull request #3557 from splunk/auto-ta-update-295 Lou Stella 2025-06-13 08:50:36 -05:00
  • df53388283 Updated TAs patel-bhavin 2025-06-13 06:59:28 +00:00
  • 25617e6770 Initial remote employment fraud detections. Raven Tait 2025-06-12 14:43:59 -04:00
  • 9593f5a00a linux_auditd_daemon_update Teoderick Contreras 2025-06-12 13:32:21 +02:00
  • 1cc0dc736c linux_auditd_daemon_update Teoderick Contreras 2025-06-12 13:28:03 +02:00
  • 2830a78374 Merge pull request #3554 from splunk/auto-ta-update-293 Lou Stella 2025-06-11 08:26:14 -05:00
  • 1e483e997f Updated TAs patel-bhavin 2025-06-11 06:59:12 +00:00
  • 8efe3b11d2 add manual_test tag Nasreddine Bencherchali 2025-06-10 21:25:21 +02:00
  • 05df61c626 Update detect_outbound_smb_traffic.yml Nasreddine Bencherchali 2025-06-10 20:32:31 +02:00
  • 8af7db1115 Update dllhost_with_no_command_line_arguments_with_network.yml Nasreddine Bencherchali 2025-06-10 20:24:33 +02:00
  • e27f42b81c more output field fixes Nasreddine Bencherchali 2025-06-10 20:19:54 +02:00
  • e4c733a3b4 update output fields Nasreddine Bencherchali 2025-06-10 20:07:40 +02:00
  • a62ddcc7b5 add drilldowns to production analytics Nasreddine Bencherchali 2025-06-10 16:26:40 +02:00
  • a91c2aa7d9 Fix incorrect data sources Nasreddine Bencherchali 2025-06-10 16:04:59 +02:00
  • d985dc1105 upgrade detection with tests to production Nasreddine Bencherchali 2025-06-10 13:56:06 +02:00
  • 4a48646ee8 Merge pull request #3552 from splunk/auto-ta-update-291 Lou Stella 2025-06-09 08:08:18 -05:00
  • ce54799a60 Updated TAs patel-bhavin 2025-06-09 06:59:39 +00:00
  • 361c98b0f6 Updated TAs auto-ta-update-290 patel-bhavin 2025-06-08 06:58:20 +00:00
  • f77751098e Updated TAs auto-ta-update-289 patel-bhavin 2025-06-07 06:57:43 +00:00
  • 7e0336480b Updated TAs auto-ta-update-288 patel-bhavin 2025-06-06 06:59:20 +00:00
  • 1b81186d5c Merge pull request #3546 from splunk/5145_shared_updates v5.7.0 pyth0n1c 2025-06-03 06:50:06 -07:00
  • cdc2ae5ed2 Update windows_event_log_security_5145.yml pyth0n1c 2025-06-02 16:21:05 -07:00
  • 0d361c83a0 Merge branch 'develop' into innoloader pyth0n1c 2025-06-02 14:40:53 -07:00
  • 1f74c344ed Merge pull request #3536 from splunk/aws_to_ttp pyth0n1c 2025-06-02 14:39:38 -07:00
  • 4cfe72f575 Merge branch 'develop' into aws_to_ttp pyth0n1c 2025-06-02 14:24:22 -07:00
  • a68ebe26f2 Merge branch 'develop' into innoloader pyth0n1c 2025-06-02 14:20:58 -07:00
  • a4dcff016b Merge branch 'develop' into cs_events pyth0n1c 2025-06-02 14:20:45 -07:00
  • cc74c42c4d Merge pull request #3545 from splunk/fix-issues-june25 pyth0n1c 2025-06-02 13:52:05 -07:00
  • d3deda8e58 Merge branch 'develop' into aws_to_ttp pyth0n1c 2025-06-02 13:41:34 -07:00
  • 2c55db32d5 Update crowdstrike_event_streams_event.yml pyth0n1c 2025-06-02 13:41:18 -07:00
  • b849dd201a Update windows_sensitive_registry_hive_dump_via_commandline.yml pyth0n1c 2025-06-02 13:30:46 -07:00
  • 9c2aa3dca3 Update crowdstrike_event_streams_event.yml pyth0n1c 2025-06-02 13:21:14 -07:00
  • d11917e14d Update o365_concurrent_sessions_from_different_ips.yml Nasreddine Bencherchali 2025-06-02 22:18:24 +02:00
  • 168bf7e714 Update windows_sensitive_registry_hive_dump_via_commandline.yml Nasreddine Bencherchali 2025-06-02 22:12:47 +02:00
  • bb64b999a4 Merge branch 'develop' into cs_events pyth0n1c 2025-06-02 13:08:03 -07:00
  • af3f49a4a1 Merge branch 'develop' into innoloader pyth0n1c 2025-06-02 13:07:50 -07:00
  • 46c079b46b Merge pull request #3535 from splunk/ftd-cim-update pyth0n1c 2025-06-02 12:58:18 -07:00
  • 3393446afb Update internal_horizontal_port_scan_nmap_top_20.yml pyth0n1c 2025-06-02 12:31:03 -07:00
  • d33622611c added filter macro Bryan Pluta 2025-06-02 13:17:34 -05:00
  • 7d91c7d974 added data path Bryan Pluta 2025-06-02 13:03:19 -05:00
  • 5b5b1a509b initial commit and detection Bryan Pluta 2025-06-02 09:54:48 -05:00
  • 838d40085e innoloader Teoderick Contreras 2025-06-02 12:38:34 +02:00
  • e7f59f1ffc update risk object Nasreddine Bencherchali 2025-06-02 11:36:04 +02:00
  • f40aad92b5 Update protocols_passing_authentication_in_cleartext.yml Nasreddine Bencherchali 2025-06-02 10:34:26 +02:00
  • 5f9fb78212 Merge branch 'develop' into ftd-cim-update Nasreddine Bencherchali 2025-06-02 10:30:52 +02:00
  • 271fd75425 update analytics after review suggestions Nasreddine Bencherchali 2025-06-02 10:30:36 +02:00
  • 19ae2fe24f innoloader Teoderick Contreras 2025-06-02 09:43:51 +02:00
  • 88d689fe8a Merge pull request #3539 from splunk/auto-ta-update-281 Lou Stella 2025-05-30 11:35:49 -05:00
  • fe7341a874 Merge branch 'develop' into auto-ta-update-281 Lou Stella 2025-05-30 11:19:46 -05:00
  • 1e6cc1228e Merge pull request #3541 from jwindley/patch-2 Lou Stella 2025-05-30 11:18:53 -05:00
  • 5cde2f9d01 Update detect_remote_access_software_usage_traffic.yml jwindley 2025-05-30 15:19:09 +01:00
  • 133e431bd3 Update detect_remote_access_software_usage_traffic.yml jwindley 2025-05-30 14:51:56 +01:00
  • 47474d429d Updated TAs patel-bhavin 2025-05-30 06:58:45 +00:00
  • 38cb11c1d6 Merge branch 'develop' into ftd-cim-update Nasreddine Bencherchali 2025-05-28 19:36:24 +02:00
  • 44e6f9a445 Update cisco_secure_firewall___remote_access_software_usage_traffic.yml Nasreddine Bencherchali 2025-05-28 19:35:38 +02:00
  • 67c72b9035 add Cisco Secure Firewall - Remote Access Software Usage Traffic Nasreddine Bencherchali 2025-05-28 19:33:18 +02:00
  • dc9234a34e Merge pull request #3538 from splunk/auto-ta-update-279 Lou Stella 2025-05-28 10:31:42 -05:00
  • e51db2ce9c innoloader Teoderick Contreras 2025-05-28 14:50:39 +02:00
  • 890de16876 innoloader Teoderick Contreras 2025-05-28 14:22:20 +02:00
  • a9c0afadf8 update how to implement section Nasreddine Bencherchali 2025-05-28 13:05:49 +02:00
  • 79c7c795b8 Updated TAs patel-bhavin 2025-05-28 06:58:43 +00:00
  • e42a0eba09 Update tor_traffic.yml Nasreddine Bencherchali 2025-05-27 23:48:24 +02:00
  • e07722a488 Apply suggestions from code review Nasreddine Bencherchali 2025-05-27 23:31:34 +02:00
  • bc5c2a3ddd Update tor_traffic.yml Nasreddine Bencherchali 2025-05-27 23:27:25 +02:00
  • efbdf32690 Update protocols_passing_authentication_in_cleartext.yml Nasreddine Bencherchali 2025-05-27 17:28:51 +02:00
  • a09165ffb5 ci fixes Nasreddine Bencherchali 2025-05-27 17:17:34 +02:00
  • 2634983bd1 add missing output fields Nasreddine Bencherchali 2025-05-27 16:54:10 +02:00
  • 0c284e67c2 add drilldowns Nasreddine Bencherchali 2025-05-27 16:35:41 +02:00
  • 4b14d04f85 test more network analytics with ftd Nasreddine Bencherchali 2025-05-27 16:12:12 +02:00
  • d016157feb field order update Nasreddine Bencherchali 2025-05-27 10:50:31 +02:00
  • f8727cdbab innoloader Teoderick Contreras 2025-05-26 11:01:31 +02:00
  • 3c475d25c8 innoloader Teoderick Contreras 2025-05-26 10:28:31 +02:00
  • a182c8c616 updating to TTP Bhavin Patel 2025-05-22 13:25:53 -07:00
  • 25b2758228 update output fields Nasreddine Bencherchali 2025-05-22 12:46:00 +02:00