Commit Graph

  • 0b0e5114ab adding two lookups and updating query for test Bhavin Patel 2025-05-13 12:44:30 -07:00
  • c599382875 Merge pull request #3521 from splunk/auto-ta-update-264 Bhavin Patel 2025-05-13 11:56:02 -07:00
  • 5940725605 rename file on AWS Bhavin Patel 2025-05-13 10:34:30 -07:00
  • 9ee4a5b4e9 CI changes for errors Bhavin Patel 2025-05-13 10:21:06 -07:00
  • 89f8b5ff7d s3 app name Bhavin Patel 2025-05-13 09:37:15 -07:00
  • 2c798ffb2d Updated TAs patel-bhavin 2025-05-13 06:58:01 +00:00
  • a030b577c0 updating how to implement Bhavin Patel 2025-05-12 16:17:23 -07:00
  • 29a64f2b56 change count to 4 based on dataset Bhavin Patel 2025-05-12 16:15:45 -07:00
  • 6731ba38d5 remove csv from search Bhavin Patel 2025-05-12 15:57:30 -07:00
  • 933ff68b40 Merge branch 'develop' into snort_by_threat_actor Bhavin Patel 2025-05-12 15:36:31 -07:00
  • 98ca7c70b9 yaml updates Bhavin Patel 2025-05-12 15:35:58 -07:00
  • df33c55c9a adding detection and lookup Bhavin Patel 2025-05-12 15:21:55 -07:00
  • 385800dac5 Merge pull request #3519 from splunk/auto-ta-update-263 Bhavin Patel 2025-05-12 14:09:36 -07:00
  • 465b8f9b77 Updated TAs patel-bhavin 2025-05-12 06:58:36 +00:00
  • 18e5871400 Updated TAs auto-ta-update-262 patel-bhavin 2025-05-11 06:57:44 +00:00
  • 0b28a14b8c Updated TAs auto-ta-update-261 patel-bhavin 2025-05-10 06:58:08 +00:00
  • 332c13fc01 Updated TAs auto-ta-update-260 patel-bhavin 2025-05-09 06:58:32 +00:00
  • f6ab9fb3de Enchanced version post NTDR demo Bhavin Patel 2025-05-08 16:27:28 -07:00
  • ec9590d2fd Merge branch 'develop' into snort-correlation-batch pyth0n1c 2025-05-08 15:53:59 -07:00
  • 32af2aa2cf Merge branch 'develop' into auto-ta-update-259 auto-ta-update-259 pyth0n1c 2025-05-08 15:53:55 -07:00
  • 3126836efd Merge branch 'develop' into xworm pyth0n1c 2025-05-08 15:53:47 -07:00
  • 3240a176f7 Merge pull request #3515 from splunk/requirements pyth0n1c 2025-05-08 15:53:21 -07:00
  • a4a90fc93d update install steos Bhavin Patel 2025-05-08 15:47:10 -07:00
  • 2dcadfec97 Merge pull request #3514 from splunk/vignesh_fsutil pyth0n1c 2025-05-08 15:43:40 -07:00
  • 25eb348ba5 no new line Bhavin Patel 2025-05-08 15:28:04 -07:00
  • 5813aa38a1 remove whitespace Bhavin Patel 2025-05-08 15:27:19 -07:00
  • 45a08029df revert in all other jobs but build Bhavin Patel 2025-05-08 15:22:58 -07:00
  • 0db01e7bfc updating test job Bhavin Patel 2025-05-08 15:19:17 -07:00
  • 52f6703ade testing pwd Bhavin Patel 2025-05-08 15:16:45 -07:00
  • 9b765275e3 test Bhavin Patel 2025-05-08 15:15:40 -07:00
  • 332e0d1047 updating commands to install contentctl Bhavin Patel 2025-05-08 15:09:43 -07:00
  • ebecdfd8a4 adding requirements.txt Bhavin Patel 2025-05-08 15:05:07 -07:00
  • 23d0f236b5 Move deprecated detections to removed. update status too Eric McGinnis 2025-05-08 14:52:52 -07:00
  • b31fe1ee92 updating contntctl.yml Bhavin Patel 2025-05-08 13:41:03 -07:00
  • fb954bc403 updating detections Bhavin Patel 2025-05-08 13:03:10 -07:00
  • 69e9894219 adding missing filter Bhavin Patel 2025-05-08 13:01:59 -07:00
  • fe8f197b74 Merge branch 'develop' into auto-ta-update-259 Bhavin Patel 2025-05-08 12:12:41 -07:00
  • 741bf0b7df Merge pull request #3511 from splunk/auto-ta-update-258 Bhavin Patel 2025-05-08 12:12:32 -07:00
  • 739f57000b xworm Teoderick Contreras 2025-05-08 20:33:51 +02:00
  • bf250fe4e3 xworm Teoderick Contreras 2025-05-08 20:28:47 +02:00
  • dfac5c5239 xworm Teoderick Contreras 2025-05-08 11:00:32 +02:00
  • 12aedfeece Updated TAs patel-bhavin 2025-05-08 06:58:10 +00:00
  • 2ecc6b0593 Updated TAs patel-bhavin 2025-05-07 06:58:12 +00:00
  • 2e281045e7 updating queries Bhavin Patel 2025-05-06 19:13:26 -07:00
  • 9ed23a154c optimized version Bhavin Patel 2025-05-06 19:01:52 -07:00
  • c01f075dd8 Merge pull request #3510 from splunk/auto-ta-update-257 v5.5.0 metadata_fixing_script Lou Stella 2025-05-06 08:35:12 -05:00
  • 5b1f68be81 Updated TAs patel-bhavin 2025-05-06 06:57:44 +00:00
  • 2e22417725 update dashboard Bhavin Patel 2025-05-05 18:20:36 -07:00
  • 7871db64a9 update dashboard Bhavin Patel 2025-05-05 16:44:15 -07:00
  • 9e4ec592df Merge pull request #3509 from splunk/ctl_bump pyth0n1c 2025-05-05 15:56:42 -07:00
  • 76f544c9d5 bump Bhavin Patel 2025-05-05 15:53:09 -07:00
  • cf30ae64b7 Merge pull request #3500 from splunk/auto-ta-update-250 pyth0n1c 2025-05-05 15:51:03 -07:00
  • 72e1c0611c Merge branch 'develop' into auto-ta-update-250 Bhavin Patel 2025-05-05 15:05:26 -07:00
  • 402f87020b Merge pull request #3467 from splunk/linux_syscall_auditd_update Bhavin Patel 2025-05-05 12:14:48 -07:00
  • 3f8a13a1f5 Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-05-05 11:53:55 -07:00
  • d869952052 Merge pull request #3492 from splunk/amos-stealer Bhavin Patel 2025-05-05 11:51:00 -07:00
  • 6daa23f6ff Merge branch 'develop' into amos-stealer Bhavin Patel 2025-05-05 11:10:21 -07:00
  • 8439afc8c0 Merge pull request #3508 from splunk/duplicate_status_in_stats Bhavin Patel 2025-05-05 11:09:51 -07:00
  • fcb1c407cd add dest to output_field Bhavin Patel 2025-05-05 11:07:20 -07:00
  • 69aace2a2f Merge branch 'develop' into linux_syscall_auditd_update Br3akp0int 2025-05-05 19:37:41 +02:00
  • 1c4a531594 Apply suggestions from code review Nasreddine Bencherchali 2025-05-05 19:07:48 +02:00
  • 0ed0d17b10 Merge branch 'develop' into duplicate_status_in_stats Bhavin Patel 2025-05-05 10:07:19 -07:00
  • 7a7f6a1623 Merge branch 'develop' into amos-stealer Nasreddine Bencherchali 2025-05-05 18:53:01 +02:00
  • 78f52c4075 Merge pull request #3437 from splunk/fix_bad_attack_data_paths Bhavin Patel 2025-05-05 09:50:33 -07:00
  • d973e001a0 Removing duplicate group-by field ljstella 2025-05-05 09:14:39 -05:00
  • cc57496610 add analytic story Nasreddine Bencherchali 2025-05-05 15:05:24 +02:00
  • 8b9a070ec1 linux_syscall_auditd_update Teoderick Contreras 2025-05-05 10:09:54 +02:00
  • 4747bf77f5 Updated TAs auto-ta-update-256 patel-bhavin 2025-05-05 06:58:15 +00:00
  • 17dc126a84 Updated TAs auto-ta-update-255 patel-bhavin 2025-05-04 06:57:53 +00:00
  • d0c53b72ca Updated TAs auto-ta-update-254 patel-bhavin 2025-05-03 06:58:17 +00:00
  • 37e472b6b5 add more stuff Bhavin Patel 2025-05-02 19:16:26 -07:00
  • 75e4a031b6 udpating some click throughs Bhavin Patel 2025-05-02 17:57:44 -07:00
  • 92c7a4ec29 adding updates to the dashboard Bhavin Patel 2025-05-02 17:45:43 -07:00
  • d9960562b8 Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different. Eric 2025-05-02 14:10:46 -07:00
  • c8d4039488 Merge branch 'develop' into amos-stealer Bhavin Patel 2025-05-02 14:08:26 -07:00
  • 2af5bb3aab Sysmon service stop, not the generic one ljstella 2025-05-02 12:03:44 -05:00
  • a223228a25 Updated TAs auto-ta-update-253 patel-bhavin 2025-05-02 06:57:44 +00:00
  • 2c9573e2b9 Merge branch 'develop' into fix_bad_attack_data_paths pyth0n1c 2025-05-01 15:57:53 -07:00
  • fe42046a6f Merge pull request #3489 from splunk/eventlog-stuff Bhavin Patel 2025-05-01 13:33:00 -07:00
  • 281f8d2f48 Merge branch 'develop' into eventlog-stuff Bhavin Patel 2025-05-01 13:09:27 -07:00
  • 78e3f8a06e update name Bhavin Patel 2025-05-01 12:50:51 -07:00
  • 86d9e1f615 Merge branch 'develop' into amos-stealer Bhavin Patel 2025-05-01 12:50:02 -07:00
  • 5af589435f Merge pull request #3502 from splunk/deprecate_rmm_hunt Bhavin Patel 2025-05-01 12:22:09 -07:00
  • 1c22f847d3 Merge branch 'develop' into auto-ta-update-250 Bhavin Patel 2025-05-01 11:57:49 -07:00
  • 7742f511b3 Merge branch 'develop' into deprecate_rmm_hunt Bhavin Patel 2025-05-01 11:53:34 -07:00
  • a26bfc0637 Merge pull request #3377 from splunk/small-tuning Bhavin Patel 2025-05-01 11:52:48 -07:00
  • a7f0e38586 updating removed in version Bhavin Patel 2025-05-01 11:33:07 -07:00
  • a9f728ab14 Updated TAs auto-ta-update-252 patel-bhavin 2025-05-01 06:57:43 +00:00
  • 4d1ff91ee3 updated messaging Bhavin Patel 2025-04-30 12:24:55 -07:00
  • 26e2f59462 add back manual_Test Bhavin Patel 2025-04-30 12:20:03 -07:00
  • 6b2f2e9636 remove manual test for a CI run Bhavin Patel 2025-04-30 12:15:14 -07:00
  • 884eede4ce updating search Bhavin Patel 2025-04-30 12:14:30 -07:00
  • 7ec9cbdac2 Updated TAs auto-ta-update-251 patel-bhavin 2025-04-30 06:58:19 +00:00
  • a0ac39bd23 adding timeline Bhavin Patel 2025-04-29 18:19:32 -07:00
  • 6c45cc83a9 adding sample dashboard Bhavin Patel 2025-04-29 17:07:10 -07:00
  • 422a769c0d final fixes Eric 2025-04-29 17:04:03 -07:00
  • 170ed93d9d Merge branch 'develop' into fix_bad_attack_data_paths Eric 2025-04-29 16:54:17 -07:00
  • 6af764bd3d Update cisco_secure_firewall___high_priority_intrusion_classification.yml Nasreddine Bencherchali 2025-04-29 13:39:51 +02:00
  • 859eb6bdcb Update cisco_secure_firewall___lumma_stealer_activity.yml Nasreddine Bencherchali 2025-04-29 13:10:22 +02:00
  • 19c74a61da more filter updates Nasreddine Bencherchali 2025-04-29 13:08:50 +02:00