Commit Graph

  • 4be0e79049 update filter macros Nasreddine Bencherchali 2025-04-29 12:59:20 +02:00
  • 15ed5d18f2 Updated TAs patel-bhavin 2025-04-29 06:57:56 +00:00
  • 55461779c5 Merge branch 'develop' into small-tuning Bhavin Patel 2025-04-28 12:09:36 -07:00
  • 700667bda7 Merge pull request #3499 from splunk/weavingbaskets Bhavin Patel 2025-04-28 12:09:17 -07:00
  • 0c67bd001c Delete java_spawning_command_shells.yml Michael Haag 2025-04-28 12:01:09 -06:00
  • 074c90ceb4 ver and date Michael Haag 2025-04-28 10:37:57 -06:00
  • 074d13f001 BasketNetWeaving with Haag: No Shell Left Behind! Michael Haag 2025-04-28 10:33:17 -06:00
  • 0f610d0e2d Merge branch 'develop' into snort-correlation-batch Nasreddine Bencherchali 2025-04-28 18:16:29 +02:00
  • 5cb3a0d564 Intrusion Correlation and Activity Batch Nasreddine Bencherchali 2025-04-28 18:14:05 +02:00
  • 8c836e3fe5 Updated TAs auto-ta-update-249 patel-bhavin 2025-04-28 07:02:52 +00:00
  • 75073e65b5 Updated TAs auto-ta-update-248 patel-bhavin 2025-04-27 06:58:01 +00:00
  • 9589a9094e Updated TAs auto-ta-update-247 patel-bhavin 2025-04-26 06:57:44 +00:00
  • 9ac544fb8e Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-04-25 08:54:50 -07:00
  • be0e06c743 Merge pull request #3493 from splunk/taskhost_counting Bhavin Patel 2025-04-25 08:54:30 -07:00
  • 511221ba1e version bump ljstella 2025-04-25 08:58:58 -05:00
  • 31e2c03b8d Add where clause back ljstella 2025-04-25 08:44:50 -05:00
  • 677c3b0df4 Update macos_amos_stealer___virtual_machine_check_activity.yml Nasreddine Bencherchali 2025-04-25 13:24:48 +02:00
  • 4cb367256c add amos stealer analytic Nasreddine Bencherchali 2025-04-25 12:06:42 +02:00
  • 8a4d997539 Updated TAs auto-ta-update-246 patel-bhavin 2025-04-25 06:57:54 +00:00
  • 1dc4f1c45a bump versions Nasreddine Bencherchali 2025-04-24 19:53:19 +02:00
  • eb99c36454 Update deprecation_mapping.YML Nasreddine Bencherchali 2025-04-24 19:48:12 +02:00
  • 44b110d9e6 update date and deprecation replacement Nasreddine Bencherchali 2025-04-24 19:43:37 +02:00
  • ce07cb9ded Update deprecation_mapping.YML Nasreddine Bencherchali 2025-04-24 19:40:31 +02:00
  • 75cb7af28d Update deprecation_mapping.YML Nasreddine Bencherchali 2025-04-24 19:14:31 +02:00
  • 88d9ef48b8 Merge branch 'develop' into eventlog-stuff Nasreddine Bencherchali 2025-04-24 18:55:40 +02:00
  • 194d99c655 Update deprecation_mapping.YML Nasreddine Bencherchali 2025-04-24 18:55:29 +02:00
  • 5676c6691c Update deprecation_mapping.YML Nasreddine Bencherchali 2025-04-24 18:36:06 +02:00
  • 4c1a7cc1b4 Update windows_eventlog_recon_activity_using_log_query_utilities.yml Nasreddine Bencherchali 2025-04-24 18:27:47 +02:00
  • 713576c3a4 Merge pull request #3490 from splunk/filter_macro_duplicate Nasreddine Bencherchali 2025-04-24 18:25:38 +02:00
  • 629bc01aae update output and nirsoft tools Nasreddine Bencherchali 2025-04-24 18:23:55 +02:00
  • ba0577038e bump version ljstella 2025-04-24 10:41:10 -05:00
  • 8240ed3c6e Remove duplicate filter macro ljstella 2025-04-24 10:34:30 -05:00
  • 4aa6e92c3b Update check_elevated_cmd_using_whoami.yml Nasreddine Bencherchali 2025-03-03 20:15:54 +01:00
  • 60164de4e7 updates and tunings Nasreddine Bencherchali 2025-03-03 15:46:14 +01:00
  • a549469e35 Merge branch 'develop' into eventlog-stuff Nasreddine Bencherchali 2025-04-24 15:00:22 +02:00
  • 5032cb1c21 add new analytics for event log query Nasreddine Bencherchali 2025-04-24 14:57:16 +02:00
  • 0326873240 Updated TAs auto-ta-update-245 patel-bhavin 2025-04-24 06:57:55 +00:00
  • bf8b9a0f32 Updated TAs auto-ta-update-244 patel-bhavin 2025-04-23 06:57:48 +00:00
  • de5542c9c1 Merge pull request #3481 from splunk/revert_prestats_optimization v5.4.0 Bhavin Patel 2025-04-22 14:19:44 -07:00
  • 08dac066e8 Merge branch 'develop' into revert_prestats_optimization pyth0n1c 2025-04-22 13:52:23 -07:00
  • 4c1dbbb3ac Merge pull request #3486 from splunk/shadow_single pyth0n1c 2025-04-22 13:51:59 -07:00
  • 3b73f92315 Merge branch 'develop' into revert_prestats_optimization Lou Stella 2025-04-22 15:42:09 -05:00
  • 91e97c147c Merge branch 'develop' into shadow_single Lou Stella 2025-04-22 15:37:34 -05:00
  • ac5b667bd7 Merge pull request #3485 from splunk/version_adjustments pyth0n1c 2025-04-22 13:37:08 -07:00
  • 5158549d8b updating dataset Bhavin Patel 2025-04-22 13:32:12 -07:00
  • f0e662bd6f Merge branch 'develop' into version_adjustments Lou Stella 2025-04-22 15:04:40 -05:00
  • 6fc106b995 Version adjustments for new detection metadata validation check ljstella 2025-04-22 15:03:23 -05:00
  • 34d33627b3 Merge branch 'develop' into revert_prestats_optimization Bhavin Patel 2025-04-22 12:12:45 -07:00
  • 2bbcdd5032 Merge pull request #3484 from splunk/cisco_slashn pyth0n1c 2025-04-22 12:12:32 -07:00
  • 3fb1a7ad96 Merge branch 'develop' into revert_prestats_optimization Bhavin Patel 2025-04-22 12:11:41 -07:00
  • 1411dac82f Merge branch 'develop' into cisco_slashn pyth0n1c 2025-04-22 12:11:23 -07:00
  • 45af4dedab Merge pull request #3483 from splunk/mitre_17 pyth0n1c 2025-04-22 12:11:02 -07:00
  • f37ca5fc68 update message formatting Bhavin Patel 2025-04-22 12:05:49 -07:00
  • 4a1547b9c9 updating message Bhavin Patel 2025-04-22 11:51:26 -07:00
  • b1ff40dfd4 updating ids in new branch Bhavin Patel 2025-04-22 11:24:52 -07:00
  • fe2ac77da6 updating mitre ids mitre_cti_updates Bhavin Patel 2025-04-22 11:14:00 -07:00
  • f8df5c4491 Update windows_deleted_registry_by_a_non_critical_process_file_path.yml Bhavin Patel 2025-04-22 10:33:39 -07:00
  • 967b689501 bump version Patrick Bareiss 2025-04-22 11:06:07 +02:00
  • 08294f4123 bug fix Patrick Bareiss 2025-04-22 10:57:45 +02:00
  • a24c72d431 Revert prestats optimization Patrick Bareiss 2025-04-22 10:32:24 +02:00
  • 4e5c7a339e Updated TAs auto-ta-update-243 patel-bhavin 2025-04-22 06:57:48 +00:00
  • 262d492358 Merge pull request #3479 from splunk/integration_v5.4.0 mitre_attack-17 Bhavin Patel 2025-04-21 14:12:34 -07:00
  • 0c729cc37d Merge branch 'develop' into integration_v5.4.0 Bhavin Patel 2025-04-21 13:44:34 -07:00
  • d85a312259 Merge pull request #3472 from splunk/water Bhavin Patel 2025-04-21 13:37:44 -07:00
  • b5258b99e4 Update detect_psexec_with_accepteula_flag.yml Bhavin Patel 2025-04-21 13:00:03 -07:00
  • 366474792d Update cisco_secure_firewall___rare_snort_rule_triggered.yml Bhavin Patel 2025-04-21 12:52:17 -07:00
  • bd617e1211 Update windows_powershell_invoke_restmethod_ip_information_collection.yml Bhavin Patel 2025-04-21 12:27:30 -07:00
  • 5bd5a53938 updating searches Bhavin Patel 2025-04-21 12:13:42 -07:00
  • a219deb751 Merge branch 'develop' into water Eric 2025-04-21 10:25:16 -07:00
  • 677fe6a7f9 Update windows_msc_eviltwin_directory_path_manipulation.yml Michael Haag 2025-04-21 10:25:39 -06:00
  • 6b6fa4d3b1 Updated TAs auto-ta-update-242 patel-bhavin 2025-04-21 06:57:56 +00:00
  • a98aa0713a Updated TAs auto-ta-update-241 patel-bhavin 2025-04-20 06:58:17 +00:00
  • 98a421dc36 Updated TAs auto-ta-update-240 patel-bhavin 2025-04-19 06:58:01 +00:00
  • f7e069c0f8 Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-04-18 14:09:04 -07:00
  • 078b89e774 Merge pull request #3475 from splunk/dep_cli Bhavin Patel 2025-04-18 13:56:23 -07:00
  • 067eb13fe1 Merge branch 'develop' into dep_cli Bhavin Patel 2025-04-18 13:48:27 -07:00
  • 482cdc2ee9 Merge pull request #3462 from splunk/crushingit Bhavin Patel 2025-04-18 13:48:18 -07:00
  • f26d6beda1 updating yaml Bhavin Patel 2025-04-18 13:42:29 -07:00
  • 93a1b752fe updating this detection Bhavin Patel 2025-04-18 13:35:11 -07:00
  • 426d54d99d updating cli flags Bhavin Patel 2025-04-18 13:29:32 -07:00
  • f5bdb65b9e Empty commit deprecated_update_ci Bhavin Patel 2025-04-18 13:22:33 -07:00
  • bb2045cce0 Merge branch 'develop' into crushingit Bhavin Patel 2025-04-18 12:45:18 -07:00
  • 9f8f28c0b5 Update crushftp_max_simultaneous_users_from_ip.yml Michael Haag 2025-04-18 13:27:09 -06:00
  • 95049154e9 Update crushftp_authentication_bypass_exploitation.yml Michael Haag 2025-04-18 13:25:39 -06:00
  • 19bd2b9be5 updating version and flag Bhavin Patel 2025-04-18 12:10:51 -07:00
  • 310b207892 back to prod Bhavin Patel 2025-04-18 11:37:54 -07:00
  • e5e7fc032c Merge pull request #3465 from splunk/remove_v5.4.0 pyth0n1c 2025-04-18 10:57:26 -07:00
  • 6bd0f5ab8f Update windows_shell_process_from_crushftp.yml Michael Haag 2025-04-18 11:28:32 -06:00
  • 614721e681 Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-18 10:26:39 -07:00
  • 3bf8bc509c Merge pull request #3404 from splunk/cactus Bhavin Patel 2025-04-18 10:25:23 -07:00
  • aa3187d61e Merge branch 'develop' into remove_v5.4.0 pyth0n1c 2025-04-18 10:13:12 -07:00
  • 949b59900f Merge branch 'develop' into water Bhavin Patel 2025-04-18 10:11:56 -07:00
  • 9ae046285e Merge branch 'develop' into cactus Bhavin Patel 2025-04-18 09:52:02 -07:00
  • a62ab6a00a Merge pull request #3453 from splunk/aws_bedrock Bhavin Patel 2025-04-18 09:51:02 -07:00
  • 19221004d3 round 2 Michael Haag 2025-04-18 10:22:37 -06:00
  • 32962c745b versions Michael Haag 2025-04-18 10:00:01 -06:00
  • 8ca79f3f56 Merge branch 'develop' into cactus Michael Haag 2025-04-18 09:33:17 -06:00
  • 905c6ce934 Updated TAs auto-ta-update-239 patel-bhavin 2025-04-18 06:57:43 +00:00
  • 85113f3f5f Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-04-17 15:06:57 -07:00
  • 5fb923447c Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-17 15:00:24 -07:00