Commit Graph

  • eae0a4ed66 updating spls to match with output from data sources Bhavin Patel 2025-04-17 14:49:05 -07:00
  • 524136ee6c adding data sources Bhavin Patel 2025-04-17 14:38:23 -07:00
  • 5e6418ee6e Merge branch 'develop' into aws_bedrock Bhavin Patel 2025-04-17 14:24:55 -07:00
  • 001da6a900 Merge pull request #3468 from splunk/csftd_third_batch Bhavin Patel 2025-04-17 14:23:47 -07:00
  • e78f39612b updates to rba and such Bhavin Patel 2025-04-17 13:59:44 -07:00
  • 0bdaf9647e Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-17 13:27:58 -07:00
  • fab1f6dee7 Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-04-17 12:54:53 -07:00
  • 12e6cc7d7a Merge branch 'develop' into csftd_third_batch Bhavin Patel 2025-04-17 12:49:38 -07:00
  • 3842a6fc75 Merge pull request #3451 from splunk/csftd_second_batch Bhavin Patel 2025-04-17 12:49:23 -07:00
  • 8e6d4c69bf Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-17 12:00:27 -07:00
  • fad66d2e11 Merge branch 'develop' into csftd_second_batch Bhavin Patel 2025-04-17 11:04:31 -07:00
  • 5c026c7c70 Merge pull request #3469 from splunk/storm Bhavin Patel 2025-04-17 10:58:40 -07:00
  • c418996d5f Update windows_msc_eviltwin_directory_path_manipulation.yml Michael Haag 2025-04-17 11:53:17 -06:00
  • 4b73c303c8 Merge branch 'develop' into storm Bhavin Patel 2025-04-17 10:47:02 -07:00
  • d868a62c23 Create windows_powershell_invoke_restmethod_ip_information_collection.yml Michael Haag 2025-04-17 11:45:42 -06:00
  • e913143339 Water Gamayun Michael Haag 2025-04-17 11:26:37 -06:00
  • 22485da816 Merge pull request #3471 from splunk/auto-ta-update-238 Bhavin Patel 2025-04-17 10:05:43 -07:00
  • bc6635d225 Merge branch 'develop' into storm Bhavin Patel 2025-04-17 10:04:45 -07:00
  • bcd5dd3fb2 Merge branch 'develop' into auto-ta-update-238 Nasreddine Bencherchali 2025-04-17 19:04:44 +02:00
  • 0699bacf84 Merge pull request #3470 from splunk/earth Bhavin Patel 2025-04-17 10:04:10 -07:00
  • f9ed7b08cd Update cisco_secure_firewall___rare_snort_rule_triggered.yml Nasreddine Bencherchali 2025-04-17 19:02:49 +02:00
  • 4ab93da45e rename file Nasreddine Bencherchali 2025-04-17 18:56:09 +02:00
  • db78bba4cd update to RBA section Bhavin Patel 2025-04-17 09:48:48 -07:00
  • 96f7490cde Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-17 09:15:53 -07:00
  • b0f1eaa08e Merge branch 'develop' into storm Bhavin Patel 2025-04-17 09:10:45 -07:00
  • d57b1686fd Merge branch 'develop' into csftd_second_batch Nasreddine Bencherchali 2025-04-17 18:06:46 +02:00
  • f98fe82f49 Merge branch 'develop' into csftd_third_batch Nasreddine Bencherchali 2025-04-17 18:06:43 +02:00
  • c4bca6ff3b Merge branch 'develop' into earth Bhavin Patel 2025-04-17 08:58:49 -07:00
  • 52f23c270d Merge branch 'develop' into auto-ta-update-238 Bhavin Patel 2025-04-17 08:54:31 -07:00
  • 9bb83d7703 Merge pull request #3443 from splunk/csftd_first_batch Bhavin Patel 2025-04-17 08:54:18 -07:00
  • b0e980d207 revert linux TA Bhavin Patel 2025-04-17 08:53:14 -07:00
  • 5cff3894ed Updated TAs patel-bhavin 2025-04-17 06:58:05 +00:00
  • 657ffbc9e4 Ground Control to Major Haag: Earth Alux Michael Haag 2025-04-16 21:55:12 -06:00
  • f28b475fb7 Update dump_lsass_via_procdump.yml Michael Haag 2025-04-16 21:45:24 -06:00
  • ffa5207b7e version info Michael Haag 2025-04-16 21:41:49 -06:00
  • 8a5556b252 The Haag Identity: Storm-2460 CLFS Zero Day Michael Haag 2025-04-16 21:25:23 -06:00
  • e1e7ab0083 Merge branch 'develop' into crushingit Michael Haag 2025-04-16 20:51:53 -06:00
  • 6d5a7bf33c Merge branch 'develop' into aws_bedrock Bhavin Patel 2025-04-16 16:58:57 -07:00
  • 704e9ccdd7 missed a threat object Bhavin Patel 2025-04-16 16:51:46 -07:00
  • 5b7cfdb7d3 updating versions Bhavin Patel 2025-04-16 16:45:16 -07:00
  • b32a6bd148 mionr fix Bhavin Patel 2025-04-16 16:38:30 -07:00
  • 7fdcb4e7e0 adding drilldown Bhavin Patel 2025-04-16 16:31:04 -07:00
  • b6f87ba697 make it production Bhavin Patel 2025-04-16 16:26:45 -07:00
  • 226dabdf34 fillnull for url Bhavin Patel 2025-04-16 16:09:07 -07:00
  • 0c57994c22 remove static lookup file Bhavin Patel 2025-04-16 16:00:49 -07:00
  • e1dc36ad07 revert wrong commit Bhavin Patel 2025-04-16 16:00:23 -07:00
  • b154c14045 remove static loookup Bhavin Patel 2025-04-16 15:52:45 -07:00
  • de93d96862 updating RBA Bhavin Patel 2025-04-16 15:45:14 -07:00
  • 3e51bbca2c updating replacement name Bhavin Patel 2025-04-16 15:29:16 -07:00
  • 4c8c3cea78 update risk objects type Nasreddine Bencherchali 2025-04-17 00:24:46 +02:00
  • 9cd220fea1 update risk object type Nasreddine Bencherchali 2025-04-17 00:24:00 +02:00
  • 6b64604903 resolve review comments Nasreddine Bencherchali 2025-04-17 00:22:13 +02:00
  • a9cd107d9c updating baseline status Bhavin Patel 2025-04-16 15:15:15 -07:00
  • 5c7c567a3f updating status Bhavin Patel 2025-04-16 15:07:32 -07:00
  • 1a8c89957b baseline to removed Bhavin Patel 2025-04-16 15:00:47 -07:00
  • e424e64086 remove private from this mapping Bhavin Patel 2025-04-16 13:20:07 -07:00
  • b9d06c166f update fields to cim and add output fields Nasreddine Bencherchali 2025-04-16 20:37:37 +02:00
  • 82d6f1ea84 update fields to cim and add output fields Nasreddine Bencherchali 2025-04-16 20:20:01 +02:00
  • 97800f4fdb Merge branch 'develop' into csftd_first_batch Nasreddine Bencherchali 2025-04-16 20:19:57 +02:00
  • 56cc3f5928 update fields to cim and add output fields Nasreddine Bencherchali 2025-04-16 19:57:13 +02:00
  • bedb329097 updating content yaml to 5.4.0 Bhavin Patel 2025-04-16 09:40:09 -07:00
  • e79eb9e515 Merge branch 'develop' into remove_v5.4.0 Bhavin Patel 2025-04-16 09:39:11 -07:00
  • 3322853356 Merge branch 'develop' into linux_syscall_auditd_update Bhavin Patel 2025-04-16 09:15:45 -07:00
  • c25f1397d3 Merge pull request #3464 from splunk/detection_bug_fix Bhavin Patel 2025-04-16 09:15:09 -07:00
  • 96294957a3 add datasource and corresponding field Nasreddine Bencherchali 2025-04-16 17:19:21 +02:00
  • 3480c1b6b3 renamed analytic Nasreddine Bencherchali 2025-04-16 17:13:50 +02:00
  • f23304e5be cisco secure firewall detections - third batch Nasreddine Bencherchali 2025-04-16 17:11:11 +02:00
  • 06f39d9906 Merge branch 'detection_bug_fix' of github.com:splunk/security_content into detection_bug_fix Patrick Bareiss 2025-04-16 13:42:25 +02:00
  • f00967835c improvements detection Patrick Bareiss 2025-04-16 13:42:06 +02:00
  • d073f8f03a linux_syscall_auditd_update Teoderick Contreras 2025-04-16 13:05:53 +02:00
  • 8f642ac8ca Updated TAs auto-ta-update-237 patel-bhavin 2025-04-16 06:58:15 +00:00
  • c431d26f73 Merge branch 'develop' into aws_bedrock Bhavin Patel 2025-04-15 16:18:39 -07:00
  • 3aa4e698dd Merge branch 'develop' into csftd_first_batch Bhavin Patel 2025-04-15 15:53:13 -07:00
  • cf30fce074 updating versions Bhavin Patel 2025-04-15 15:26:10 -07:00
  • bf3fe8b361 remove yamls and update mapping Bhavin Patel 2025-04-15 15:19:48 -07:00
  • eb3c599361 Merge branch 'develop' into crushingit Michael Haag 2025-04-15 10:03:04 -06:00
  • b175e03111 Update windows_registry_payload_injection.yml Bhavin Patel 2025-04-15 08:51:06 -07:00
  • 28dcd19759 Merge branch 'develop' into detection_bug_fix Bhavin Patel 2025-04-15 08:45:02 -07:00
  • 1a084095d5 Merge pull request #3456 from splunk/TR-4095 Bhavin Patel 2025-04-15 08:44:42 -07:00
  • 78d572d49e Merge branch 'develop' into TR-4095 Bhavin Patel 2025-04-15 08:20:06 -07:00
  • dc7736489d Merge branch 'develop' into csftd_second_batch Jose Enrique Hernandez 2025-04-15 11:19:01 -04:00
  • 63bf81a08f bump version Patrick Bareiss 2025-04-15 09:17:17 +02:00
  • 318f15ce7d bug fix detection Windows Registry Payload Injection Patrick Bareiss 2025-04-15 09:05:50 +02:00
  • cb2374a253 Updated TAs auto-ta-update-236 patel-bhavin 2025-04-15 06:58:18 +00:00
  • fc81c76727 Haag's Crushed Shell: A Tale of CrushFTP Exploitation Michael Haag 2025-04-14 12:39:07 -06:00
  • f344f88958 Updated TAs auto-ta-update-235 patel-bhavin 2025-04-14 06:57:53 +00:00
  • fd5d77f994 Updated TAs auto-ta-update-234 patel-bhavin 2025-04-13 06:58:05 +00:00
  • f0e2816486 Updated TAs auto-ta-update-233 patel-bhavin 2025-04-12 06:57:53 +00:00
  • 4fc2867f2b Updated TAs auto-ta-update-232 patel-bhavin 2025-04-11 06:58:07 +00:00
  • 3ca60252bb bump versions drilldown_time_update Bhavin Patel 2025-04-10 13:50:07 -07:00
  • a203f1b739 fix dates Bhavin Patel 2025-04-10 13:40:34 -07:00
  • 31dc02f57a updating drilldowns Bhavin Patel 2025-04-10 13:37:14 -07:00
  • 09640e8d10 Merge pull request #3454 from splunk/bump_yaml Bhavin Patel 2025-04-10 09:58:37 -07:00
  • ce3755b4d8 Add registry_path ljstella 2025-04-10 11:56:02 -05:00
  • 0e77f7fe27 Merge branch 'develop' into bump_yaml Bhavin Patel 2025-04-10 09:52:16 -07:00
  • c873289d6a Merge branch 'develop' into TR-4095 Bhavin Patel 2025-04-10 09:45:40 -07:00
  • effe6c2e2f Merge pull request #3452 from splunk/issue_template_update Bhavin Patel 2025-04-10 09:45:30 -07:00
  • c733afbb0f Update PR template for contentctl v5 lookup handling ljstella 2025-04-10 11:09:33 -05:00
  • 23f0df3e96 Date & Version bump ljstella 2025-04-10 11:07:16 -05:00
  • 8020e90e6d Add output fields, tighten up outputs ljstella 2025-04-10 11:05:36 -05:00