Commit Graph

  • 7541027f8e Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-04-01 09:41:58 +02:00
  • 294128f9dc Merge branch 'develop' into medusa_ransomware Br3akp0int 2025-04-01 09:36:41 +02:00
  • fcf1ef5894 Updated TAs auto-ta-update-222 patel-bhavin 2025-04-01 06:58:00 +00:00
  • fc2be9e0b7 fix pass at attack data name fixes Eric 2025-03-31 17:05:54 -07:00
  • ada8585d6f Merge branch 'develop' into rceattack Michael Haag 2025-03-31 12:05:21 -06:00
  • 9cf102e081 improvements to endpoint detections output_normalization_endpoint_improvements Patrick Bareiss 2025-03-31 11:49:18 +02:00
  • 9d1ce593b6 Updated TAs auto-ta-update-221 patel-bhavin 2025-03-31 06:57:44 +00:00
  • 949a74c91b Updated TAs auto-ta-update-220 patel-bhavin 2025-03-30 06:58:16 +00:00
  • 497ae6a09e Updated TAs auto-ta-update-219 patel-bhavin 2025-03-29 06:58:00 +00:00
  • 6408f290aa Merge branch 'develop' into jp_paranoid Bhavin Patel 2025-03-28 13:38:11 -07:00
  • 246f4856ef Merge pull request #3423 from 0xC0FFEEEE/win_sus_service_fix Bhavin Patel 2025-03-28 13:34:30 -07:00
  • 3b6e62e913 Merge branch 'develop' into win_sus_service_fix Bhavin Patel 2025-03-28 13:17:43 -07:00
  • bc2f378522 Merge pull request #3425 from splunk/rahul_feedback Bhavin Patel 2025-03-28 13:16:55 -07:00
  • db0455a024 Merge branch 'develop' into win_sus_service_fix Bhavin Patel 2025-03-28 12:36:36 -07:00
  • 949e72062b Merge branch 'develop' into rahul_feedback Bhavin Patel 2025-03-28 12:35:45 -07:00
  • c21858bad4 Merge pull request #3419 from splunk/seaside Bhavin Patel 2025-03-28 12:32:53 -07:00
  • bd3c6a0800 Merge branch 'develop' into sunnyside Bhavin Patel 2025-03-28 12:22:09 -07:00
  • 9a1888835c Merge branch 'develop' into rahul_feedback Bhavin Patel 2025-03-28 12:15:27 -07:00
  • fb51ba8f28 Merge branch 'develop' into seaside Bhavin Patel 2025-03-28 12:10:09 -07:00
  • ca2487eec2 Merge pull request #3432 from splunk/auto-ta-update-218 Bhavin Patel 2025-03-28 12:09:37 -07:00
  • a87a568a2a Update seashell_blizzard.yml Bhavin Patel 2025-03-28 12:02:11 -07:00
  • 7519993300 Merge branch 'develop' into seaside Bhavin Patel 2025-03-28 12:01:27 -07:00
  • c7d11e0852 udpating msg Bhavin Patel 2025-03-28 11:41:56 -07:00
  • 12356f996f updating detection to previous Bhavin Patel 2025-03-28 11:39:59 -07:00
  • 135c3633d8 updating detection Bhavin Patel 2025-03-28 11:37:43 -07:00
  • 3f274b9b83 deprecate and add new Bhavin Patel 2025-03-28 11:32:34 -07:00
  • 1bbcf0b4ac Merge branch 'develop' into auto-ta-update-218 Bhavin Patel 2025-03-28 10:07:30 -07:00
  • 57a2e3c230 Merge pull request #3418 from splunk/vanhelsing Bhavin Patel 2025-03-28 10:06:49 -07:00
  • 770f4bfdf0 Merge branch 'develop' into auto-ta-update-218 Bhavin Patel 2025-03-28 09:52:09 -07:00
  • 26c1b2eb30 Update linux_secure.yml Bhavin Patel 2025-03-28 09:51:59 -07:00
  • 03b3cc4b90 Merge branch 'develop' into renamed_earth_erties Bhavin Patel 2025-03-28 09:51:02 -07:00
  • 7e1cc06c3c Merge branch 'develop' into win_sus_service_fix Bhavin Patel 2025-03-28 09:50:36 -07:00
  • 4cf5b74a65 Update vanhelsing_ransomware.yml Bhavin Patel 2025-03-28 09:48:48 -07:00
  • 14bf638d06 Merge branch 'develop' into vanhelsing Bhavin Patel 2025-03-28 09:48:19 -07:00
  • b4e78eb286 Merge branch 'develop' into rahul_feedback Bhavin Patel 2025-03-28 09:47:28 -07:00
  • cb9655f299 Merge pull request #3424 from splunk/default_match_lookup Bhavin Patel 2025-03-28 09:47:15 -07:00
  • e6cc21b27a Merge branch 'develop' into rahul_feedback Bhavin Patel 2025-03-28 09:31:05 -07:00
  • ae32bcbb9e update dd Bhavin Patel 2025-03-28 09:30:52 -07:00
  • 70504b7e04 Merge branch 'develop' into default_match_lookup Lou Stella 2025-03-28 11:25:44 -05:00
  • 05e1b1b414 Merge branch 'develop' into win_sus_service_fix Bhavin Patel 2025-03-28 09:25:30 -07:00
  • a28d7573f4 fix yml formatting error Eric McGinnis 2025-03-28 09:10:36 -07:00
  • 7f246f129e medusa_ransomware Teoderick Contreras 2025-03-28 11:08:44 +01:00
  • 05cacaa655 Data source endpoint output normalization improvements Patrick Bareiss 2025-03-28 10:50:30 +01:00
  • b3be9906eb Updated TAs patel-bhavin 2025-03-28 06:58:23 +00:00
  • c7083d9107 Merge branch 'develop' into vanhelsing Bhavin Patel 2025-03-27 17:54:24 -07:00
  • 9051096f9d test_@ unit-test-ci Bhavin Patel 2025-03-27 16:51:07 -07:00
  • 0cf28f67e5 test Bhavin Patel 2025-03-27 16:42:11 -07:00
  • 74c482d90d intentional fail and catch Bhavin Patel 2025-03-27 16:39:14 -07:00
  • de96c7884c Merge branch 'develop' into unit-test-ci Bhavin Patel 2025-03-27 15:25:00 -07:00
  • 580a0873f2 Merge branch 'develop' into output_normalization_endpoint pyth0n1c 2025-03-27 14:53:31 -07:00
  • 8d5975884c Merge pull request #3430 from splunk/cisco_ai pyth0n1c 2025-03-27 14:52:57 -07:00
  • f7ff5d2af2 Update crushftp_server_side_template_injection.yml Bhavin Patel 2025-03-27 14:19:21 -07:00
  • 2a9d3e477e verbose mode Bhavin Patel 2025-03-27 14:13:28 -07:00
  • aef3f08c76 fail when ctl test fails Bhavin Patel 2025-03-27 14:09:26 -07:00
  • c009a27c12 add back manual_test Bhavin Patel 2025-03-27 14:01:20 -07:00
  • 5ebfaeacdf Merge branch 'develop' into win_sus_service_fix Bhavin Patel 2025-03-27 13:51:41 -07:00
  • 5000fe16cb reverrt ctl Bhavin Patel 2025-03-27 13:41:17 -07:00
  • cdd70a10aa test with local data Bhavin Patel 2025-03-27 13:32:37 -07:00
  • 9e547de754 revert link Bhavin Patel 2025-03-27 12:30:55 -07:00
  • f6d1ec5dc6 updating to verbose unit test Bhavin Patel 2025-03-27 12:11:59 -07:00
  • eb5cfd4907 Empty commit Bhavin Patel 2025-03-27 12:10:22 -07:00
  • cda8da91ac updating detections version Bhavin Patel 2025-03-27 11:27:43 -07:00
  • 96bd1501b6 update inspect failures Bhavin Patel 2025-03-27 10:54:24 -07:00
  • 20256391ee updating a new detection Bhavin Patel 2025-03-27 10:45:17 -07:00
  • f14fd8dc50 Merge branch 'develop' into output_normalization_endpoint Bhavin Patel 2025-03-27 10:23:42 -07:00
  • 30ab1d81cb Merge branch 'develop' into rahul_feedback Bhavin Patel 2025-03-27 08:56:01 -07:00
  • 1c949f6a6f Merge pull request #3426 from splunk/cim_bug Bhavin Patel 2025-03-27 08:25:20 -07:00
  • e3f83d194f Updated TAs auto-ta-update-217 patel-bhavin 2025-03-27 06:58:04 +00:00
  • b96e63d86e Merge branch 'develop' into cim_bug P4T12ICK 2025-03-27 07:25:51 +01:00
  • 1d2d0352ed Merge pull request #3428 from splunk/fix-bad-attack-data-link pyth0n1c 2025-03-26 14:37:47 -07:00
  • 17b1fd44c7 Update living_off_the_land_detection.yml attack_data pyth0n1c 2025-03-26 14:08:52 -07:00
  • 13800a7ec1 Merge pull request #3412 from splunk/cisco_ai_defense Bhavin Patel 2025-03-26 14:01:00 -07:00
  • 25a3239716 clean up Bhavin Patel 2025-03-26 13:49:53 -07:00
  • e5b05500d7 deprecating the old one Bhavin Patel 2025-03-26 13:45:26 -07:00
  • ea0b365690 Merge branch 'develop' into cisco_ai_defense Bhavin Patel 2025-03-26 13:44:06 -07:00
  • dfa33b8589 Merge branch 'develop' into default_match_lookup Lou Stella 2025-03-26 15:31:10 -05:00
  • eaf9ad89ea Merge pull request #3408 from splunk/process-injection-detection-enhanced Bhavin Patel 2025-03-26 13:29:55 -07:00
  • 88d699f518 Merge branch 'develop' into cisco_ai_defense Bhavin Patel 2025-03-26 12:40:28 -07:00
  • 377efcc0b0 updating name Bhavin Patel 2025-03-26 12:39:02 -07:00
  • 76ef391ac3 updating title to full name Bhavin Patel 2025-03-26 12:04:02 -07:00
  • ac92401572 Merge branch 'develop' into rceattack Bhavin Patel 2025-03-26 11:05:51 -07:00
  • e7e5dcbc03 Merge branch 'develop' into process-injection-detection-enhanced Bhavin Patel 2025-03-26 11:05:22 -07:00
  • 60e4f3881c Adding default match back to lookups where used ljstella 2025-03-26 13:03:42 -05:00
  • e1f2ccde6c udpate Bhavin Patel 2025-03-26 10:35:48 -07:00
  • bd954290b1 updating to sum Bhavin Patel 2025-03-26 10:32:20 -07:00
  • 7ff9137f26 updating query based on feedback Bhavin Patel 2025-03-26 10:30:06 -07:00
  • 1e1700cd4d Merge branch 'develop' into output_normalization_endpoint Bhavin Patel 2025-03-26 10:04:43 -07:00
  • a0b45b8248 update lookup and revert back to where isnotnull 0xC0FFEEEE 2025-03-26 16:01:17 +00:00
  • f491d2a512 Removing default match from lookups ljstella 2025-03-26 11:01:05 -05:00
  • c1fc0fa980 couple of minor fixes 0xC0FFEEEE 2025-03-26 10:23:53 +00:00
  • 551fcc7a9d Updated TAs auto-ta-update-216 patel-bhavin 2025-03-26 06:58:14 +00:00
  • 7a9ebda18f delete guardrail Bhavin Patel 2025-03-25 17:38:14 -07:00
  • 428413f23b adding two bedrock detections Bhavin Patel 2025-03-25 17:02:16 -07:00
  • 708645d6c0 adding story file Bhavin Patel 2025-03-25 16:50:39 -07:00
  • 0f102fcfcd Merge pull request #3325 from splunk/output_normalization_o365 Bhavin Patel 2025-03-25 13:56:31 -07:00
  • 2f84140fda Merge branch 'develop' into sunnyside Michael Haag 2025-03-25 14:24:09 -06:00
  • 20cb4400dc Haag Story 3: Attack Analytics to the Rescue Michael Haag 2025-03-25 14:08:02 -06:00
  • 9adf22ec19 Merge branch 'develop' into ZDI-CAN-25373 Bhavin Patel 2025-03-25 12:18:54 -07:00
  • 63380103e5 udpate date format Bhavin Patel 2025-03-25 12:07:17 -07:00
  • 87eeec65a6 updating dates and verrsion Bhavin Patel 2025-03-25 11:21:38 -07:00