Commit Graph

  • 09f12546fb Merge branch 'develop' into output_normalization_o365 Bhavin Patel 2025-03-25 10:42:52 -07:00
  • 5768076812 Merge pull request #3420 from splunk/auto-ta-update-215 Bhavin Patel 2025-03-25 09:01:24 -07:00
  • 843ab78068 Revert linux TA ljstella 2025-03-25 09:46:21 -05:00
  • 5886f46ba5 Updated TAs patel-bhavin 2025-03-25 06:58:01 +00:00
  • dfd995e93f Merge branch 'develop' into rceattack Michael Haag 2025-03-24 19:25:46 -06:00
  • 5a74f935d0 Merge branch 'develop' into renamed_earth_erties Bhavin Patel 2025-03-24 15:05:13 -07:00
  • 49639f542f Merge branch 'develop' into medusa_ransomware Bhavin Patel 2025-03-24 15:04:52 -07:00
  • 4e537d286a Merge branch 'develop' into output_normalization_endpoint Bhavin Patel 2025-03-24 15:04:33 -07:00
  • b186cc921e Merge pull request #3409 from splunk/auto-ta-update-210 Bhavin Patel 2025-03-24 15:03:24 -07:00
  • 5bb6ac53b3 Empty commit Bhavin Patel 2025-03-24 14:41:21 -07:00
  • ec5cf468e3 The Haag Identity: Operation Seashell Blizzard 🌊❄️ Michael Haag 2025-03-24 14:18:40 -06:00
  • e6b1c4d102 The Haag Has Landed: VanHelsing's Revenge Michael Haag 2025-03-24 13:43:51 -06:00
  • 5b072d20cd Jesse Hunter Added Michael Haag 2025-03-24 12:46:57 -06:00
  • 4ae8de7c58 Clear and Present Haag-er Michael Haag 2025-03-24 12:31:32 -06:00
  • 1266567728 firewall_win_events Teoderick Contreras 2025-03-24 17:44:54 +01:00
  • e8d834a145 firewall_win_events Teoderick Contreras 2025-03-24 09:44:05 +01:00
  • 1fce62cf61 Updated TAs auto-ta-update-214 patel-bhavin 2025-03-24 06:57:45 +00:00
  • 48a39a10f3 Updated TAs auto-ta-update-213 patel-bhavin 2025-03-23 06:58:04 +00:00
  • e4b5f14b1a Updated TAs auto-ta-update-212 patel-bhavin 2025-03-22 06:58:14 +00:00
  • cacaa8ac07 yaml update Bhavin Patel 2025-03-21 11:58:12 -07:00
  • 30135a6a15 dd udpate Bhavin Patel 2025-03-21 11:56:19 -07:00
  • 20f1307ddf updating date Bhavin Patel 2025-03-21 11:54:35 -07:00
  • 912238a4a4 move to prodcution after testing Bhavin Patel 2025-03-21 11:54:03 -07:00
  • 1bf9bd3eb3 firewall_win_events Teoderick Contreras 2025-03-21 13:42:40 +01:00
  • 6940141605 Updated TAs auto-ta-update-211 patel-bhavin 2025-03-21 06:57:55 +00:00
  • 6b299cf58e Tagged analytics Michael Haag 2025-03-20 11:34:39 -06:00
  • 0bde0e2bf8 Merge branch 'develop' into cactus Michael Haag 2025-03-20 11:15:34 -06:00
  • 753cf9e3f5 Update linux_secure.yml Bhavin Patel 2025-03-20 09:42:10 -07:00
  • fe7b219c61 update Patrick Bareiss 2025-03-20 14:55:46 +01:00
  • 367edbd572 small improvement Patrick Bareiss 2025-03-20 14:41:33 +01:00
  • 6650542f5a bug fix Patrick Bareiss 2025-03-20 08:13:52 +01:00
  • d3f6dc856d Updated TAs patel-bhavin 2025-03-20 06:58:09 +00:00
  • feb0f44dad updates Michael Haag 2025-03-19 10:25:30 -06:00
  • e38e283413 Add new detection for process injection into commonly abused processes Michael Haag 2025-03-19 10:19:14 -06:00
  • 88553a39a4 Add new detection for process injection into commonly abused processes new-process-injection-detection Michael Haag 2025-03-19 10:15:16 -06:00
  • 5e8e6cbdf8 Update ransomware_extensions_lookup.yml Michael Haag 2025-03-19 09:57:31 -06:00
  • 02191943c2 renamed_earth_erties Teoderick Contreras 2025-03-19 16:07:11 +01:00
  • 99bf5f0189 bug fix Patrick Bareiss 2025-03-19 15:27:23 +01:00
  • 641c590df7 Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-03-19 15:10:33 +01:00
  • f243d22f61 Merge branch 'develop' into output_normalization_o365 P4T12ICK 2025-03-19 15:02:08 +01:00
  • fd793b2f5c Merge branch 'medusa_ransomware' of https://github.com/splunk/security_content into medusa_ransomware Teoderick Contreras 2025-03-19 10:26:17 +01:00
  • b555076b1d medusa_ransomware Teoderick Contreras 2025-03-19 10:26:05 +01:00
  • 4cf39dc734 Merge branch 'develop' into medusa_ransomware Br3akp0int 2025-03-19 10:20:24 +01:00
  • 79fb840e9f medusa_ransomware Teoderick Contreras 2025-03-19 10:03:30 +01:00
  • 177b5b8d6b Updated TAs auto-ta-update-209 patel-bhavin 2025-03-19 06:57:52 +00:00
  • 45838649b8 Merge pull request #3366 from splunk/remove_detections v5.2.0 Bhavin Patel 2025-03-18 16:14:36 -07:00
  • 011b33cb5b Merge branch 'remove_detections' of https://github.com/splunk/security_content into remove_detections Eric 2025-03-18 15:42:04 -07:00
  • 58aca7db99 Update the deprecation_info.csv file, manually generated with a version of contentctl that has not yet been merged or released in main branch. Eric 2025-03-18 15:41:21 -07:00
  • 59b9657e4a Merge branch 'develop' into remove_detections Bhavin Patel 2025-03-18 15:32:53 -07:00
  • 7ba4dc0a4d Merge pull request #3405 from splunk/risk_message Bhavin Patel 2025-03-18 15:22:18 -07:00
  • 2f128036c1 Merge branch 'develop' into risk_message Bhavin Patel 2025-03-18 15:08:01 -07:00
  • df44136390 Merge pull request #3287 from delgado-jacob/datasource_enrichment Bhavin Patel 2025-03-18 15:07:51 -07:00
  • ea3fa4daf6 updating search Bhavin Patel 2025-03-18 14:52:30 -07:00
  • 4b70500f07 Merge remote-tracking branch 'origin/datasource_enrichment' into datasource_enrichment delgado-jacob 2025-03-18 14:29:50 -07:00
  • 6488af7c57 Add Zeek TA, fix detection source list delgado-jacob 2025-03-18 14:29:30 -07:00
  • f096d77d6f Changed the names of some fields due to the use of both deprecated and removed to refer to content in different stages of removal Eric 2025-03-18 14:25:56 -07:00
  • b1d1ae90d9 rename deprecated directory to removed Eric 2025-03-18 14:14:37 -07:00
  • 0d2d727083 updating replace Bhavin Patel 2025-03-18 13:39:39 -07:00
  • ebe5db35ae Merge branch 'develop' into datasource_enrichment Bhavin Patel 2025-03-18 12:55:17 -07:00
  • ad55d26fe4 add 'status: removed' instead of 'status: deprecated' to removed detections Eric 2025-03-18 12:33:06 -07:00
  • 5e0d59e186 bump version in prep for release and so that deprecation stuff works properly. Eric 2025-03-18 12:07:47 -07:00
  • da5c9b9bbd fix separator_value field delgado-jacob 2025-03-18 11:37:35 -07:00
  • 86e7863669 updating file name Bhavin Patel 2025-03-18 11:16:32 -07:00
  • f07bb01e83 Haag's Last Shadow: The Cactus Ransomware Chronicles Michael Haag 2025-03-18 11:53:26 -06:00
  • 6a53b8c61b adding 2 splunk detections Bhavin Patel 2025-03-18 10:52:47 -07:00
  • 030b038245 Merge branch 'develop' into remove_detections Bhavin Patel 2025-03-18 10:33:41 -07:00
  • 505c176c62 Merge pull request #3403 from splunk/aws_output_improvements Bhavin Patel 2025-03-18 09:13:01 -07:00
  • 81e0801829 rerun CI Patrick Bareiss 2025-03-18 13:55:20 +01:00
  • 3122cbbc8b output improvements Patrick Bareiss 2025-03-18 12:56:30 +01:00
  • 33461bfe7c improvements Patrick Bareiss 2025-03-18 08:13:17 +01:00
  • 029788ae05 Merge branch 'develop' into output_normalization_o365 P4T12ICK 2025-03-18 08:09:11 +01:00
  • 8415182547 improvements Patrick Bareiss 2025-03-18 08:08:43 +01:00
  • 2d498dd311 Merge pull request #3401 from splunk/moar_5.2.0_fixes P4T12ICK 2025-03-18 08:03:18 +01:00
  • 583ff1c3e6 Updated TAs auto-ta-update-208 patel-bhavin 2025-03-18 06:57:39 +00:00
  • f04362d709 sort Bhavin Patel 2025-03-17 19:41:07 -07:00
  • 3819c6864d updating detections Bhavin Patel 2025-03-17 19:14:58 -07:00
  • ca86201823 adding 2 deprecated baselines Bhavin Patel 2025-03-17 18:28:42 -07:00
  • 4d4a1c6649 adding cross account stuff Bhavin Patel 2025-03-17 18:19:56 -07:00
  • 99a4b6fa4b adding missing baselines Bhavin Patel 2025-03-17 18:09:42 -07:00
  • c345f920ed adding gitkeep for empty folders Bhavin Patel 2025-03-17 18:04:26 -07:00
  • f672cb55c0 updating missing detections Bhavin Patel 2025-03-17 17:48:11 -07:00
  • 1ad53e770f Merge branch 'develop' into remove_detections Bhavin Patel 2025-03-17 17:29:49 -07:00
  • 218ee15dcd Merge pull request #3368 from nterl0k/nterl0k-T1552-sus-o365-searches Bhavin Patel 2025-03-17 17:29:33 -07:00
  • 53b1928512 normalize quotes delgado-jacob 2025-03-17 17:07:03 -07:00
  • bb134be861 Merge remote-tracking branch 'upstream/develop' into datasource_enrichment delgado-jacob 2025-03-17 17:04:08 -07:00
  • 276d45b485 Merge branch 'develop' into nterl0k-T1552-sus-o365-searches Bhavin Patel 2025-03-17 16:47:27 -07:00
  • 77dfe52b89 Update macro Bhavin Patel 2025-03-17 16:44:09 -07:00
  • 990b544271 Fixed spacing in improperly formatted YML file pyth0n1c 2025-03-17 16:41:52 -07:00
  • 15e336ed5c Merge branch 'develop' into auto-ta-update-168 auto-ta-update-168 Bhavin Patel 2025-03-17 16:06:51 -07:00
  • f262a36557 Merge pull request #3363 from splunk/deprecated_mapping_update Bhavin Patel 2025-03-17 16:06:01 -07:00
  • 5dcad4a631 remove deprecated_date and replacement_content if there is no content defined pyth0n1c 2025-03-17 15:35:21 -07:00
  • a24a2f0a1b updating next batch to 5.4.0 Bhavin Patel 2025-03-17 15:30:39 -07:00
  • 89cc1aca90 replacement stories Bhavin Patel 2025-03-17 15:12:39 -07:00
  • 7f3276c872 Merge branch 'develop' into remove_detections Bhavin Patel 2025-03-17 14:38:06 -07:00
  • 81a16341a3 Revert "version updates" Bhavin Patel 2025-03-17 14:28:53 -07:00
  • 71b3c2520f version Michael Haag 2025-03-17 13:37:03 -06:00
  • 58d7d6052c version updates Michael Haag 2025-03-17 13:25:49 -06:00
  • 17f0b8e5f3 attacker tools Michael Haag 2025-03-17 12:47:17 -06:00
  • 1b65d10a98 Merge pull request #3391 from splunk/auto-ta-update-204 Bhavin Patel 2025-03-17 11:45:00 -07:00
  • 1dca8f9f38 Merge branch 'develop' into deprecated_mapping_update Bhavin Patel 2025-03-17 11:43:14 -07:00