Commit Graph

  • 136df93521 Merge branch 'develop' into output_normalization_o365 Patrick Bareiss 2025-03-17 19:33:08 +01:00
  • cfaa0320a8 Merge branch 'develop' into auto-ta-update-204 Bhavin Patel 2025-03-17 11:29:39 -07:00
  • a0d8dff5c4 O365 output normalization Patrick Bareiss 2025-03-17 19:29:23 +01:00
  • 3b8c44ca28 PHP-CGI RCE Attack on Japanese Organizations Michael Haag 2025-03-17 12:28:10 -06:00
  • a227cf81b0 Merge pull request #3371 from splunk/systembc Bhavin Patel 2025-03-17 11:25:10 -07:00
  • 1b845ba176 Merge branch 'develop' into systembc Bhavin Patel 2025-03-17 10:27:20 -07:00
  • 2d18ac24c1 Merge pull request #3399 from splunk/5.2.0_fixes Bhavin Patel 2025-03-17 10:25:29 -07:00
  • b3a3caecca updating for manual test Bhavin Patel 2025-03-17 09:53:18 -07:00
  • 551fc0fcfc Merge pull request #3396 from splunk/data_source_validation_improvements Bhavin Patel 2025-03-17 08:55:57 -07:00
  • 850a172af4 bug fix Patrick Bareiss 2025-03-17 13:02:18 +01:00
  • 13f692c052 version bump Patrick Bareiss 2025-03-17 12:28:56 +01:00
  • 1120cea9a0 Improve data source validation Patrick Bareiss 2025-03-17 12:24:08 +01:00
  • 506b8aa69c Updated TAs auto-ta-update-207 patel-bhavin 2025-03-17 06:58:12 +00:00
  • f101e5e521 Updated TAs auto-ta-update-206 patel-bhavin 2025-03-16 06:57:58 +00:00
  • 781f8ff2fa Updated TAs auto-ta-update-205 patel-bhavin 2025-03-15 06:57:59 +00:00
  • e49f84d06d fixes Bhavin Patel 2025-03-14 09:47:06 -07:00
  • 18eded0a7c bump version Patrick Bareiss 2025-03-14 14:12:58 +01:00
  • a7f5db9f55 Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-03-14 14:05:39 +01:00
  • 1c9debe9a6 update versions Patrick Bareiss 2025-03-14 13:47:44 +01:00
  • ca245715d4 bug fix Patrick Bareiss 2025-03-14 11:55:15 +01:00
  • 456625c7c4 medusa_ransomware Teoderick Contreras 2025-03-14 11:29:56 +01:00
  • 09d1d1c02f Updated TAs patel-bhavin 2025-03-14 06:57:50 +00:00
  • bebfe2e13e updating lookups from latest mapping Bhavin Patel 2025-03-13 18:12:45 -07:00
  • 97395878e9 updating text Bhavin Patel 2025-03-13 17:42:27 -07:00
  • 6c82ebbb87 Merge pull request #3315 from splunk/output_normalization_azure_ad Bhavin Patel 2025-03-13 13:16:42 -07:00
  • 34dc8eb775 Merge branch 'develop' into output_normalization_azure_ad Bhavin Patel 2025-03-13 12:08:26 -07:00
  • b99d558bb6 Merge pull request #3301 from splunk/output_normalization_aws Bhavin Patel 2025-03-13 12:08:13 -07:00
  • 9b112cabc6 Merge branch 'develop' into output_normalization_aws Bhavin Patel 2025-03-13 11:10:04 -07:00
  • ff980c1b51 Merge branch 'develop' into output_normalization_azure_ad P4T12ICK 2025-03-13 15:24:16 +01:00
  • 9c3fd5dcee Merge pull request #3314 from splunk/headless_bee Nasreddine Bencherchali 2025-03-13 14:53:20 +01:00
  • 47fdfe1fa7 Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-03-13 14:31:54 +01:00
  • 00e78ab666 output normalisation Patrick Bareiss 2025-03-13 14:31:23 +01:00
  • e21fe10f83 Update and rename windows_process_file_path_in_programdata.yml to windows_process_execution_from_programdata.yml Nasreddine Bencherchali 2025-03-13 14:20:17 +01:00
  • 348799a754 Merge branch 'develop' into output_normalization_azure_ad P4T12ICK 2025-03-13 11:53:09 +01:00
  • abf3c5f1d9 improvements Patrick Bareiss 2025-03-13 11:49:06 +01:00
  • 603fe53248 headless_bee Teoderick Contreras 2025-03-13 10:12:03 +01:00
  • 67dff5120a Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-03-13 09:22:06 +01:00
  • 92706b35d0 Updated TAs auto-ta-update-203 patel-bhavin 2025-03-13 06:57:55 +00:00
  • 5df06bdbcf remove programdata from path Bhavin Patel 2025-03-12 16:21:38 -07:00
  • 5e02c6b38c updating for nexus Bhavin Patel 2025-03-12 14:25:10 -07:00
  • f8cd6cf14e Merge branch 'develop' into headless_bee Bhavin Patel 2025-03-12 11:07:41 -07:00
  • 5e5d72a4bb Merge pull request #3316 from nterl0k/nterl0k-t1053-suspicious-task-lookups Bhavin Patel 2025-03-12 11:06:48 -07:00
  • dad3892103 Merge branch 'develop' into output_normalization_azure_ad Bhavin Patel 2025-03-12 09:54:45 -07:00
  • 6df91909ba output normalization Patrick Bareiss 2025-03-12 14:17:16 +01:00
  • 2332b3cc9a Merge branch 'splunk:develop' into nterl0k-T1552-sus-o365-searches Steven Dick 2025-03-12 08:00:44 -04:00
  • 2445b44357 Update o365_suspect_search_terms_regex.yml Steven Dick 2025-03-12 07:32:14 -04:00
  • 4095ffb916 output normalization Patrick Bareiss 2025-03-12 09:38:21 +01:00
  • 0fc2b9e139 Updated TAs auto-ta-update-202 patel-bhavin 2025-03-12 06:57:58 +00:00
  • 5060b8cefd Update windows_event_log_security_4700.yml Steven Dick 2025-03-11 22:59:08 -04:00
  • 8295f6139b Add files via upload Steven Dick 2025-03-11 22:56:06 -04:00
  • 9b794adc7b Merge branch 'splunk:develop' into nterl0k-t1053-suspicious-task-lookups Steven Dick 2025-03-11 21:59:12 -04:00
  • 726dd93059 adding a reason for empty detections Bhavin Patel 2025-03-11 17:20:32 -07:00
  • 11322825a6 Merge pull request #3336 from 0xC0FFEEEE/susmailrule Bhavin Patel 2025-03-11 14:41:45 -07:00
  • 93b714ec08 Merge branch 'develop' into nterl0k-t1053-suspicious-task-lookups Bhavin Patel 2025-03-11 13:26:31 -07:00
  • 60ba75f2a8 Merge branch 'develop' into nterl0k-T1552-sus-o365-searches Bhavin Patel 2025-03-11 13:25:48 -07:00
  • d5feba1042 drilldown update- minor Bhavin Patel 2025-03-11 13:22:04 -07:00
  • e1b41cc05a Merge branch 'develop' into susmailrule Bhavin Patel 2025-03-11 13:19:20 -07:00
  • a1b3940ffc Merge branch 'develop' into deprecated_mapping_update Bhavin Patel 2025-03-11 11:03:29 -07:00
  • f202520e17 output normalization endpoint Patrick Bareiss 2025-03-11 15:24:12 +01:00
  • 1f3447817f Merge branch 'develop' into output_normalization_aws P4T12ICK 2025-03-11 12:01:45 +01:00
  • 91840b18d8 Updated TAs auto-ta-update-201 patel-bhavin 2025-03-11 06:57:47 +00:00
  • c4ac9a1374 Updated TAs auto-ta-update-200 patel-bhavin 2025-03-10 06:57:40 +00:00
  • 86181435ad Updated TAs auto-ta-update-199 patel-bhavin 2025-03-09 06:57:42 +00:00
  • 2b76256ab8 Updated TAs auto-ta-update-198 patel-bhavin 2025-03-08 06:58:06 +00:00
  • 1d1d0dbd38 Merge branch 'develop' into headless_bee Bhavin Patel 2025-03-07 11:00:15 -08:00
  • 9b15a7b61a Merge pull request #3376 from 0xC0FFEEEE/yourelinuxsilly Bhavin Patel 2025-03-07 10:59:55 -08:00
  • 6531b31f7f Merge branch 'develop' into deprecated_mapping_update Bhavin Patel 2025-03-07 09:34:19 -08:00
  • 6ff8fe0fb3 Merge branch 'develop' into susmailrule Bhavin Patel 2025-03-07 09:26:12 -08:00
  • b3e768bf9e Merge branch 'develop' into yourelinuxsilly Bhavin Patel 2025-03-07 09:24:56 -08:00
  • d67548546b Merge pull request #3383 from splunk/manual-ta-update-197 Bhavin Patel 2025-03-07 09:24:43 -08:00
  • 817612a7b4 Merge branch 'develop' into headless_bee Bhavin Patel 2025-03-07 09:14:25 -08:00
  • 21bbda556f Merge branch 'develop' into yourelinuxsilly Bhavin Patel 2025-03-07 09:12:52 -08:00
  • bd54cf4d58 updating file name of the app Bhavin Patel 2025-03-07 09:00:38 -08:00
  • cea71371d7 Cisco AppDynamics v3.1.0 ljstella 2025-03-07 08:54:05 -06:00
  • 7206bb075f Updated TAs auto-ta-update-197 patel-bhavin 2025-03-07 06:57:57 +00:00
  • d86e766720 updated with missing content pyth0n1c 2025-03-06 13:16:16 -08:00
  • fd6227377b Updated TAs auto-ta-update-196 patel-bhavin 2025-03-06 06:58:16 +00:00
  • 78cc0c0f17 updated deprecation mapping again pyth0n1c 2025-03-05 14:24:11 -08:00
  • ee813d6b39 output normalisation Patrick Bareiss 2025-03-05 14:25:32 +01:00
  • bc1f33a6cf Updated TAs auto-ta-update-195 patel-bhavin 2025-03-05 06:58:13 +00:00
  • 4f4f87af9f Add baselines, stories, and investigations to deprecation yml. pyth0n1c 2025-03-04 13:42:37 -08:00
  • b2c095c66a Merge branch 'develop' into remove_detections Bhavin Patel 2025-03-04 12:45:26 -08:00
  • 8a2909b8f0 Merge pull request #3375 from shilch/patch-1 Bhavin Patel 2025-03-04 12:44:48 -08:00
  • b09805c250 Merge branch 'develop' into patch-1 Bhavin Patel 2025-03-04 10:35:03 -08:00
  • ae64f202ed Merge pull request #3332 from splunk/haagsqldb Bhavin Patel 2025-03-04 10:34:33 -08:00
  • 6033082600 Merge branch 'develop' into haagsqldb Bhavin Patel 2025-03-04 10:12:52 -08:00
  • 42fbaba04e Update windows_sqlservr_spawning_shell.yml Michael Haag 2025-03-04 09:57:53 -07:00
  • 3dbc72f978 Merge pull request #3378 from splunk/v5.1.1 v5.1.1 Bhavin Patel 2025-03-04 08:49:58 -08:00
  • 62de72be59 Updated TAs auto-ta-update-194 patel-bhavin 2025-03-04 06:58:11 +00:00
  • 827a80b69d datasource Michael Haag 2025-03-03 20:30:50 -07:00
  • 6e84f4cab9 updating lookup research-bot 2025-03-03 16:20:52 -08:00
  • 46db370f8b increment version, update date 0xC0FFEEEE 2025-03-03 22:33:47 +00:00
  • 228a01acc1 another one 0xC0FFEEEE 2025-03-03 16:27:00 +00:00
  • 64de1e5953 Don't trigger on linux os 0xC0FFEEEE 2025-03-03 15:30:23 +00:00
  • b51c4d1ad4 Merge branch 'develop' into output_normalization_endpoint Patrick Bareiss 2025-03-03 15:45:04 +01:00
  • 5089a7fe5f output normalization endpoint Patrick Bareiss 2025-03-03 15:43:03 +01:00
  • d87b3f6a48 systembc Teoderick Contreras 2025-03-03 15:10:33 +01:00
  • c8087bc330 systembc Teoderick Contreras 2025-03-03 14:12:55 +01:00
  • ce6d61a75b Remove trailing tab in o365_email_password_and_payroll_compromise_behavior.yml Simon 2025-03-03 13:35:26 +01:00
  • da8a7a2816 Merge branch 'develop' into output_normalization_aws P4T12ICK 2025-03-03 08:17:01 +01:00