Commit Graph

  • c9ef436749 Merge pull request #3362 from splunk/auto_update_187 Bhavin Patel 2025-02-25 08:14:06 -08:00
  • d6f58a15f5 Merge branch 'develop' into auto_update_187 Lou Stella 2025-02-25 08:45:48 -06:00
  • e060e96e58 [chore] update AWS TA -> 7.9.1 ljstella 2025-02-25 08:44:06 -06:00
  • a1e4783098 Merge pull request #3353 from splunk/TA_Update_182 Lou Stella 2025-02-25 08:40:59 -06:00
  • 62263c00a9 Merge branch 'develop' into haagsqldb Michael Haag 2025-02-25 07:32:28 -07:00
  • fb466c980d Merge branch 'develop' into TA_Update_182 Lou Stella 2025-02-25 08:15:22 -06:00
  • 0f0ec93d2f improved detections Patrick Bareiss 2025-02-25 08:53:27 +01:00
  • a7d52ba898 Updated TAs auto-ta-update-187 patel-bhavin 2025-02-25 06:57:56 +00:00
  • c1e4f22ec8 Merge branch 'develop' into deprecated_mapping pyth0n1c 2025-02-24 16:54:04 -08:00
  • 78071f67fa Merge branch 'develop' into github_detections_improvement Bhavin Patel 2025-02-24 15:30:58 -08:00
  • 80014e7715 Merge branch 'develop' into add_Data_source Bhavin Patel 2025-02-24 13:30:23 -08:00
  • aea54e0313 Merge branch 'develop' into auto-ta-update-186 auto-ta-update-186 Lou Stella 2025-02-24 15:30:11 -06:00
  • 23838ed2a6 Merge pull request #3358 from splunk/remove_accidental_temp_field Bhavin Patel 2025-02-24 13:04:56 -08:00
  • 06b4947c33 Merge branch 'develop' into installutil_improvement Bhavin Patel 2025-02-24 13:02:47 -08:00
  • 9db1123e7e updating version research-bot 2025-02-24 13:02:09 -08:00
  • 5a2a0d83bc Updated TAs patel-bhavin 2025-02-24 17:55:28 +00:00
  • a856da57c2 auditd_detection_updates Teoderick Contreras 2025-02-24 12:37:33 +01:00
  • 3b5dd65b8c auditd_detection_updates Teoderick Contreras 2025-02-24 12:20:26 +01:00
  • 6fd0a46808 headless_bee Teoderick Contreras 2025-02-24 12:15:57 +01:00
  • 5c4abbc5b9 auditd_detection_updates Teoderick Contreras 2025-02-24 12:13:01 +01:00
  • 1f3fb62796 headless_bee Teoderick Contreras 2025-02-24 12:08:52 +01:00
  • 7939d2fa83 headless_bee Teoderick Contreras 2025-02-24 11:52:22 +01:00
  • 7b06780bfa nexus_update nexus_update Teoderick Contreras 2025-02-24 11:09:58 +01:00
  • faf7f6115f nexus_update Teoderick Contreras 2025-02-24 11:08:05 +01:00
  • 02ce36a21f remove field that does not exist from the by clause pyth0n1c 2025-02-21 14:22:54 -08:00
  • a7c93cbe1c updating print data research-bot 2025-02-21 13:48:23 -08:00
  • a11c9b82b3 udpating asr fields research-bot 2025-02-21 13:41:26 -08:00
  • 7689f47751 ntlm research-bot 2025-02-21 13:35:44 -08:00
  • 56c3088630 ntlm examples research-bot 2025-02-21 13:32:38 -08:00
  • 557870fa34 gws research-bot 2025-02-21 13:29:48 -08:00
  • 0b0ab0d6fd updating azure research-bot 2025-02-21 13:26:46 -08:00
  • 0bf1bac918 updating example research-bot 2025-02-21 13:21:47 -08:00
  • 56f874234d updating data source for google workspace research-bot 2025-02-21 12:52:43 -08:00
  • c5eb9374a3 adding nltm objects research-bot 2025-02-21 12:49:37 -08:00
  • 23c3f98676 sysmon research-bot 2025-02-21 12:44:26 -08:00
  • a53b9a662a udpating data sources research-bot 2025-02-21 12:37:33 -08:00
  • 22a54f95d9 updating o365 stuff research-bot 2025-02-21 12:09:22 -08:00
  • ae2fd6b9b8 updating detections research-bot 2025-02-21 11:51:47 -08:00
  • 04c2812a7d updating windows data sources research-bot 2025-02-21 11:41:15 -08:00
  • a64084d1fd fix more typo'd data source names fix_bad_data_source_names pyth0n1c 2025-02-21 11:13:24 -08:00
  • 08b30b73d8 updating CIm title research-bot 2025-02-21 10:33:18 -08:00
  • 4e171701f0 updating CIM research-bot 2025-02-21 10:32:42 -08:00
  • b7596a632e updating message research-bot 2025-02-21 10:08:09 -08:00
  • 28b0a3160e adding a data source object for cim research-bot 2025-02-21 09:57:06 -08:00
  • 5d4a9464e1 bring CIM app up to date research-bot 2025-02-21 09:42:50 -08:00
  • 6c5688364d updating the search for better output research-bot 2025-02-21 08:57:46 -08:00
  • 31937902ee Merge branch 'develop' into haagsqldb Michael Haag 2025-02-21 08:41:11 -07:00
  • cbbb32e351 Merge branch 'develop' into TA_Update_182 Lou Stella 2025-02-21 09:18:03 -06:00
  • f05c6278a2 headless_bee Teoderick Contreras 2025-02-21 14:04:06 +01:00
  • 265cd83413 headless_bee Teoderick Contreras 2025-02-21 13:26:44 +01:00
  • 6869ca91e6 Merge branch 'develop' into auditd_detection_updates Nasreddine Bencherchali 2025-02-21 11:02:45 +01:00
  • 9614dcd292 Update linux_auditd_syscall.yml Br3akp0int 2025-02-21 10:31:56 +01:00
  • b1032d7ff7 Update linux_auditd_service_stop.yml Br3akp0int 2025-02-21 10:31:34 +01:00
  • f9accd9748 Update linux_auditd_proctitle.yml Br3akp0int 2025-02-21 10:31:15 +01:00
  • 5f935a671b Update linux_auditd_path.yml Br3akp0int 2025-02-21 10:30:50 +01:00
  • 649cc56451 Update linux_auditd_execve.yml Br3akp0int 2025-02-21 10:30:25 +01:00
  • b284853bfe Update linux_auditd_add_user.yml Br3akp0int 2025-02-21 10:30:05 +01:00
  • 26b65f5da3 Merge branch 'auditd_sourcetype_update' of https://github.com/splunk/security_content into auditd_detection_updates Teoderick Contreras 2025-02-21 10:26:50 +01:00
  • 9697f1e757 auditd_detection_updates Teoderick Contreras 2025-02-21 10:00:39 +01:00
  • 77cbb835ce Merge branch 'develop' into github_detections_improvement Patrick Bareiss 2025-02-21 09:37:10 +01:00
  • 6baa8d078a Update detections/endpoint/linux_auditd_osquery_service_stop.yml Br3akp0int 2025-02-21 09:36:35 +01:00
  • 28f438438a Update detections/endpoint/linux_auditd_edit_cron_table_parameter.yml Br3akp0int 2025-02-21 09:36:28 +01:00
  • 0c12b68458 bug fix Patrick Bareiss 2025-02-21 09:36:24 +01:00
  • 64fcd2a6d4 Update detections/endpoint/linux_auditd_change_file_owner_to_root.yml Br3akp0int 2025-02-21 09:36:11 +01:00
  • 6ae3bcfc42 Update data_sources/linux_auditd_add_user.yml Br3akp0int 2025-02-21 09:35:53 +01:00
  • 908ae96472 added threat objects Patrick Bareiss 2025-02-21 09:30:26 +01:00
  • 41e69bd182 Merge branch 'develop' into github_detections_improvement Patrick Bareiss 2025-02-21 09:24:24 +01:00
  • 3c9145b8dd bug fixes Patrick Bareiss 2025-02-21 09:21:33 +01:00
  • 857cb0e5a3 output normalization Patrick Bareiss 2025-02-21 09:14:44 +01:00
  • 5278423978 Updated TAs auto-ta-update-183 patel-bhavin 2025-02-21 06:57:54 +00:00
  • c795cda6af Merge pull request #3337 from splunk/cisco_ai_defense v5.1.0 Bhavin Patel 2025-02-20 15:34:10 -08:00
  • ec007d4a28 Merge branch 'develop' into cisco_ai_defense pyth0n1c 2025-02-20 15:19:04 -08:00
  • 0eb683084c Merge pull request #3328 from splunk/8_million_requests pyth0n1c 2025-02-20 15:18:45 -08:00
  • ebdd770afd udpating name research-bot 2025-02-20 15:08:25 -08:00
  • d25d712781 updating detection research-bot 2025-02-20 15:05:58 -08:00
  • 49fa1c1900 Merge branch 'develop' into cisco_ai_defense Bhavin Patel 2025-02-20 15:02:29 -08:00
  • d77736f7e4 Update detect_web_access_to_decommissioned_s3_bucket.yml pyth0n1c 2025-02-20 14:57:35 -08:00
  • 7104c5c84b Update detect_dns_query_to_decommissioned_s3_bucket.yml pyth0n1c 2025-02-20 14:55:30 -08:00
  • 9428a91911 Merge branch 'develop' into 8_million_requests Jose Enrique Hernandez 2025-02-20 17:53:03 -05:00
  • aba0bdc4d3 updating detection research-bot 2025-02-20 14:47:37 -08:00
  • 63facf9e78 updating detection research-bot 2025-02-20 14:47:35 -08:00
  • 4e741af158 Merge branch 'develop' into auto-ta-update-168 Lou Stella 2025-02-20 16:42:24 -06:00
  • af5ccc4df4 Merge branch 'develop' into TA_Update_182 Lou Stella 2025-02-20 16:35:41 -06:00
  • 36f3b6eb35 shipping as experimental Jose Hernandez 2025-02-20 17:11:38 -05:00
  • 441ba47f3d fixing merge conflicts Jose Hernandez 2025-02-20 17:06:33 -05:00
  • 808a674768 Merge pull request #3350 from splunk/integration_fixes Bhavin Patel 2025-02-20 10:19:03 -08:00
  • 74c102b8a0 Update windows_service_created_with_suspicious_service_name.yml Bhavin Patel 2025-02-20 10:02:51 -08:00
  • 43b9a93839 user_id Bhavin Patel 2025-02-20 09:58:57 -08:00
  • 2eb0c4698a revert date Bhavin Patel 2025-02-20 09:50:12 -08:00
  • 1eb8731869 Update detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml Br3akp0int 2025-02-20 18:20:23 +01:00
  • 2e9bc86983 Update detections/endpoint/windows_svchost_exe_parent_process_anomaly.yml Br3akp0int 2025-02-20 18:20:13 +01:00
  • 26cb0921d4 Update detections/endpoint/windows_anonymous_pipe_activity.yml Br3akp0int 2025-02-20 18:19:42 +01:00
  • 4e6b095129 Update detections/endpoint/executables_or_script_creation_in_temp_path.yml Br3akp0int 2025-02-20 18:19:32 +01:00
  • 8e3d03cc42 auditd_detection_updates Teoderick Contreras 2025-02-20 18:07:30 +01:00
  • 347caf1538 remove empty coloums research-bot 2025-02-20 09:04:20 -08:00
  • ecf4948604 manual test research-bot 2025-02-20 08:52:07 -08:00
  • bfd2b1c050 updating to user research-bot 2025-02-20 08:47:38 -08:00
  • ff28372b71 auditd_detection_updates Teoderick Contreras 2025-02-20 17:43:44 +01:00
  • baaab64bce auditd_detection_updates Teoderick Contreras 2025-02-20 17:39:09 +01:00
  • bbf63efcb7 Changed to Hunting Michael Haag 2025-02-20 09:29:44 -07:00