Commit Graph

  • 3e8a43b4a3 Input playbook for the new Talos app Tapish Jain 2025-01-17 13:42:21 -08:00
  • 9998dc9cbd Update windows_detect_usbstor_registry_key_modification.yml Steven Dick 2025-01-17 16:42:53 -05:00
  • 0e32902df2 Input playbook for the new Talos app Tapish Jain 2025-01-17 13:41:30 -08:00
  • 4279cc47db Update and rename windows_detect_wpdbbusenum_registry_key_modification.yml to windows_detect_wpdbusenum_registry_key_modification.yml Steven Dick 2025-01-17 16:38:20 -05:00
  • d51e7e13dc Update windows_detect_wpdbbusenum_registry_key_modification.yml Steven Dick 2025-01-17 16:15:08 -05:00
  • d800ce4202 Update windows_detect_wpdbbusenum_registry_key_modification.yml Steven Dick 2025-01-17 16:09:20 -05:00
  • e38d6e01ba Update windows_detect_usbstor_registry_key_modification.yml Steven Dick 2025-01-17 16:08:59 -05:00
  • 475b3dd5bc Update windows_detect_wpdbbusenum_registry_key_modification.yml Steven Dick 2025-01-17 16:03:36 -05:00
  • 9f6d5665f3 Update windows_detect_usbstor_registry_key_modification.yml Steven Dick 2025-01-17 16:03:04 -05:00
  • 7fb44fb0b9 Add files via upload Steven Dick 2025-01-17 15:53:38 -05:00
  • cb90b85031 Merge branch 'develop' into crypto_campaign Bhavin Patel 2025-01-17 11:49:41 -08:00
  • 0d36a4ed1a update 048839e4-1eaa-43ff-8a22-86d17f6fcc13 Nasreddine Bencherchali 2025-01-17 18:45:32 +01:00
  • be154a1bdc update 827409a1-5393-4d8d-8da4-bbb297c262a7 Nasreddine Bencherchali 2025-01-17 15:45:43 +01:00
  • 71efc6ad16 change Patrick Bareiss 2025-01-17 13:19:20 +01:00
  • 28d73383bc change Patrick Bareiss 2025-01-17 13:19:02 +01:00
  • c03a2dc0b4 rename detection Patrick Bareiss 2025-01-17 13:17:26 +01:00
  • c1bee7dc58 update additional analytics Nasreddine Bencherchali 2025-01-17 12:57:09 +01:00
  • 4476cd6bfa add rename to auditd analytics Nasreddine Bencherchali 2025-01-17 12:56:57 +01:00
  • 421b11d748 bug fix Patrick Bareiss 2025-01-17 12:13:49 +01:00
  • 526468af81 new detection Patrick Bareiss 2025-01-17 12:11:50 +01:00
  • 647f8043f7 new detection Patrick Bareiss 2025-01-17 12:07:23 +01:00
  • bdf5fb6948 bug fix Patrick Bareiss 2025-01-17 11:26:31 +01:00
  • c1c45958e3 new detections Patrick Bareiss 2025-01-17 11:23:36 +01:00
  • 5552843b31 bug fix Patrick Bareiss 2025-01-17 10:24:43 +01:00
  • ce6a457bfc new github detections Patrick Bareiss 2025-01-17 10:21:55 +01:00
  • aceab149b8 improvements to github detections Patrick Bareiss 2025-01-17 10:03:05 +01:00
  • bfc0f966a2 nexus tccontre 2025-01-17 09:40:07 +01:00
  • 566fcfb5b5 nexus tccontre 2025-01-17 09:33:49 +01:00
  • b49a76db7f fix baseline which referenced lookups that do not exist pyth0n1c 2025-01-16 15:23:47 -08:00
  • 9fea5dc874 rename some analytics Nasreddine Bencherchali 2025-01-16 23:04:11 +01:00
  • aa6a3f340a move to deprecated Nasreddine Bencherchali 2025-01-16 23:03:54 +01:00
  • e5269905d9 Merge pull request #3269 from splunk/strict_yml_from_rba Lou Stella 2025-01-16 12:49:33 -06:00
  • 5b6f8ea262 Fix more errors with missing lookups, baselines, and detections pyth0n1c 2025-01-16 10:45:46 -08:00
  • 8894f2dbfc Merge branch 'develop' into rba_migration Lou Stella 2025-01-16 12:14:04 -06:00
  • 8ce3783394 Update windows_exchange_autodiscover_ssrf_abuse.yml Michael Haag 2025-01-16 10:02:05 -07:00
  • feaaae4a32 improvements Patrick Bareiss 2025-01-16 17:01:27 +01:00
  • 1e203abed0 new detections Patrick Bareiss 2025-01-16 16:19:58 +01:00
  • f488218d56 bug fix Patrick Bareiss 2025-01-16 15:39:18 +01:00
  • ae487630d4 bug fix Patrick Bareiss 2025-01-16 15:37:39 +01:00
  • 55aefb3c60 new github detections Patrick Bareiss 2025-01-16 15:35:48 +01:00
  • d2114c2167 bug fix Patrick Bareiss 2025-01-16 10:54:17 +01:00
  • 56d1b1e555 Merge branch 'develop' into github_detections_improvement Patrick Bareiss 2025-01-16 10:51:10 +01:00
  • 8ed3d573f5 new github detections Patrick Bareiss 2025-01-16 10:36:09 +01:00
  • 863eb07dc9 Merge pull request #3281 from splunk/remove_auto_update uba Jose Enrique Hernandez 2025-01-15 19:26:05 -05:00
  • 88926b1620 removed auto update Jose Enrique Hernandez 2025-01-15 19:24:23 -05:00
  • ef2ac2a45f Removal of fields from new detections ljstella 2025-01-15 15:17:50 -06:00
  • 9ee2e1de7d Branch was auto-updated. Bhavin Patel 2025-01-15 13:05:43 -08:00
  • 70861d2d57 More migrations: AWS, Azure, O365 ljstella 2025-01-15 15:05:18 -06:00
  • c0de38c353 Update o365_email_transport_rule_changed.yml Steven Dick 2025-01-15 15:39:31 -05:00
  • 61dcaf1d29 Update o365_email_transport_rule_changed.yml Steven Dick 2025-01-15 15:36:39 -05:00
  • 46bc87e818 Add files via upload Steven Dick 2025-01-15 15:24:16 -05:00
  • 1d086b4a2b Merge branch 'rba_migration' into strict_yml_from_rba Lou Stella 2025-01-15 14:16:35 -06:00
  • 9c5b3aadd0 Merge branch 'develop' into rba_migration Lou Stella 2025-01-15 14:12:36 -06:00
  • a7d061c5a1 Add ASL AWS CloudTrail data source Patrick Bareiss 2025-01-14 16:47:25 +01:00
  • 2b637650a8 minor udpates to yaml research-bot 2025-01-10 11:46:35 -08:00
  • 633655df4c improvements Patrick Bareiss 2025-01-09 18:19:18 +01:00
  • 37ec540937 change Patrick Bareiss 2025-01-09 14:47:11 +01:00
  • 8e0b643626 new detections Patrick Bareiss 2025-01-09 14:42:38 +01:00
  • 22e401ab90 new detection Patrick Bareiss 2025-01-08 17:05:24 +01:00
  • e937232ec9 bug fix Patrick Bareiss 2025-01-08 14:32:56 +01:00
  • 378645172f new detection Patrick Bareiss 2025-01-08 13:53:03 +01:00
  • 2f0c371d9b new detection Patrick Bareiss 2024-12-17 15:22:03 +01:00
  • 253c463df1 bug fix Patrick Bareiss 2024-12-17 10:22:59 +01:00
  • bde1c9da1d new detection Patrick Bareiss 2024-12-17 10:18:58 +01:00
  • d7b526d175 new detection Patrick Bareiss 2024-12-16 14:46:35 +01:00
  • 009ca3bc7b bug fix Patrick Bareiss 2024-12-16 11:29:25 +01:00
  • b3a7ff347a bug fix Patrick Bareiss 2024-12-16 11:25:28 +01:00
  • d3b40ac4ec bug fix Patrick Bareiss 2024-12-16 11:05:05 +01:00
  • d3e1be0abe updates Patrick Bareiss 2024-12-16 10:55:12 +01:00
  • 7d061fa22b bug fix improvements Patrick Bareiss 2024-12-16 09:31:49 +01:00
  • 39f28ef0da bug fix Patrick Bareiss 2024-12-12 17:00:27 +01:00
  • a304f4134d bug fix Patrick Bareiss 2024-12-12 16:58:43 +01:00
  • 5ae468d627 bug fix Patrick Bareiss 2024-12-12 16:53:50 +01:00
  • a6390447f0 bug fix Patrick Bareiss 2024-12-12 16:48:43 +01:00
  • 8921fd95f1 bug fix Patrick Bareiss 2024-12-12 16:46:10 +01:00
  • ebca30164d new asl aws detections Patrick Bareiss 2024-12-12 16:42:52 +01:00
  • 22c3c2dc08 bug fixes Patrick Bareiss 2024-12-12 10:28:41 +01:00
  • f727062aa9 bug fixes Patrick Bareiss 2024-12-12 10:24:51 +01:00
  • 56074f2ea4 Improved ASL AWS detections Patrick Bareiss 2024-12-12 10:17:35 +01:00
  • 437368d3ab updating data sources research-bot 2025-01-13 12:18:01 -08:00
  • e013fd8c76 Update o365_service_principal_privilege_escalation.yml Bhavin Patel 2025-01-13 10:36:45 -08:00
  • 37f2760df3 reverting macro change dluxtron 2025-01-08 15:11:19 +10:00
  • e06b07f793 udpating SPL research-bot 2025-01-07 13:14:24 -08:00
  • dbc17805f3 updating macro research-bot 2025-01-07 12:15:23 -08:00
  • dc1672d901 updating risk research-bot 2025-01-07 12:14:10 -08:00
  • 71e6dd7c7a fixing up yamls for testing research-bot 2025-01-07 11:58:59 -08:00
  • 0282aff10b fixing syntax & updating macro dluxtron 2025-01-07 16:51:06 +10:00
  • 5ba40b34df Adding intune detections & updating dataset links dluxtron 2025-01-07 15:47:35 +10:00
  • 4761a49d0c Uploading new detections dluxtron 2025-01-06 16:35:41 +10:00
  • a0a7dc4efd Uploading new detections dluxtron 2025-01-06 16:19:32 +10:00
  • 0d3b963a4d Update o365_multiple_os_vendors_authenticating_from_user.yml Steven Dick 2025-01-15 14:17:36 -05:00
  • db9a69ddb0 Update and rename o365_excessive_os_vendors_authenticating_from_user.yml to o365_multiple_os_vendors_authenticating_from_user.yml Steven Dick 2025-01-15 14:14:09 -05:00
  • 7186803473 Update o365_excessive_os_vendors_authenticating_from_user.yml Steven Dick 2025-01-15 14:00:39 -05:00
  • fb41db923a Update o365_sharepoint_suspicious_search_behavior.yml Steven Dick 2025-01-15 13:55:06 -05:00
  • 75549d2e89 change dataset name Patrick Bareiss 2025-01-15 16:34:58 +01:00
  • 616f10df02 change dataset name Patrick Bareiss 2025-01-15 16:29:22 +01:00
  • 5530d76d68 improvements Patrick Bareiss 2025-01-15 16:10:20 +01:00
  • 9d2be764a3 improvements Patrick Bareiss 2025-01-15 16:03:42 +01:00
  • c91f76b9ab Update windows_registry_entries_exported_via_reg.yml Nasreddine Bencherchali 2025-01-15 15:55:51 +01:00
  • 082368e86d update reg analytics Nasreddine Bencherchali 2025-01-15 15:55:16 +01:00