Commit Graph

  • 2917e24177 bug fix Patrick Bareiss 2025-01-15 13:23:49 +01:00
  • e6dae320c3 github detections Patrick Bareiss 2025-01-15 11:40:53 +01:00
  • a31b2d4ee1 Improve detection Patrick Bareiss 2025-01-15 11:39:58 +01:00
  • 2018be8947 bug fix Patrick Bareiss 2025-01-15 11:07:35 +01:00
  • b7298867d3 Deprecated old GItHub detections Patrick Bareiss 2025-01-15 11:01:38 +01:00
  • 701a621d3c Deprecated old GItHub detections Patrick Bareiss 2025-01-15 10:58:13 +01:00
  • 3b1b8c3633 Merge branch 'github_detections_improvement' of github.com:splunk/security_content into github_detections_improvement Patrick Bareiss 2025-01-15 10:44:35 +01:00
  • 7c61973899 bug fix Patrick Bareiss 2025-01-15 10:44:08 +01:00
  • e2ca497763 Merge branch 'develop' into github_detections_improvement P4T12ICK 2025-01-15 10:42:30 +01:00
  • e11c55b69b New GitHub Enterprise detections Patrick Bareiss 2025-01-15 10:39:57 +01:00
  • 64d442bc81 updating search name research-bot 2025-01-14 14:41:47 -08:00
  • e9540be509 add cisco secure endpoint related analytics Nasreddine Bencherchali 2025-01-14 22:57:00 +01:00
  • cbb282beb4 removing allowed contraint and new name research-bot 2025-01-14 13:48:35 -08:00
  • 7feac89166 updating SPL that failed integration testing research-bot 2025-01-14 11:42:43 -08:00
  • 05f7a6ed57 Merge branch 'strict_yml_from_rba' of https://github.com/splunk/security_content into strict_yml_from_rba pyth0n1c 2025-01-14 11:41:55 -08:00
  • 926ca49178 remove extra fields pyth0n1c 2025-01-14 11:41:51 -08:00
  • d9e1183134 minor update Bhavin Patel 2025-01-14 11:14:32 -08:00
  • 4f16cb3115 update office macro Nasreddine Bencherchali 2025-01-14 20:02:52 +01:00
  • efa8b09ad3 update powershell analytics Nasreddine Bencherchali 2025-01-14 19:34:31 +01:00
  • 9c937ce91d Branch was auto-updated. Bhavin Patel 2025-01-14 10:02:39 -08:00
  • e67fb0a029 Branch was auto-updated. Bhavin Patel 2025-01-14 10:02:38 -08:00
  • 3e72f4edf2 Branch was auto-updated. Bhavin Patel 2025-01-14 10:02:37 -08:00
  • 7e2a3877ae Branch was auto-updated. Bhavin Patel 2025-01-14 10:02:37 -08:00
  • 7a6dcfc450 Branch was auto-updated. Bhavin Patel 2025-01-14 10:02:36 -08:00
  • fb66f8cba2 Merge pull request #3266 from splunk/dlux_5 Bhavin Patel 2025-01-14 10:02:21 -08:00
  • 4cd433521f Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:55 -08:00
  • 3d32cfb663 Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:54 -08:00
  • fa2ba7c031 Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:48 -08:00
  • 6709e590a0 Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:46 -08:00
  • 4f2d0643d4 Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:45 -08:00
  • a7fb1c4de1 Branch was auto-updated. Bhavin Patel 2025-01-14 09:04:44 -08:00
  • c3689f0194 Merge pull request #3237 from splunk/aws_asl_detections Bhavin Patel 2025-01-14 09:04:24 -08:00
  • 3d1fde609b Add ASL AWS CloudTrail data source Patrick Bareiss 2025-01-14 16:47:25 +01:00
  • 416c239dce Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2 Bhavin Patel 2025-01-09 14:17:57 -08:00
  • 4dabd5dbd7 Merge branch 'develop' into auditd_sourcetype_update Nasreddine Bencherchali 2025-01-14 12:29:10 +01:00
  • 55deed2e69 minor research-bot 2025-01-13 17:36:26 -08:00
  • b6b1274148 cleanup research-bot 2025-01-13 15:04:15 -08:00
  • 5b5efa00d4 cleanup research-bot 2025-01-13 14:25:29 -08:00
  • 1f060bbddf update to analytics using net Nasreddine Bencherchali 2025-01-13 22:20:46 +01:00
  • ff5a16bd97 updating data sources research-bot 2025-01-13 12:18:01 -08:00
  • b79f8dd0e4 Merge branch 'develop' into nterl0k-t1033-query-remote-usage Bhavin Patel 2025-01-13 10:38:03 -08:00
  • d64e5c9063 Update o365_service_principal_privilege_escalation.yml Bhavin Patel 2025-01-13 10:36:45 -08:00
  • a56ed86c2a Update windows_powershell_script_block_with_malicious_string.yml Steven Dick 2025-01-13 12:11:25 -05:00
  • c16c96c0c3 Update windows_powershell_process_with_malicious_string.yml Steven Dick 2025-01-13 12:10:47 -05:00
  • 35ec736492 Update windows_powershell_script_block_with_malicious_string.yml Steven Dick 2025-01-13 12:04:58 -05:00
  • f51363bd21 Add files via upload Steven Dick 2025-01-13 11:53:27 -05:00
  • 47d4505e50 Add files via upload Steven Dick 2025-01-13 11:52:36 -05:00
  • a73665c7ab Merge branch 'develop' into new-research-detection-endpoint zake 2025-01-11 22:57:41 +07:00
  • a642239180 Merge branch 'rba_migration' into strict_yml_from_rba pyth0n1c 2025-01-10 16:40:28 -08:00
  • 17a1b2dbba minor space research-bot 2025-01-10 12:32:08 -08:00
  • 5ae1ac8ebb updating drilldown research-bot 2025-01-10 12:31:17 -08:00
  • 145c93f451 updating detection research-bot 2025-01-10 12:16:02 -08:00
  • 5efd2655aa Branch was auto-updated. Bhavin Patel 2025-01-10 12:08:09 -08:00
  • 6f56a467c1 New detection conversion ljstella 2025-01-10 14:07:48 -06:00
  • a3be9d47b9 minor udpates to yaml research-bot 2025-01-10 11:46:35 -08:00
  • 963f94f38e Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:54 -08:00
  • db1e1bb45e Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:36 -08:00
  • 8087f9ffef Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:35 -08:00
  • 39c5136fdb Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:34 -08:00
  • 6b9161bcea Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:33 -08:00
  • b4eeee4873 Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:32 -08:00
  • 6d724876b6 Branch was auto-updated. Bhavin Patel 2025-01-10 07:03:31 -08:00
  • c0f0f9506d Merge pull request #3274 from splunk/auto-ta-update-141 Lou Stella 2025-01-10 09:03:16 -06:00
  • 67de6175a9 Updated TAs patel-bhavin 2025-01-10 06:57:41 +00:00
  • 0625624ed0 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:30 -08:00
  • f890159c74 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:18 -08:00
  • 3937f26f84 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:17 -08:00
  • ef6f6805b5 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:17 -08:00
  • 5266a70dae Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:16 -08:00
  • e1a5602af7 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:15 -08:00
  • 83ecc74952 Branch was auto-updated. Bhavin Patel 2025-01-09 14:18:14 -08:00
  • ede80f4395 Merge pull request #3257 from nterl0k/nterl0k-t1219-rmm-update-2 Bhavin Patel 2025-01-09 14:17:57 -08:00
  • 55d4936427 update token Bhavin Patel 2025-01-09 13:26:23 -08:00
  • c01f87071e Merge branch 'develop' into nterl0k-t1219-rmm-update-2 Bhavin Patel 2025-01-09 13:10:22 -08:00
  • e7d4e0b2be Merge branch 'strict_yml_from_rba' of https://github.com/splunk/security_content into strict_yml_from_rba pyth0n1c 2025-01-09 13:03:50 -08:00
  • 5aafb26b10 Merge branch 'rba_migration' into strict_yml_from_rba pyth0n1c 2025-01-09 13:03:10 -08:00
  • 1c4c7bd43a remove confidence impact message pyth0n1c 2025-01-09 13:02:19 -08:00
  • b9b7a16516 Branch was auto-updated. Bhavin Patel 2025-01-09 12:57:55 -08:00
  • ad772ee1ee More stragglers ljstella 2025-01-09 14:57:36 -06:00
  • 37566022b0 Merge branch 'rba_migration' into strict_yml_from_rba pyth0n1c 2025-01-09 12:06:46 -08:00
  • ef6e7e70e2 Branch was auto-updated. Bhavin Patel 2025-01-09 11:43:01 -08:00
  • 6f3c999416 Branch was auto-updated. Bhavin Patel 2025-01-09 11:43:00 -08:00
  • ec9574b486 Branch was auto-updated. Bhavin Patel 2025-01-09 11:42:59 -08:00
  • 045cc1994b Branch was auto-updated. Bhavin Patel 2025-01-09 11:42:58 -08:00
  • ea9921d6ab Branch was auto-updated. Bhavin Patel 2025-01-09 11:42:54 -08:00
  • a746db1270 Branch was auto-updated. Bhavin Patel 2025-01-09 11:42:53 -08:00
  • d2592c5deb Merge pull request #3270 from splunk/auto-ta-update-139 Lou Stella 2025-01-09 13:42:36 -06:00
  • 1ce4f77a4c update description ljstella 2025-01-09 12:02:56 -06:00
  • 848fb18717 improvements Patrick Bareiss 2025-01-09 18:19:18 +01:00
  • 4b28335f82 retrigger ljstella 2025-01-09 11:12:57 -06:00
  • 02afa4f4cb Adding PSC ljstella 2025-01-09 11:08:49 -06:00
  • 5b8986469e Removed parens that was killing app installs ljstella 2025-01-09 10:39:47 -06:00
  • 8b30dc3e15 change Patrick Bareiss 2025-01-09 14:47:11 +01:00
  • 87d2ca6225 Merge branch 'aws_asl_detections' of github.com:splunk/security_content into aws_asl_detections Patrick Bareiss 2025-01-09 14:43:06 +01:00
  • 4b37788f5a new detections Patrick Bareiss 2025-01-09 14:42:38 +01:00
  • f06f5cd618 rename rule and enhance metadata Nasreddine Bencherchali 2025-01-09 13:39:03 +01:00
  • f7481eb83a Updated TAs auto-ta-update-140 patel-bhavin 2025-01-09 06:57:48 +00:00
  • 0adf977246 Update o365_sharepoint_suspicious_search_behavior.yml Steven Dick 2025-01-08 15:39:12 -05:00
  • fd1b9e87d9 Update o365_sharepoint_suspicious_search_behavior.yml Steven Dick 2025-01-08 15:36:10 -05:00
  • 9eac24221c Update o365_sharepoint_suspicious_search_behavior.yml Steven Dick 2025-01-08 15:21:40 -05:00