Commit Graph

  • c23dcc3570 enhance batch 1 Nasreddine Bencherchali 2024-12-05 21:47:08 +01:00
  • 5f6e382c98 Branch was auto-updated. Bhavin Patel 2024-12-03 14:00:05 -08:00
  • 9d996d5083 Branch was auto-updated. Bhavin Patel 2024-12-03 14:00:04 -08:00
  • 300af51b88 Merge pull request #3225 from splunk/bump_version_4_44_0 v4.44.0 pyth0n1c 2024-12-03 13:59:48 -08:00
  • 3a7575ca64 update default.meta to remove stanzas that do not need to be present. these stanzas cause splunk to say it needs to be restarted after escu is installed pyth0n1c 2024-12-03 13:54:11 -08:00
  • 23035523f0 bump version in prep for release pyth0n1c 2024-12-03 13:14:56 -08:00
  • ed95beabce Branch was auto-updated. Bhavin Patel 2024-12-03 12:52:54 -08:00
  • 840e8bc886 Branch was auto-updated. Bhavin Patel 2024-12-03 12:52:53 -08:00
  • 1e5c7993b9 Merge pull request #3213 from splunk/enhance_coverage pyth0n1c 2024-12-03 12:52:39 -08:00
  • a50db68deb Branch was auto-updated. Bhavin Patel 2024-12-03 11:29:53 -08:00
  • 1ced58eb34 Branch was auto-updated. Bhavin Patel 2024-12-03 11:29:52 -08:00
  • 00b84023f7 Branch was auto-updated. Bhavin Patel 2024-12-03 11:29:51 -08:00
  • eb24889a42 Merge pull request #3221 from splunk/meduza pyth0n1c 2024-12-03 11:29:36 -08:00
  • d2ec1eece8 Branch was auto-updated. Bhavin Patel 2024-12-03 11:11:11 -08:00
  • bc28c09463 Branch was auto-updated. Bhavin Patel 2024-12-03 11:11:10 -08:00
  • ac34d12ad4 Branch was auto-updated. Bhavin Patel 2024-12-03 11:11:08 -08:00
  • e31fab388b Branch was auto-updated. Bhavin Patel 2024-12-03 11:11:07 -08:00
  • 81d745d3e7 Merge pull request #3223 from ronan182/patch-1 pyth0n1c 2024-12-03 11:10:52 -08:00
  • acb9b7c52d Merge branch 'develop' into patch-1 pyth0n1c 2024-12-03 11:07:52 -08:00
  • e138086ade Branch was auto-updated. Bhavin Patel 2024-12-03 11:06:24 -08:00
  • 06a356ca9c Branch was auto-updated. Bhavin Patel 2024-12-03 11:06:23 -08:00
  • 6afbfae376 Branch was auto-updated. Bhavin Patel 2024-12-03 11:06:22 -08:00
  • b2afa2d420 Branch was auto-updated. Bhavin Patel 2024-12-03 11:06:21 -08:00
  • dcd3286dda Merge pull request #3222 from splunk/chmodupdate pyth0n1c 2024-12-03 11:06:06 -08:00
  • 6ac12f9411 Merge branch 'meduza' of https://github.com/splunk/security_content into meduza pyth0n1c 2024-12-03 11:01:24 -08:00
  • 23c3243573 Change many ORs to IN to improve readability pyth0n1c 2024-12-03 11:00:56 -08:00
  • 5e47cf7d2d Merge branch 'develop' into enhance_coverage Nasreddine Bencherchali 2024-12-03 19:27:17 +01:00
  • 08587b7f08 small typo fixes Nasreddine Bencherchali 2024-12-03 19:24:13 +01:00
  • 798c27c844 reference Michael Haag 2024-12-03 11:02:08 -07:00
  • bf53ace3d5 Merge branch 'develop' into patch-1 Nasreddine Bencherchali 2024-12-03 18:59:58 +01:00
  • dcda82b90d Update wget_download_and_bash_execution.yml Nasreddine Bencherchali 2024-12-03 18:58:11 +01:00
  • f4345f98e1 Update wget_download_and_bash_execution.yml Nasreddine Bencherchali 2024-12-03 18:24:52 +01:00
  • a51be65f26 Update wget_download_and_bash_execution.yml Nasreddine Bencherchali 2024-12-03 18:20:24 +01:00
  • 8c0535b96d Update certutil_download_with_urlcache_and_split_arguments.yml Burak Karaduman 2024-12-03 16:22:22 +03:00
  • f7e35aee97 Branch was auto-updated. Bhavin Patel 2024-12-02 15:01:15 -08:00
  • 63cdbe902c Branch was auto-updated. Bhavin Patel 2024-12-02 15:01:13 -08:00
  • 932513676e Branch was auto-updated. Bhavin Patel 2024-12-02 15:01:09 -08:00
  • 79ba298221 Branch was auto-updated. Bhavin Patel 2024-12-02 15:01:07 -08:00
  • 4be3cf9e63 Merge pull request #3216 from splunk/add_more_win_tag pyth0n1c 2024-12-02 15:00:45 -08:00
  • e7bd8b6d6a Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:43 -08:00
  • a6f9707561 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:43 -08:00
  • 2c19182820 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:42 -08:00
  • 197997fe7c Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:41 -08:00
  • c7bac21288 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:40 -08:00
  • 5651f42384 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:39 -08:00
  • 7c2a1bcff2 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:38 -08:00
  • 99689c0595 Branch was auto-updated. Bhavin Patel 2024-12-02 14:18:37 -08:00
  • 7ae38fe43e Merge pull request #3211 from splunk/rdpland pyth0n1c 2024-12-02 14:18:23 -08:00
  • bce2482248 Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:43 -08:00
  • a94e0a7707 Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:42 -08:00
  • 04b1cfd43d Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:41 -08:00
  • 46f4e1eb01 Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:40 -08:00
  • 851944e6ff Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:39 -08:00
  • 78f0ef8afa Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:38 -08:00
  • 5f6fba81e6 Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:37 -08:00
  • 6e4134ed42 Branch was auto-updated. Bhavin Patel 2024-12-02 13:58:36 -08:00
  • 9c15fd045a Merge branch 'develop' into rdpland pyth0n1c 2024-12-02 13:58:34 -08:00
  • b8ad19cb6f Merge pull request #3220 from splunk/auto-ta-update-102 pyth0n1c 2024-12-02 13:58:20 -08:00
  • 5276854ae8 Move data_source to middle of yml. Fix minor typos or <update> still present in drilldown. pyth0n1c 2024-12-02 13:52:40 -08:00
  • 4b3a3dffea Make formatting easier to read for example logs in auto- updated data_sources pyth0n1c 2024-12-02 13:23:36 -08:00
  • e5137759b6 meduza tccontre 2024-12-02 19:58:33 +01:00
  • 676bbd9b8e Update linux_auditd_file_permission_modification_via_chmod.yml Michael Haag 2024-12-02 11:01:06 -07:00
  • 39b67ab9ac Update detections/endpoint/windows_credentials_access_via_vaultcli_module.yml Br3akp0int 2024-12-02 16:25:19 +01:00
  • 3fb1c35f9c Update detections/endpoint/windows_credentials_access_via_vaultcli_module.yml Br3akp0int 2024-12-02 16:24:25 +01:00
  • 9b06386793 Update wget_download_and_bash_execution.yml Ronan Duffy 2024-12-02 15:12:49 +00:00
  • a534ca78eb meduza tccontre 2024-12-02 13:53:45 +01:00
  • 3893833b7c meduza tccontre 2024-12-02 13:48:52 +01:00
  • 5a47ecf5c7 meduza tccontre 2024-12-02 13:42:14 +01:00
  • 89401d3170 Updated TAs patel-bhavin 2024-12-02 06:57:46 +00:00
  • 4ab2222154 Updated TAs auto-ta-update-101 patel-bhavin 2024-12-01 06:57:47 +00:00
  • 3487fb921d Updated TAs auto-ta-update-100 patel-bhavin 2024-11-30 06:57:52 +00:00
  • c6dab5252b Updated TAs auto-ta-update-99 patel-bhavin 2024-11-29 06:58:06 +00:00
  • 1761f3dbe4 add_more_win_tag tccontre 2024-11-28 09:42:44 +01:00
  • 9d5a852d89 Updated TAs auto-ta-update-98 patel-bhavin 2024-11-28 06:57:49 +00:00
  • 99f9c99f93 cloud: missed one ljstella 2024-11-27 15:08:30 -06:00
  • 6bddd20769 There is an inconsistency in how the attack_range appupdate job names files vs how the security_content workflow expects these files to be named. For now, I have manually changed the link to the TA to get the workflow passing auto-ta-update-97 pyth0n1c 2024-11-27 13:02:31 -08:00
  • 78f39cab3a endpoint: cleanup of risk object type other ljstella 2024-11-27 12:50:11 -06:00
  • 606f42a6ed cloud: cleanup of risk object type other ljstella 2024-11-27 12:49:55 -06:00
  • d2edfa4aa9 deprecated: cleanup TBD messages ljstella 2024-11-27 12:34:32 -06:00
  • 9ab5e6a7e1 web: cleanup TBD messages ljstella 2024-11-27 12:34:16 -06:00
  • 67ad9f5114 network: cleanup tbd messages ljstella 2024-11-27 12:33:58 -06:00
  • 85628e252d Endpoint: cleanup TBD messages ljstella 2024-11-27 12:33:38 -06:00
  • 33d6fd96b3 Cloud: cleanup tbd messages ljstella 2024-11-27 12:33:14 -06:00
  • 9f14118bbc application: cleanup tbd messages ljstella 2024-11-27 12:32:56 -06:00
  • 014474e752 Updated TAs patel-bhavin 2024-11-27 06:57:44 +00:00
  • be8ae9947e Clean up new detections by removing required_fields, risk_score, and fixes data_sources to data_source. pyth0n1c 2024-11-26 16:28:22 -08:00
  • 369e895d1f batch 3 Nasreddine Bencherchali 2024-11-27 00:10:38 +01:00
  • d4aed3d50c fix env typo in macros Nasreddine Bencherchali 2024-11-26 23:43:48 +01:00
  • 0d45a7a5c0 batch 2 Nasreddine Bencherchali 2024-11-26 18:45:28 +01:00
  • 34a60ce3cf Update windows_rdp_file_execution.yml Michael Haag 2024-11-26 06:55:19 -07:00
  • 038c0af073 enhance coverage - first batch Nasreddine Bencherchali 2024-11-26 14:06:12 +01:00
  • 9a49d9c1a8 data source improvements Patrick Bareiss 2024-11-26 11:38:41 +01:00
  • c217f1ffe4 Updated TAs auto-ta-update-96 patel-bhavin 2024-11-26 06:57:43 +00:00
  • 245bd2ac03 Update detections/endpoint/windows_rdp_file_execution.yml Michael Haag 2024-11-25 15:48:05 -07:00
  • 9084ddcff4 Update detections/endpoint/windows_rdp_file_execution.yml Michael Haag 2024-11-25 15:47:53 -07:00
  • 3acd1f949a Update detections/endpoint/windows_rdp_file_execution.yml Michael Haag 2024-11-25 15:47:44 -07:00
  • 801413240e Updates with develop ljstella 2024-11-25 13:19:11 -06:00
  • d80e5db350 Update windows_rdp_file_execution.yml Michael Haag 2024-11-25 12:07:39 -07:00
  • 810a520721 Update windows_rdp_file_execution.yml Michael Haag 2024-11-25 12:05:41 -07:00
  • 8f8a6bd3b4 Raiders of the Lost RDP: The Haag Crusade Michael Haag 2024-11-25 11:44:23 -07:00