Commit Graph

  • 5ed4c94984 bug fix: update dependencies P4T12ICK 2026-02-26 15:10:00 +01:00
  • eb01d70fc6 Merge pull request #3926 from splunk/ta_update_script p4t12ick 2026-02-26 15:07:08 +01:00
  • ee4d95617a Merge branch 'develop' into ta_update_script p4t12ick 2026-02-26 14:59:17 +01:00
  • f367fb9c33 update dependencies P4T12ICK 2026-02-26 13:41:54 +01:00
  • 7db20a500e ta update script (#3925) p4t12ick 2026-02-26 12:30:12 +01:00
  • ffe80a677c update workflow name P4T12ICK 2026-02-26 12:21:54 +01:00
  • 4f8de77e32 ta update script P4T12ICK 2026-02-26 11:45:35 +01:00
  • a652f33f3e ttp_init_score Teoderick Contreras 2026-02-26 11:37:27 +01:00
  • 3976f0e57d anomaly_init_score anomaly_init_score Teoderick Contreras 2026-02-26 10:58:28 +01:00
  • d119763abe Merge pull request #3839 from splunk/yml_validation_cleanups Lou Stella 2026-02-25 14:17:38 -06:00
  • c733e6c9cc Merge branch 'develop' into yml_validation_cleanups Eric McGinnis 2026-02-25 11:36:18 -08:00
  • 11c909f725 Add YAML Formatting Job (#3889) Nasreddine Bencherchali 2026-02-25 19:30:35 +01:00
  • 1ed6c27923 Update all dates on modified content, including the baseline Eric McGinnis 2026-02-25 10:13:58 -08:00
  • bdf95f1e90 Restore contents of app template. Replace removed/detections/ that were needlessly updated Eric McGinnis 2026-02-25 10:09:20 -08:00
  • 490ad6daf1 Merge branch 'develop' into yml_validation_cleanups pyth0n1c 2026-02-25 10:05:41 -08:00
  • 695434b155 Merge pull request #3921 from splunk/datefix Lou Stella 2026-02-25 11:18:06 -06:00
  • 2ac1ea4234 Merge branch 'develop' into datefix Lou Stella 2026-02-25 10:51:24 -06:00
  • 0fcd63a821 Updated TAs (#3919) Bhavin Patel 2026-02-25 22:21:02 +05:30
  • 47533256c7 contentctl version bump ljstella 2026-02-25 11:39:59 -05:00
  • f38fdc681e technically have to bump version for datefix ljstella 2026-02-25 10:24:04 -05:00
  • b393da3116 datefix ljstella 2026-02-25 10:20:22 -05:00
  • 91b957d103 Updated TAs (#3918) Bhavin Patel 2026-02-24 22:18:56 +05:30
  • 15deedd635 chore: bump contentctl.yml to 5.23.0 (#3913) evm-content-mapping Bhavin Patel 2026-02-20 15:21:49 +05:30
  • 07d5e7d54d Updated TAs (#3914) Bhavin Patel 2026-02-20 15:19:23 +05:30
  • e2e487b2ee Updated TAs auto-ta-update-546 patel-bhavin 2026-02-19 07:16:11 +00:00
  • 0bf18df45f Updated TAs auto-ta-update-545 patel-bhavin 2026-02-18 07:17:11 +00:00
  • c2044d9a99 Tag Content Related to Dynowiper/Zovwiper (#3907) v5.22.0 Br3akp0int 2026-02-17 23:52:23 +01:00
  • 02573684ce Add New MCP Related Detections (#3895) Rod Soto 2026-02-17 17:39:01 -05:00
  • 19181a86b5 Add Coverage and Tagging for the XML Runner Loader (#3897) Br3akp0int 2026-02-17 20:20:36 +01:00
  • 6b9201dbc3 Add SolarWinds WHD RCE Post Exploitation Coverage/Tagging (#3902) Br3akp0int 2026-02-17 20:02:11 +01:00
  • f1483bb561 Merge branch 'develop' into feature/lotus-blossom-chrysalis-2026-02-02 Bhavin Patel 2026-02-12 11:20:14 +05:30
  • 79d24587f6 Issue - 3901 (#3905) Bhavin Patel 2026-02-11 22:33:49 +05:30
  • 15f1e39548 Merge branch 'develop' into yml_validation_cleanups Eric McGinnis 2026-02-11 08:51:26 -08:00
  • b29ba95b51 Updated TAs (#3906) Bhavin Patel 2026-02-11 22:18:24 +05:30
  • 91ab062bb4 Updated TAs (#3900) Bhavin Patel 2026-02-10 19:52:27 +05:30
  • 7cf9641f5f upodated SPL based on new raw events (#3898) bpluta-splunk 2026-02-10 01:29:45 -06:00
  • 04a5f08f31 Updated TAs auto-ta-update-537 patel-bhavin 2026-02-10 07:20:14 +00:00
  • 16883ee85f Merge branch 'develop' into feature/lotus-blossom-chrysalis-2026-02-02 Bhavin Patel 2026-02-10 10:28:12 +05:30
  • d13e377a27 Bump contentctl.yml to 5.22.0 (#3894) Bhavin Patel 2026-02-10 10:27:49 +05:30
  • b1d7ce5307 Merge branch 'develop' into auto-ta-update-533 auto-ta-update-533 Bhavin Patel 2026-02-10 10:07:31 +05:30
  • 84c05196d0 Merge pull request #3903 from splunk/contentctl_bump Lou Stella 2026-02-09 12:42:20 -05:00
  • 7e19147038 Bumping contentctl ljstella 2026-02-09 11:21:18 -05:00
  • 6c81179de7 Merge branch 'develop' into auto-ta-update-533 Bhavin Patel 2026-02-09 14:47:37 +05:30
  • ec7eeded58 Updated TAs auto-ta-update-534 patel-bhavin 2026-02-07 07:09:03 +00:00
  • 2e7660be9c XML Windows Event Log Cleanup continued (#3887) Lou Stella 2026-02-06 08:28:37 -05:00
  • 0067abb8bc Merge branch 'develop' into auto-ta-update-533 Bhavin Patel 2026-02-06 18:57:04 +05:30
  • a43838a3f5 Automated Splunk TA Update 532 (#3891) Bhavin Patel 2026-02-06 18:21:07 +05:30
  • 452ecbfce7 Updated TAs patel-bhavin 2026-02-06 07:14:42 +00:00
  • 3f28530888 Update windows_bluetoothservice_persistence.yml MHaggis 2026-02-05 09:36:21 -07:00
  • de61add59d push MHaggis 2026-02-04 11:17:31 -07:00
  • 5182de034b Bump versions and dates for detections tagged with Lotus Blossom story MHaggis 2026-02-04 08:16:05 -07:00
  • 73b2b82c67 Merge pull request #3890 from splunk/bump_contentctl_5_5_13 v5.21.0 Lou Stella 2026-02-03 17:53:50 -05:00
  • 252f1f6002 Update contentctl version to 5.5.13 pyth0n1c 2026-02-03 14:48:29 -08:00
  • 8d9d3fbd35 Update windows_bitdefender_submission_wizard_dll_sideloading.yml MHaggis 2026-02-03 13:28:31 -07:00
  • 0dea21f91b kick MHaggis 2026-02-03 13:13:14 -07:00
  • f8a3d112d9 Merge branch 'develop' into feature/lotus-blossom-chrysalis-2026-02-02 Michael Haag 2026-02-03 13:09:28 -07:00
  • d68143bc78 tags and push MHaggis 2026-02-03 12:52:09 -07:00
  • 2cb411bac7 Lotus Blossom MHaggis 2026-02-03 12:46:32 -07:00
  • c09c341ae4 Default.meta changes for default savedsearch stanza (#3815) Lou Stella 2026-02-03 12:07:54 -05:00
  • b5280b610d browser_hijacking_2 (#3879) Br3akp0int 2026-02-02 16:16:50 +01:00
  • 7777dd91cb Add Windows TOR Client Execution Detected (#3881) Vignesh 2026-02-02 20:02:06 +05:30
  • c233cf9c04 Updated TAs (#3884) Bhavin Patel 2026-02-01 00:10:56 +05:30
  • 56675d5fc7 Telnet Auth Bypass CVE (#3883) Raven Tait 2026-01-31 00:02:53 -05:00
  • a266563b00 Update RBA, logic, and beautify some searches (#3880) Nasreddine Bencherchali 2026-01-31 05:27:04 +01:00
  • c50763d938 Fix Reported Issues (#3873) Nasreddine Bencherchali 2026-01-30 16:34:18 +01:00
  • 28a213f97f Add Missing Time to Set Default PowerShell Execution Policy To Unrestricted or Bypass (#3882) Andrei Banaru 2026-01-30 12:41:19 +01:00
  • f49f3a3fc9 Fix Validation Issues (#3861) Nasreddine Bencherchali 2026-01-30 01:38:34 +01:00
  • 74ed412c74 more required bumps Eric McGinnis 2026-01-28 12:13:38 -08:00
  • 95f20fa74a fix date format Eric McGinnis 2026-01-28 12:05:23 -08:00
  • f6ea72fa20 bump dates and verisons Eric McGinnis 2026-01-28 11:54:20 -08:00
  • 5786c3164f Accidentally renamed extension for file Eric McGinnis 2026-01-28 11:47:22 -08:00
  • adba89740a fix wrong format failing validations Eric McGinnis 2026-01-28 11:44:39 -08:00
  • 0f9014f4b6 Merge branch 'develop' into yml_validation_cleanups pyth0n1c 2026-01-28 11:36:47 -08:00
  • 29ece397e8 Update Outlook writing zip Analytic (#3877) Bhavin Patel 2026-01-28 18:19:21 +05:30
  • f1693a1a0a Fix search typo in windows abused web services analytic (#3878) Alex 2026-01-24 21:38:30 +08:00
  • 060feb0a42 Updating Query Based on XS Data (#3876) Bhavin Patel 2026-01-23 20:19:23 +05:30
  • d080ba9f06 Updating Terminology for ES8+ (#3875) Bhavin Patel 2026-01-23 03:29:29 +05:30
  • b6b0b47a66 Storm-0501 Ransomware Analytic Story and Tagging (#3871) Michael Haag 2026-01-22 14:32:14 -07:00
  • d08d829807 VoidLink Tagging (#3870) Michael Haag 2026-01-22 07:23:15 -07:00
  • 73e69c0b84 stealc (#3833) Br3akp0int 2026-01-22 14:21:16 +01:00
  • 9c9482bfb9 Additional information in Risk Message for Services LOLBAS spawn detection (#3874) Emil 2026-01-22 13:38:58 +01:00
  • 76f629eb2f Update Analytics Performance (#3866) Nasreddine Bencherchali 2026-01-22 13:36:31 +01:00
  • ce2de7a83c chore: bump contentctl.yml to 5.21.0 (#3872) Bhavin Patel 2026-01-21 20:34:40 +05:30
  • 2008331fbb O365 - Expand Detection of New MFA Devices (#3868) v5.20.0 Oliver Springer 2026-01-20 04:52:23 +01:00
  • d51b057f0b Merge pull request #3865 from LaLaGuy/patch---ESCU---Prohibited-Network-Traffic-Allowed---Rule Lou Stella 2026-01-16 13:35:52 -06:00
  • c84715dd99 New Year, New Fixes ljstella 2026-01-16 13:19:35 -05:00
  • 0fd8a68691 Merge branch 'develop' into patch---ESCU---Prohibited-Network-Traffic-Allowed---Rule Lou Stella 2026-01-16 11:24:33 -06:00
  • 4ce7a1ddcc Update version and date in prohibited network traffic config LaLaGuy 2026-01-16 16:45:48 +01:00
  • 20b0368e51 Added New HijackLibs Entry (#3864) Raven Tait 2026-01-15 14:40:42 -05:00
  • f9e8e6e601 Fix formatting and syntax in prohibited network traffic YAML LaLaGuy 2026-01-15 19:59:08 +01:00
  • e2443809bb Refactor search query for prohibited network traffic LaLaGuy 2026-01-15 19:44:41 +01:00
  • 26b24aaa6e in prep for v5.20.0 (#3862) Bhavin Patel 2026-01-15 01:20:02 +05:30
  • 457ac84af8 rename deprecation mapping file Eric McGinnis 2026-01-13 22:22:15 -08:00
  • 5f2d1c77e1 fix (#3859) Bhavin Patel 2026-01-14 11:12:32 +05:30
  • 0922ef16b1 Add redhat yaml extension recommendation create-vscode-schema Xiaonan Qi 2026-01-13 14:12:08 -08:00
  • 90e65ef56b Add yaml schemas in vscode settings.json Xiaonan Qi 2026-01-13 14:11:24 -08:00
  • 6cc12a9b29 Analytic Enhancements and Fixes (#3850) Nasreddine Bencherchali 2026-01-12 14:06:12 +01:00
  • 49673747bf Add Browser Hijack Analytics (#3841) Br3akp0int 2026-01-12 13:05:22 +01:00
  • 7941673530 Add Snort/IOS Correlation and Other Things (#3857) Nasreddine Bencherchali 2026-01-12 12:15:11 +01:00
  • 06db914290 Updated TAs (#3858) feature/TEA-1038 Bhavin Patel 2026-01-10 18:50:32 +05:30