Commit Graph

  • 2047d2a1fb remove artifacts Bhavin Patel 2024-08-22 16:29:38 +05:30
  • 8f27c8b511 updating trigger and revert Bhavin Patel 2024-08-22 16:28:35 +05:30
  • ff71e9f012 udpating datasource Bhavin Patel 2024-08-22 16:22:39 +05:30
  • e8397076f4 update trigger conditions Bhavin Patel 2024-08-22 16:21:05 +05:30
  • ab424feb17 updating job Bhavin Patel 2024-08-22 16:15:08 +05:30
  • 1a5526942f testing data source validation Bhavin Patel 2024-08-22 16:13:23 +05:30
  • d4d1d24dfa linux_auditd_detection tccontre 2024-08-22 12:33:37 +02:00
  • e7bf43d5f8 linux_auditd_detection tccontre 2024-08-22 12:05:10 +02:00
  • c440a0ec91 Update ivanti_vtm_new_account_creation.yml Bhavin Patel 2024-08-22 11:05:39 +05:30
  • f172d78c68 fix merge conflict in contentctl.yml. remove risk_score field from many new or updarted detections. pyth0n1c 2024-08-21 13:41:58 -07:00
  • 7d401f2d24 remove build_ssa as it is no longer used in contentctl pyth0n1c 2024-08-21 13:30:26 -07:00
  • 4206b9feac Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Bhavin Patel 2024-08-22 01:17:04 +05:30
  • 81bf565399 moon_peak_coverage tccontre 2024-08-21 16:38:52 +02:00
  • c391d3ebbb Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:14 +05:30
  • 29f7ea8bf8 Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:13 +05:30
  • c69b35f37f Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:12 +05:30
  • 34d8142a98 Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:11 +05:30
  • e42f35bd24 Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:10 +05:30
  • cd513e7f58 Branch was auto-updated. Bhavin Patel 2024-08-21 14:58:09 +05:30
  • b909d351bb Merge pull request #3026 from splunk/dlux_3 Bhavin Patel 2024-08-21 14:57:54 +05:30
  • 9457f8837a Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:53 +05:30
  • e9feb0f895 Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:53 +05:30
  • f15744449e Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:52 +05:30
  • 821fceeba6 Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:51 +05:30
  • 10602d7c2c Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:50 +05:30
  • 9ac40a7000 Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:49 +05:30
  • df2acf9822 Branch was auto-updated. Bhavin Patel 2024-08-21 14:27:49 +05:30
  • 4c85cf56b8 bump content version Bhavin Patel 2024-08-21 14:27:29 +05:30
  • 96c608a6bd Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:27 +05:30
  • d3e514b52e Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:26 +05:30
  • dce0e8533b Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:23 +05:30
  • f00ba7a814 Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:22 +05:30
  • 38d812fe82 Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:19 +05:30
  • 7211ae86a9 Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:17 +05:30
  • abd3d2186a Branch was auto-updated. Bhavin Patel 2024-08-21 14:25:15 +05:30
  • 14450cb3a7 Merge pull request #3061 from splunk/rba_is_tricky Bhavin Patel 2024-08-21 14:24:57 +05:30
  • e978f7ddfa linux_auditd_detection tccontre 2024-08-21 09:50:56 +02:00
  • e127f1bfc6 remove duplicate obs tr-3868 Bhavin Patel 2024-08-21 00:11:42 +05:30
  • f49bda41ed Update ivanti_vtm_new_account_creation.yml Michael Haag 2024-08-20 10:56:26 -06:00
  • 39f4e3dadc Guardians of the Haaglaxy Michael Haag 2024-08-20 10:53:01 -06:00
  • 0ac2c1c22f First crack at partial grammar checking vale_linting ljstella 2024-08-20 08:19:09 -05:00
  • 1440ec4189 linux_auditd_detection tccontre 2024-08-20 11:07:36 +02:00
  • 6a3e5f7b8f linux_auditd_detection tccontre 2024-08-20 10:34:27 +02:00
  • 6df128a346 Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Bhavin Patel 2024-08-20 13:53:04 +05:30
  • 81911ef062 fix ordering and spacing of a lookup to be more compliant with the search and format pyth0n1c 2024-08-19 14:41:30 -07:00
  • 1ff2c9bfed Missed a date & version bump ljstella 2024-08-19 12:00:27 -05:00
  • 8a59b330ae Missed cloud ljstella 2024-08-19 10:32:38 -05:00
  • 15fe84c83a missed cloud ljstella 2024-08-19 10:32:26 -05:00
  • 6d7c0b0405 missed deprecated ljstella 2024-08-19 10:31:55 -05:00
  • d09afdc417 missed endpoints ljstella 2024-08-19 10:31:28 -05:00
  • b0a092a281 linux_auditd_detection tccontre 2024-08-19 11:19:59 +02:00
  • 68c44c76a9 updating observables Bhavin Patel 2024-08-19 13:53:39 +05:30
  • 3db9560510 updating conflcits Bhavin Patel 2024-08-19 13:31:34 +05:30
  • db58414186 updating description and testing Bhavin Patel 2024-08-19 13:06:41 +05:30
  • 0795ef3b18 updating search Bhavin Patel 2024-08-19 13:03:22 +05:30
  • 9eafedf32c Missed version and date updates ljstella 2024-08-16 08:41:51 -05:00
  • 6d9be3fc6a linux_auditd_detection tccontre 2024-08-16 09:39:04 +02:00
  • 19d9e49a38 fixing copy pasta error dluxtron 2024-08-16 16:06:31 +10:00
  • ae33ee83af add some missing lookups. put some space in detections for easier parsing pyth0n1c 2024-08-15 16:43:15 -07:00
  • 37dae6fe7b Fix one more csv file reference pyth0n1c 2024-08-15 16:13:56 -07:00
  • 0ea1c6a62b First pass at required changes for lookups to detection files. pyth0n1c 2024-08-15 15:31:54 -07:00
  • e0b44b170d Web detections ljstella 2024-08-15 15:38:32 -05:00
  • 638c176a44 network detections ljstella 2024-08-15 15:38:15 -05:00
  • 2b40bbedbd Deprecated Detections ljstella 2024-08-15 15:37:43 -05:00
  • 3e9684660f Endpoint detections ljstella 2024-08-15 15:36:03 -05:00
  • 1c56182e6a Moving file back to where it belongs ljstella 2024-08-14 13:45:21 -05:00
  • e0a111fb87 linux_auditd_detection tccontre 2024-08-14 10:54:53 +02:00
  • 9c32f8b6a6 Branch was auto-updated. Bhavin Patel 2024-08-13 13:38:11 -07:00
  • 873bee053c Branch was auto-updated. Bhavin Patel 2024-08-13 13:38:10 -07:00
  • de5c4bdebc Branch was auto-updated. Bhavin Patel 2024-08-13 13:38:09 -07:00
  • 34d2298d7a Branch was auto-updated. Bhavin Patel 2024-08-13 13:38:07 -07:00
  • 382113b4aa Branch was auto-updated. Bhavin Patel 2024-08-13 13:38:06 -07:00
  • 9f85603faa Merge pull request #3091 from splunk/mark_crowdstrike_manual_test v4.38.0 pyth0n1c 2024-08-13 13:37:51 -07:00
  • b41c8c2902 Fixed naming of fields pyth0n1c 2024-08-13 13:28:52 -07:00
  • 1ccdc3c0e9 Marked two detections as manual_test. There is an issue tracking this internally tracked pyth0n1c 2024-08-13 13:17:28 -07:00
  • c6ac1365e4 Branch was auto-updated. Bhavin Patel 2024-08-13 11:36:01 -07:00
  • 11218f88ed Branch was auto-updated. Bhavin Patel 2024-08-13 11:35:59 -07:00
  • d6cb6ffc56 Branch was auto-updated. Bhavin Patel 2024-08-13 11:35:58 -07:00
  • 0c3a638717 Branch was auto-updated. Bhavin Patel 2024-08-13 11:35:57 -07:00
  • 20e336f486 Branch was auto-updated. Bhavin Patel 2024-08-13 11:35:55 -07:00
  • 1e3aa4541e Merge pull request #3090 from splunk/indexequalstar Lou Stella 2024-08-13 13:35:38 -05:00
  • 78fb540ca0 Update linux_hosts.yml Michael Haag 2024-08-13 09:34:53 -06:00
  • bf3280bc64 Branch was auto-updated. Bhavin Patel 2024-08-12 11:58:45 -07:00
  • db9a5aed2c Branch was auto-updated. Bhavin Patel 2024-08-12 11:58:44 -07:00
  • 3a7e93c996 Branch was auto-updated. Bhavin Patel 2024-08-12 11:58:43 -07:00
  • 4feedcdbff Branch was auto-updated. Bhavin Patel 2024-08-12 11:58:41 -07:00
  • 40b69a15d1 Branch was auto-updated. Bhavin Patel 2024-08-12 11:58:40 -07:00
  • 26ef46dbbc A baseline referenced a detection incorrectly. Remove the reference to that detection. pyth0n1c 2024-08-12 11:58:27 -07:00
  • 47ef91e128 linux_auditd_detection tccontre 2024-08-12 16:26:04 +02:00
  • 0800a90171 linux_auditd_detection tccontre 2024-08-12 12:45:05 +02:00
  • 342ec6ec5d Branch was auto-updated. Bhavin Patel 2024-08-09 14:25:19 -07:00
  • e78fdd7761 Branch was auto-updated. Bhavin Patel 2024-08-09 14:25:18 -07:00
  • 17e6c307b0 Branch was auto-updated. Bhavin Patel 2024-08-09 14:25:17 -07:00
  • a7db56dc3f Branch was auto-updated. Bhavin Patel 2024-08-09 14:25:16 -07:00
  • 02bd864e6d Branch was auto-updated. Bhavin Patel 2024-08-09 14:25:14 -07:00
  • ef2489aa9a Merge pull request #3088 from splunk/fix_missing_fields remove_detection_from_baseline pyth0n1c 2024-08-09 14:24:59 -07:00
  • c002318a72 Merge branch 'develop' into nterl0k-o365_various_alerts Lou Stella 2024-08-09 10:13:40 -05:00
  • b8c18cca21 linux_auditd_detection tccontre 2024-08-09 14:58:35 +02:00
  • 727701b82b linux_auditd_detection tccontre 2024-08-09 11:57:23 +02:00
  • 110f60b92a linux_auditd_detection tccontre 2024-08-09 11:42:18 +02:00