Commit Graph

  • 7d0046cf33 linux_auditd_detection tccontre 2024-08-09 10:55:33 +02:00
  • c6d3eac542 linux_auditd_detection tccontre 2024-08-09 10:46:52 +02:00
  • 97ad5a62b6 add missing version and id fields to story pyth0n1c 2024-08-08 17:26:28 -07:00
  • 5399e6d84e Branch was auto-updated. Bhavin Patel 2024-08-08 06:20:14 -07:00
  • f3b09bdb40 Branch was auto-updated. Bhavin Patel 2024-08-08 06:20:13 -07:00
  • 53c921a2c2 Branch was auto-updated. Bhavin Patel 2024-08-08 06:20:12 -07:00
  • 03b07c149b Branch was auto-updated. Bhavin Patel 2024-08-08 06:20:11 -07:00
  • fc2c1507b2 Merge pull request #3087 from splunk/auditd_data_source P4T12ICK 2024-08-08 15:19:49 +02:00
  • f16501ec86 auditd_data_source tccontre 2024-08-08 15:06:44 +02:00
  • d0b5537cc5 auditd_data_source tccontre 2024-08-08 15:00:58 +02:00
  • 35e2f0d0cc Rename Linux_Auditd_Syscall.yml to linux_auditd_syscall.yml Br3akp0int 2024-08-08 14:56:03 +02:00
  • 98b7916636 Rename Linux_Auditd_Service_Stop.yml to linux_auditd_service_stop.yml Br3akp0int 2024-08-08 14:55:44 +02:00
  • 8ebc697d5f Rename Linux_Auditd_Proctitle.yml to linux_auditd_proctitle.yml Br3akp0int 2024-08-08 14:55:24 +02:00
  • d1f13df7c5 Rename Linux_Auditd_Path.yml to linux_auditd_path.yml Br3akp0int 2024-08-08 14:55:03 +02:00
  • 65df507595 Rename Linux_Auditd_Execve.yml to linux_auditd_execve.yml Br3akp0int 2024-08-08 14:54:44 +02:00
  • 250ff001f2 Rename Linux_Auditd_Add_User.yml to linux_auditd_add_user.yml Br3akp0int 2024-08-08 14:54:21 +02:00
  • 89902ee34b auditd_data_source tccontre 2024-08-08 14:47:22 +02:00
  • ec1c527d17 updating detections dluxtron 2024-08-08 15:48:37 +10:00
  • dbcf31d59e remove submod Bhavin Patel 2024-08-07 16:17:43 -07:00
  • 96328431d3 moar updates and tested succesfully Bhavin Patel 2024-08-07 16:17:01 -07:00
  • bba1d57ae3 Branch was auto-updated. Bhavin Patel 2024-08-07 14:08:13 -07:00
  • 864758ce0b Branch was auto-updated. Bhavin Patel 2024-08-07 14:08:12 -07:00
  • d7bbb399c7 Branch was auto-updated. Bhavin Patel 2024-08-07 14:08:11 -07:00
  • 883729353d Merge pull request #3085 from splunk/risk_message_validation Bhavin Patel 2024-08-07 14:07:54 -07:00
  • 83be3b153f Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Lou Stella 2024-08-07 14:53:29 -05:00
  • c0755594e0 Merge branch 'develop' into risk_message_validation Bhavin Patel 2024-08-07 12:51:53 -07:00
  • 201b46252f updating risk_message Bhavin Patel 2024-08-07 12:50:29 -07:00
  • 2e69492afa Branch was auto-updated. Bhavin Patel 2024-08-07 12:24:41 -07:00
  • 181eb2a769 Branch was auto-updated. Bhavin Patel 2024-08-07 12:24:40 -07:00
  • 0d7576cfaf Branch was auto-updated. Bhavin Patel 2024-08-07 12:24:39 -07:00
  • d067238e4c Merge pull request #3084 from splunk/data_source_bug_fix Bhavin Patel 2024-08-07 12:24:23 -07:00
  • 8ae1bf2eaa Branch was auto-updated. Bhavin Patel 2024-08-07 12:12:29 -07:00
  • 32544bbce9 Branch was auto-updated. Bhavin Patel 2024-08-07 12:12:27 -07:00
  • dbf7c4a5b3 Branch was auto-updated. Bhavin Patel 2024-08-07 12:12:26 -07:00
  • c3506341bc Branch was auto-updated. Bhavin Patel 2024-08-07 12:12:25 -07:00
  • 865d52592d Merge pull request #2999 from nterl0k/nterl0k-o365-azure-workload-1 Bhavin Patel 2024-08-07 12:12:06 -07:00
  • c80bbf26a1 updating dashboard with yamls Bhavin Patel 2024-08-07 11:58:53 -07:00
  • 5f30d2989b Remove old version ljstella 2024-08-07 13:34:36 -05:00
  • 863813645f Merge branch 'develop' into nterl0k-o365-azure-workload-1 Lou Stella 2024-08-07 13:31:17 -05:00
  • 0091d78210 Account for new name ljstella 2024-08-07 13:30:26 -05:00
  • f01f6957f9 Updating datestamp ljstella 2024-08-07 13:29:34 -05:00
  • ca30ffcc40 Updating lookup name ljstella 2024-08-07 13:20:21 -05:00
  • 9ce5478271 Data Source Bug Fix Patrick Bareiss 2024-08-07 16:21:33 +02:00
  • 201db47cc4 spl2 Bhavin Patel 2024-08-05 18:06:23 -07:00
  • 02650248f2 updating SPL Bhavin Patel 2024-08-05 18:03:56 -07:00
  • b4fdd79e28 Branch was auto-updated. Bhavin Patel 2024-08-05 17:51:34 -07:00
  • f1b5ff7653 Branch was auto-updated. Bhavin Patel 2024-08-05 17:51:33 -07:00
  • b91c4ece95 Merge pull request #2979 from nterl0k/nterl0k-T1110.003-NTLM-bruteforce Bhavin Patel 2024-08-05 17:51:18 -07:00
  • 6e2d8fc0b5 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce Bhavin Patel 2024-08-05 17:48:59 -07:00
  • f6f30d451e Branch was auto-updated. Bhavin Patel 2024-08-05 17:48:51 -07:00
  • 0fc196d9f1 Branch was auto-updated. Bhavin Patel 2024-08-05 17:48:51 -07:00
  • 39004ed767 Merge pull request #3074 from splunk/crowdstrike_analytics Bhavin Patel 2024-08-05 17:48:37 -07:00
  • a7dee27ff0 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce Bhavin Patel 2024-08-05 17:41:05 -07:00
  • 19b63ed0da update narrative Bhavin Patel 2024-08-05 17:33:49 -07:00
  • f59961e22b Branch was auto-updated. Bhavin Patel 2024-08-05 17:03:32 -07:00
  • db42b9d3ff Branch was auto-updated. Bhavin Patel 2024-08-05 17:03:31 -07:00
  • e5938c1ef1 Branch was auto-updated. Bhavin Patel 2024-08-05 17:03:30 -07:00
  • 6c3971db92 Branch was auto-updated. Bhavin Patel 2024-08-05 17:03:27 -07:00
  • 59c8fbbba5 Merge pull request #3072 from splunk/data_source_improvements Bhavin Patel 2024-08-05 17:03:12 -07:00
  • 19a1470d14 Update crowdstrike ta pyth0n1c 2024-08-05 16:42:40 -07:00
  • b7ba08c379 Updated all data_sources to latest version fix_typo_in_data_source pyth0n1c 2024-08-05 15:59:26 -07:00
  • fa3d02449f Fix poorly formatted data_source sections pyth0n1c 2024-08-05 15:43:33 -07:00
  • 9809f49b18 Update contentctl.yml Bhavin Patel 2024-08-05 14:35:48 -07:00
  • cb664da1fb Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce Bhavin Patel 2024-08-05 14:30:48 -07:00
  • 9948d8bd14 Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Lou Stella 2024-08-05 16:17:51 -05:00
  • 21444b4eaa Branch was auto-updated. Bhavin Patel 2024-08-05 14:17:04 -07:00
  • f238706dcf Branch was auto-updated. Bhavin Patel 2024-08-05 14:17:03 -07:00
  • 5cb0d54dba Branch was auto-updated. Bhavin Patel 2024-08-05 14:17:03 -07:00
  • 1658842634 Branch was auto-updated. Bhavin Patel 2024-08-05 14:17:02 -07:00
  • 49aba8c955 Branch was auto-updated. Bhavin Patel 2024-08-05 14:17:00 -07:00
  • 7a71b722b6 Merge pull request #3080 from splunk/env_issue Lou Stella 2024-08-05 16:16:46 -05:00
  • 14904fb97c shrink codeowners Bhavin Patel 2024-08-05 14:15:00 -07:00
  • 91ace87f67 version > to appinsepct Bhavin Patel 2024-08-05 14:03:26 -07:00
  • 0e4fff02d9 revert testing change Bhavin Patel 2024-08-05 14:01:09 -07:00
  • 1ea3418c89 forget this commit Bhavin Patel 2024-08-05 13:58:24 -07:00
  • f3ee1590ec rm contetnctl version Bhavin Patel 2024-08-05 13:58:00 -07:00
  • 22380667e4 new trigger condition Bhavin Patel 2024-08-05 13:19:20 -07:00
  • 432d97466a on PR target Bhavin Patel 2024-08-05 13:11:32 -07:00
  • 2df07936f9 sample test Bhavin Patel 2024-08-05 13:07:09 -07:00
  • 672084461f Merge branch 'develop' into data_source_improvements Bhavin Patel 2024-08-05 12:50:11 -07:00
  • f3eba61864 Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce Bhavin Patel 2024-08-05 12:40:52 -07:00
  • aff5c4a04a Branch was auto-updated. Bhavin Patel 2024-08-05 12:40:31 -07:00
  • f2c5565e4f Branch was auto-updated. Bhavin Patel 2024-08-05 12:40:29 -07:00
  • 047f3b4291 Branch was auto-updated. Bhavin Patel 2024-08-05 12:40:28 -07:00
  • 97e2f3600a Branch was auto-updated. Bhavin Patel 2024-08-05 12:40:27 -07:00
  • baec667dd0 Merge pull request #3075 from splunk/app_inspect Bhavin Patel 2024-08-05 12:40:07 -07:00
  • 545a1cad1f updating trigger condition Bhavin Patel 2024-08-05 12:26:20 -07:00
  • 53ee86a148 updating to pr target Bhavin Patel 2024-08-05 12:23:12 -07:00
  • 4b1e814fb0 Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:16 -07:00
  • afcbfcd5d4 Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:15 -07:00
  • f7ed538464 Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:14 -07:00
  • e624a7d0ce Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:12 -07:00
  • 7d4f62f6ec Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:11 -07:00
  • 9d10234e83 Branch was auto-updated. Bhavin Patel 2024-08-05 10:37:10 -07:00
  • 45e0e7f748 Merge pull request #3076 from splunk/datasource_ta_cs Bhavin Patel 2024-08-05 10:36:55 -07:00
  • 6237739939 Merge branch 'develop' into datasource_ta_cs Lou Stella 2024-08-05 12:19:23 -05:00
  • fe24e0e673 Merge branch 'develop' into app_inspect Bhavin Patel 2024-08-05 10:17:24 -07:00
  • e1f683d1c1 Merge pull request #3077 from splunk/label_datasource Bhavin Patel 2024-08-05 10:16:40 -07:00
  • 93e3af152c Edit the detection Gowthamaraj rajendran 2024-08-05 10:15:40 -07:00
  • caace35593 Merge branch 'data_source_improvements' of github.com:splunk/security_content into data_source_improvements Patrick Bareiss 2024-08-05 10:13:18 +02:00