Commit Graph

  • bf1d25af38 improved data source TA version Patrick Bareiss 2024-08-05 10:12:12 +02:00
  • 4d6e8352e5 Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Lou Stella 2024-08-03 07:40:42 -05:00
  • aa7d9edcda Update detect_password_spray_attack_behavior_on_user.yml Steven Dick 2024-08-02 08:31:12 -04:00
  • 2cf5d2d1a4 updating for testing Bhavin Patel 2024-08-01 16:10:22 -07:00
  • d74e6f7991 updating app on S3 and merge conflicts Bhavin Patel 2024-08-01 14:37:10 -07:00
  • 2e8e1263d6 Adding new label ljstella 2024-08-01 08:33:42 -05:00
  • abdf1b51e7 Fixing TA for CS data ljstella 2024-08-01 08:31:06 -05:00
  • 518174a280 Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:36 -07:00
  • 9ed3c9ee3b Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:35 -07:00
  • ab3b086854 Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:35 -07:00
  • 5d461d3b5d Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:34 -07:00
  • 51f5437efa Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:33 -07:00
  • 7e321215e8 Branch was auto-updated. Bhavin Patel 2024-07-31 18:31:32 -07:00
  • 863807d3fb Merge pull request #3073 from splunk/handala_wiper Bhavin Patel 2024-07-31 18:31:19 -07:00
  • 3d11857b22 adding dependabot for git actions Bhavin Patel 2024-07-31 18:30:00 -07:00
  • 50fb1c198a Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:45 -07:00
  • 73014b40b8 Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:44 -07:00
  • d5ab68e433 Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:43 -07:00
  • faa7434376 Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:41 -07:00
  • 76d3a8be2c Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:40 -07:00
  • 12cf19b686 Branch was auto-updated. Bhavin Patel 2024-07-31 16:21:39 -07:00
  • 59fe9cfd7d Merge branch 'develop' into handala_wiper Bhavin Patel 2024-07-31 16:21:26 -07:00
  • 49c8925b6d Merge pull request #3070 from splunk/fork_develop_bug pyth0n1c 2024-07-31 16:21:19 -07:00
  • 7ad026121a branch name Bhavin Patel 2024-07-31 16:18:41 -07:00
  • fea71b0171 remove enviroment and use repo variable Bhavin Patel 2024-07-31 15:17:23 -07:00
  • 4379a2880f add to all jobs Bhavin Patel 2024-07-31 14:57:09 -07:00
  • aa85a2a3bd updating env to prod Bhavin Patel 2024-07-31 14:54:00 -07:00
  • 9b96a140ba updating to use env Bhavin Patel 2024-07-31 14:51:07 -07:00
  • 158d706115 remove changes Bhavin Patel 2024-07-31 14:45:57 -07:00
  • 06f4158b84 try rm Bhavin Patel 2024-07-31 14:02:38 -07:00
  • b3f18b0683 fail app inspect Bhavin Patel 2024-07-31 13:18:29 -07:00
  • 594e6e972c checking echo Bhavin Patel 2024-07-31 13:12:00 -07:00
  • 39459cafb5 adding quotes Bhavin Patel 2024-07-31 13:06:15 -07:00
  • e19a344be7 udpating cp command Bhavin Patel 2024-07-31 12:57:21 -07:00
  • a255f2d65b add space Bhavin Patel 2024-07-31 12:39:34 -07:00
  • 134689fb18 update secrets and codeowners Bhavin Patel 2024-07-31 12:17:39 -07:00
  • cfe5e9c926 adding app inspect and version bump all jobs Bhavin Patel 2024-07-31 12:10:05 -07:00
  • 72b9408f29 Merge branch 'develop' into nterl0k-o365_various_alerts Lou Stella 2024-07-31 08:06:55 -05:00
  • f28b995ce3 crowdstrike_analytics tccontre 2024-07-31 11:10:41 +02:00
  • 3890a9048b crowstrikes_analytics tccontre 2024-07-31 11:02:19 +02:00
  • 1b66eb3d4c handala_wiper tccontre 2024-07-31 10:04:07 +02:00
  • f479e762e6 Improve TA names to match the naming in Splunk Patrick 2024-07-31 09:58:03 +02:00
  • 96572cdc9b Remove some more extra fields from new ymls pyth0n1c 2024-07-30 16:10:27 -07:00
  • b2d4fd3a80 merged pyth0n1c 2024-07-30 16:04:33 -07:00
  • 5e04f5cc71 update contentctl.yml format pyth0n1c 2024-07-30 15:56:06 -07:00
  • 6158cad4af testing for forks Bhavin Patel 2024-07-30 15:47:32 -07:00
  • 88358c5876 updating fork checkout Bhavin Patel 2024-07-30 15:44:05 -07:00
  • c713cb8464 Branch was auto-updated. Bhavin Patel 2024-07-30 15:28:27 -07:00
  • 8420867eda Branch was auto-updated. Bhavin Patel 2024-07-30 15:28:26 -07:00
  • ee90b28dc4 Branch was auto-updated. Bhavin Patel 2024-07-30 15:28:25 -07:00
  • 891ebbec54 Merge pull request #3069 from splunk/groupmod v4.37.0 Bhavin Patel 2024-07-30 15:28:09 -07:00
  • 660dcd0cc5 Update windows_privileged_group_modification.yml Michael Haag 2024-07-30 16:17:33 -06:00
  • bd927caba8 Branch was auto-updated. Bhavin Patel 2024-07-30 14:46:20 -07:00
  • 496786e92f Branch was auto-updated. Bhavin Patel 2024-07-30 14:46:19 -07:00
  • 52504408ed Branch was auto-updated. Bhavin Patel 2024-07-30 14:46:18 -07:00
  • d2963722cd Branch was auto-updated. Bhavin Patel 2024-07-30 14:46:17 -07:00
  • 1bb7f6d2dd Merge pull request #3068 from splunk/fix_names_and_datasources Bhavin Patel 2024-07-30 14:46:04 -07:00
  • 97e1f74307 Update windows_privileged_group_modification.yml Michael Haag 2024-07-30 15:45:02 -06:00
  • 8c8b333517 updating data sources Bhavin Patel 2024-07-30 14:29:01 -07:00
  • db0707458c extra space Bhavin Patel 2024-07-30 14:26:23 -07:00
  • ca3548c95e Create windows_privileged_group_modification.yml Michael Haag 2024-07-30 15:23:31 -06:00
  • 5ac47ddd85 fix some names and data sources to be more compliant pyth0n1c 2024-07-30 14:19:23 -07:00
  • b66ea98432 Branch was auto-updated. Bhavin Patel 2024-07-30 11:37:54 -07:00
  • 792590ffee Branch was auto-updated. Bhavin Patel 2024-07-30 11:37:53 -07:00
  • 97afee6e72 Branch was auto-updated. Bhavin Patel 2024-07-30 11:37:52 -07:00
  • 6e749f0199 Merge pull request #3066 from splunk/specula Bhavin Patel 2024-07-30 11:37:38 -07:00
  • 28d684011a Update windows_outlook_webview_registry_modification.yml Michael Haag 2024-07-30 12:25:09 -06:00
  • f951ea4c88 fix Michael Haag 2024-07-30 12:18:20 -06:00
  • 53fef4c166 chip it Michael Haag 2024-07-30 11:35:18 -06:00
  • 19547da98a Create vmware_esxi_ad_integration_authentication_bypass_cve_2024_37085.yml Michael Haag 2024-07-30 10:44:37 -06:00
  • 3e20a2a362 A Haag of Your Own Michael Haag 2024-07-30 10:21:16 -06:00
  • 4f2d6d26de Branch was auto-updated. Bhavin Patel 2024-07-29 18:07:58 -05:00
  • 1a6c3d30b5 Branch was auto-updated. Bhavin Patel 2024-07-29 18:07:57 -05:00
  • a6cb7dc3b8 Branch was auto-updated. Bhavin Patel 2024-07-29 18:07:56 -05:00
  • 6a933c681c Merge pull request #3065 from splunk/accidental_removed Bhavin Patel 2024-07-29 18:07:40 -05:00
  • 41c2a957ad re adding missing files Bhavin Patel 2024-07-29 15:53:38 -07:00
  • 3a28a02cfe Branch was auto-updated. Bhavin Patel 2024-07-29 15:57:42 -05:00
  • ff5d658283 Branch was auto-updated. Bhavin Patel 2024-07-29 15:57:42 -05:00
  • 63add27a8d Branch was auto-updated. Bhavin Patel 2024-07-29 15:57:41 -05:00
  • 97b6907d55 update contentctl yaml to 4.37.0 Bhavin Patel 2024-07-29 13:57:24 -07:00
  • 62ca4f679c Branch was auto-updated. Bhavin Patel 2024-07-29 15:43:00 -05:00
  • 273eab23c0 Branch was auto-updated. Bhavin Patel 2024-07-29 15:42:59 -05:00
  • a28c1e363f Branch was auto-updated. Bhavin Patel 2024-07-29 15:42:59 -05:00
  • 2352f4c0d5 Merge pull request #3064 from splunk/sysmon_event_id_1 Bhavin Patel 2024-07-29 15:42:44 -05:00
  • 327724d741 minor sysmon datasource update Bhavin Patel 2024-07-29 13:27:02 -07:00
  • df36e340e3 Branch was auto-updated. Bhavin Patel 2024-07-29 13:09:54 -05:00
  • 5a6afdee3b Branch was auto-updated. Bhavin Patel 2024-07-29 13:09:53 -05:00
  • fdf6bb6082 Branch was auto-updated. Bhavin Patel 2024-07-29 13:09:52 -05:00
  • f5a3d3c7c2 Merge pull request #3063 from splunk/azure_lookup_datestamp Bhavin Patel 2024-07-29 13:09:29 -05:00
  • c5f0ade2bc Formatting and observables ljstella 2024-07-29 10:55:18 -05:00
  • c958971fcc Merge branch 'develop' into nterl0k-T1110.003-generic-password-spray Lou Stella 2024-07-29 10:47:15 -05:00
  • 8d002b39ff Updated message field ljstella 2024-07-29 10:32:32 -05:00
  • 462ab1971a Merge branch 'develop' into nterl0k-T1110.003-NTLM-bruteforce Lou Stella 2024-07-29 10:10:26 -05:00
  • 6d74d225e9 Datestamped lookup ljstella 2024-07-29 08:38:55 -05:00
  • d5e60e50c3 remove more extra keys from detections pyth0n1c 2024-07-26 18:58:33 -07:00
  • bcb3eee365 remove risk_score, update_timestamp, and some unused tags from baselines pyth0n1c 2024-07-26 18:50:41 -07:00
  • 66d9355fbe set extra='forbid' to catch erroneously included fields in high level ymls. pyth0n1c 2024-07-26 17:33:07 -07:00
  • 469df2ff11 Branch was auto-updated. Bhavin Patel 2024-07-26 14:35:28 -05:00
  • 03c2c01b2e Branch was auto-updated. Bhavin Patel 2024-07-26 14:35:27 -05:00
  • 2a2182ec2f Merge pull request #3030 from nterl0k/nterl0k-rmm_must_die_update_1 Bhavin Patel 2024-07-26 14:35:10 -05:00