Commit Graph

  • 478ecc0a4b Updated TAs (#3856) Bhavin Patel 2026-01-10 01:53:37 +05:30
  • a56f85f2a7 Merge pull request #3843 from splunk/add_henry_allow_rt_schema_updates Lou Stella 2026-01-09 13:38:03 -06:00
  • 0c7bd266b4 Merge branch 'develop' into add_henry_allow_rt_schema_updates pyth0n1c 2026-01-09 11:35:46 -08:00
  • b8ac2c2b8e migrate deprecation info Eric McGinnis 2026-01-09 11:17:23 -08:00
  • beef715f8e Merge branch 'develop' into fbd_v1 fbd_v1 Bhavin Patel 2026-01-09 14:29:15 +05:30
  • 1360c8df28 Merge branch 'develop' into yml_validation_cleanups Bhavin Patel 2026-01-09 14:25:37 +05:30
  • aca791beef remove mitre lookup as an apptemplate file so it can later be added as just a normal csvlookup. Eric McGinnis 2026-01-08 16:15:02 -08:00
  • bc46ab2f27 Remove the default.xml due to conflict. It is not required. Eric McGinnis 2026-01-08 15:46:21 -08:00
  • 3ca19718c6 minor changes to deprecation_mapping.YML‎ (#3855) Bhavin Patel 2026-01-08 16:32:53 +05:30
  • edd6db09d9 Add New Analytics Covering SesameOp and PromptFlux (#3827) Br3akp0int 2026-01-08 00:58:33 +01:00
  • 0f5eeb8ceb Updated TAs (#3854) Bhavin Patel 2026-01-07 10:17:04 +05:30
  • 498a80d469 Detections for default user agents (#3842) Raven Tait 2026-01-06 23:04:04 -05:00
  • af847b6343 Update Driver and Extensionless Files Related Detections (#3846) Br3akp0int 2026-01-06 02:02:25 +01:00
  • 6d1b940663 Cisco Isovalent - Add first batch of new detections (#3706) Bhavin Patel 2026-01-06 05:54:39 +05:30
  • ab6a3f046e Merge pull request #3852 from splunk/dependabot/github_actions/actions/checkout-6 Lou Stella 2025-12-23 10:12:26 -06:00
  • 3f62a1873f Merge branch 'develop' into dependabot/github_actions/actions/checkout-6 Lou Stella 2025-12-23 10:08:37 -06:00
  • 497301220e Merge pull request #3851 from splunk/dependabot/github_actions/actions/upload-artifact-6 Lou Stella 2025-12-23 10:07:50 -06:00
  • e2147cd6c4 Bump actions/checkout from 5 to 6 dependabot[bot] 2025-12-22 23:09:39 +00:00
  • 62403fcde4 Bump actions/upload-artifact from 5 to 6 dependabot[bot] 2025-12-22 23:09:30 +00:00
  • 3b49316ebd Merge branch 'develop' into yml_validation_cleanups pyth0n1c 2025-12-22 13:21:53 -08:00
  • 0f1862c4eb add deprecation info to one detection Eric McGinnis 2025-12-22 13:21:40 -08:00
  • 7fe10bbef8 Move Unused Macros to Deprecate Sub-Folder (#3847) Nasreddine Bencherchali 2025-12-22 14:01:09 +01:00
  • cd961cac5b Updated TAs (#3849) Bhavin Patel 2025-12-21 23:50:09 +05:30
  • ada09b4742 Updated TAs auto-ta-update-485 patel-bhavin 2025-12-20 06:58:34 +00:00
  • 4e90912faf Updated TAs (#3845) Bhavin Patel 2025-12-19 21:10:10 +05:30
  • 49652d55f9 Add description and fix template names for response plans (#3844) henryy-splunk 2025-12-19 00:48:02 -08:00
  • 3d8f55a8f8 add henry and allow updates to the schema file as well pyth0n1c 2025-12-18 12:17:07 -08:00
  • 976c62383e Update Macro Usage (#3840) Nasreddine Bencherchali 2025-12-18 17:12:06 +01:00
  • 9fe76df136 accidentally removed security_domain from detection. removed filter macro that was part of baseline, but should not be Eric McGinnis 2025-12-17 11:48:57 -08:00
  • 30a6a9fb21 Add some missing products. I assume all these detections want to be for all 3 splunk products. Eric McGinnis 2025-12-17 11:46:11 -08:00
  • 2accf6560f Merge pull request #3838 from splunk/housekeeping/response-templates Lou Stella 2025-12-17 11:44:36 -06:00
  • def30e3ba3 Add codeowners for response templates ljstella 2025-12-17 12:25:42 -05:00
  • 5bed4a5f8f Update labeler config for Response Templates ljstella 2025-12-17 12:10:46 -05:00
  • 3953a43f05 Concept Shippable Response Plans (#3803) xqi-splunk 2025-12-16 13:00:20 -08:00
  • 2a219fe9b6 Bump actions/upload-artifact from 5 to 6 (#3837) dependabot[bot] 2025-12-16 18:28:24 +05:30
  • b616f6b87f Bump peter-evans/create-pull-request from 7 to 8 (#3836) dependabot[bot] 2025-12-16 18:22:07 +05:30
  • 9635667aac Fix Inspect CI - Bump analytic version (#3834) Bhavin Patel 2025-12-16 15:21:30 +05:30
  • 2bcff6573a Bump contentctl.yml to 5.20.0 (#3829) Bhavin Patel 2025-12-15 09:42:19 -08:00
  • 78d7f8cebd Updated TAs (#3832) Bhavin Patel 2025-12-12 06:06:49 -08:00
  • 61d302d922 Merge pull request #3825 from splunk/519_integration_fixes v5.19.0 Lou Stella 2025-12-09 06:36:27 -06:00
  • ecf54630c1 Merge branch 'develop' into 519_integration_fixes Nasreddine Bencherchali 2025-12-09 12:06:44 +01:00
  • 378879ae67 Updated TAs (#3826) Bhavin Patel 2025-12-09 03:06:36 -08:00
  • ef25edaeca Message formatting changes ljstella 2025-12-08 21:26:34 -05:00
  • 50fff2dc09 RBA Messages ljstella 2025-12-08 20:43:02 -05:00
  • abb24f5002 Merge pull request #3824 from splunk/uptoprod Lou Stella 2025-12-08 14:50:02 -06:00
  • 2da13ca0f0 Merge pull request #3823 from splunk/uptoprod Lou Stella 2025-12-08 14:38:09 -06:00
  • 8a1e1c1729 Update linux_suspicious_react_or_next_js_child_process.yml Nasreddine Bencherchali 2025-12-08 21:38:05 +01:00
  • 4aa1c0b5f9 Update linux_suspicious_react_or_next_js_child_process.yml Nasreddine Bencherchali 2025-12-08 21:35:33 +01:00
  • 6032db5edb Add tuoni content and named pipe detection (#3816) Raven Tait 2025-12-08 15:25:09 -05:00
  • 5dca2eab02 Add React2Shell Snort Mapping (#3822) Nasreddine Bencherchali 2025-12-08 20:45:54 +01:00
  • 4b60fecd8e Automated Splunk TA Update 473 (#3820) Bhavin Patel 2025-12-08 07:05:19 -08:00
  • 5d7c65d30a React2Shell Analytics (#3819) Nasreddine Bencherchali 2025-12-08 15:47:53 +01:00
  • 533e39c255 Merge pull request #3821 from splunk/update-snort-lookup Nasreddine Bencherchali 2025-12-08 15:25:56 +01:00
  • 431e06d6b8 Update detections/network/cisco_secure_firewall___intrusion_events_by_threat_activity.yml Nasreddine Bencherchali 2025-12-08 14:34:07 +01:00
  • 5e86aa2345 add lokibot Nasreddine Bencherchali 2025-12-08 14:06:28 +01:00
  • b3d3fee5ee re-order alphabetically Nasreddine Bencherchali 2025-12-08 13:55:27 +01:00
  • ce6fbc203d update snort lookup Nasreddine Bencherchali 2025-12-08 13:53:41 +01:00
  • 035cf54e37 Updated TAs auto-ta-update-472 patel-bhavin 2025-12-07 06:58:00 +00:00
  • d0ae2bda10 Updated TAs auto-ta-update-471 patel-bhavin 2025-12-06 06:57:57 +00:00
  • 731df609cf fix auditd PATH type detections (#3810) Nasreddine Bencherchali 2025-12-03 00:41:30 +01:00
  • d8ddca1a2d Merge branch 'develop' into fix_cwd_path_detections Nasreddine Bencherchali 2025-12-03 00:25:40 +01:00
  • 8cff5c05eb update descriptions Nasreddine Bencherchali 2025-12-03 00:23:36 +01:00
  • 064cbaef0d Internal horizontal port scan nmap iteration (#3802) Emil 2025-12-02 23:51:03 +01:00
  • 572a93567f add missing extension Nasreddine Bencherchali 2025-12-02 18:59:42 +01:00
  • ff4fda6445 update indentations and logic Nasreddine Bencherchali 2025-12-02 18:58:56 +01:00
  • 4a5ab34b37 Merge pull request #3813 from splunk/inspect_5.19 Nasreddine Bencherchali 2025-12-02 10:50:13 +01:00
  • 121be41015 Merge branch 'develop' into inspect_5.19 Bhavin Patel 2025-12-01 20:07:37 -08:00
  • 17f3101c03 updating versions Bhavin Patel 2025-12-01 18:10:06 -08:00
  • 59c872761b chore: user_agent field fix in both the Azure AD authentication detections. Minor spelling mistake fixes. (#3811) Thomas Macfarlane 2025-12-02 01:25:33 +01:00
  • ab35d310e8 fix_cwd_path_detections Teoderick Contreras 2025-11-28 09:33:10 +01:00
  • 0d47dd6127 fix_cwd_path_detections Teoderick Contreras 2025-11-27 15:36:14 +01:00
  • ac7dcfbb84 Merge pull request #3808 from splunk/auto-ta-update-462 Nasreddine Bencherchali 2025-11-27 12:33:37 +01:00
  • 9604770975 Updated TAs patel-bhavin 2025-11-27 06:59:55 +00:00
  • 8dc56a5db4 Updated TAs auto-ta-update-461 patel-bhavin 2025-11-26 06:59:25 +00:00
  • 442e815dad npm Supply Chain Compromise & Lifecycle Hook Abuse Detection (#3806) Michael Haag 2025-11-25 15:56:20 -07:00
  • 984e65062b Bump actions/checkout from 5 to 6 (#3804) dependabot[bot] 2025-11-24 15:56:11 -08:00
  • b53280a5e9 Rod- Suspicious Local LLM Frameworks (#3780) Rod Soto 2025-11-24 16:06:41 -05:00
  • 515d736c62 Add New ASA Analytics (#3794) Nasreddine Bencherchali 2025-11-21 23:50:18 +01:00
  • 888c2249e8 netsupport (#3798) Br3akp0int 2025-11-21 22:27:52 +01:00
  • 19d3c489fe CIM App name and Switch sourcetypes (#3799) Bhavin Patel 2025-11-21 08:33:33 -08:00
  • c3aaf7147b Merge pull request #3800 from splunk/auto-ta-update-456 Nasreddine Bencherchali 2025-11-21 16:31:43 +01:00
  • 50989c2650 Updated TAs patel-bhavin 2025-11-21 06:59:48 +00:00
  • 902d2cf325 Merge pull request #3797 from splunk/auto-ta-update-455 Nasreddine Bencherchali 2025-11-20 17:05:14 +01:00
  • 1bd5621d23 Updated TAs patel-bhavin 2025-11-20 06:58:48 +00:00
  • 4610e52c6e Add @nasbench as code owner (#3795) Nasreddine Bencherchali 2025-11-18 23:43:17 +01:00
  • 001a152933 NTLM Reflection via DNS Object SPN Spoofing (#3789) Raven Tait 2025-11-18 15:59:34 -05:00
  • 18df7bcd88 Merge branch 'develop' into fbd_v1 Bhavin Patel 2025-11-18 12:27:21 -08:00
  • 8e3a86dbea Appinspect on develop (#3792) Bhavin Patel 2025-11-17 14:32:47 -08:00
  • a03c06aaa9 Testing CI (#3791) Bhavin Patel 2025-11-17 12:28:49 -08:00
  • 312a4f37dc chore: bump contentctl.yml to 5.9.0 bump_contentctl_5.9.0 research bot 2025-11-14 19:51:00 +00:00
  • c1e0fbbe41 chore: bump contentctl.yml to 5.6.0 bump_contentctl_5.6.0 research bot 2025-11-14 17:26:37 +00:00
  • 6bf3fa8979 Suspicious mshta child process minor fixes (#3787) Emil 2025-11-14 17:49:56 +01:00
  • 206f28f1c7 Fixing typo in suspicious_ollama_activities.yml (#3783) James Hodgkinson 2025-11-14 11:14:15 +10:00
  • a81f9ba2c2 chore: bump contentctl.yml to 5.20.0 bump_contentctl_v5.19.0 research bot 2025-11-14 01:10:26 +00:00
  • 637e44267d Updated TAs (#3782) Bhavin Patel 2025-11-13 12:31:49 -08:00
  • e932cf6f89 Merge pull request #3781 from splunk/ctl_519 Lou Stella 2025-11-13 08:14:17 -06:00
  • ff1fa9987d Merge branch 'develop' into ctl_519 Bhavin Patel 2025-11-12 17:59:33 -08:00
  • 413314fd47 Merge branch 'develop' into auto-ta-update-447 auto-ta-update-447 Bhavin Patel 2025-11-12 17:55:41 -08:00
  • 075bd54bcf updating contentctl to 5.19 Bhavin Patel 2025-11-12 17:02:24 -08:00
  • 45c49654bc switching source and sourcetype (#3779) Bhavin Patel 2025-11-12 16:54:27 -08:00