Commit Graph

  • bde912d439 execution of file with multiple extensions: fixing rtf.exe (#3778) Jake Enea 2025-11-12 19:32:08 -05:00
  • 368b774e42 Updated TAs patel-bhavin 2025-11-12 06:59:45 +00:00
  • c69b8535c2 Updated TAs auto-ta-update-446 patel-bhavin 2025-11-11 06:59:42 +00:00
  • e42da6eaf3 Automated Splunk TA Update 440 (#3761) v5.18.0 Bhavin Patel 2025-11-10 12:24:06 -08:00
  • 3bdf79048d Updated TAs auto-ta-update-445 patel-bhavin 2025-11-10 06:59:27 +00:00
  • afc5aa7040 Updated TAs auto-ta-update-444 patel-bhavin 2025-11-09 06:58:15 +00:00
  • 1c77b8f2cb Updated TAs auto-ta-update-443 patel-bhavin 2025-11-08 06:58:28 +00:00
  • fcf1275e96 castlerat (#3750) strt_bot_82413236 Br3akp0int 2025-11-07 20:08:44 +01:00
  • 50aeecdccb Updated TAs auto-ta-update-442 patel-bhavin 2025-11-07 06:59:03 +00:00
  • 9663e97c73 updating app to 9.1.0 test_svc Bhavin Patel 2025-11-06 15:21:37 -08:00
  • 136c5a0981 testing Bhavin Patel 2025-11-06 13:48:58 -08:00
  • 27ff690371 Updated TAs auto-ta-update-441 patel-bhavin 2025-11-06 06:59:30 +00:00
  • 5b8befee38 Removed grouping by dest (#3759) lyonheart14 2025-11-05 13:17:48 -06:00
  • d1a15f9e91 Ollama TA (#3757) Bhavin Patel 2025-11-05 09:50:50 -08:00
  • 22ce4b64bd Add detection: Credential Dumping via Symlink to Shadow Copy New strt_bot_10897866 P4T12ICK 2025-11-05 18:23:33 +01:00
  • a1e6cc0678 Add detection: Credential Dumping via Symlink to Shadow Copy New strt_bot_95690688 P4T12ICK 2025-11-05 14:00:00 +01:00
  • d401d3a33b updating raw log (#3756) strt_bot_36988932 Bhavin Patel 2025-11-04 13:17:53 -08:00
  • bd66e7a1d3 remove TA (#3755) Bhavin Patel 2025-11-04 11:05:19 -08:00
  • 6445d22cac Add detection: Credential Dumping via Symlink to Shadow Copy New strt_bot_62921141 P4T12ICK 2025-11-04 11:05:22 +01:00
  • a384fc1279 Add detection: Credential Dumping via Symlink to Shadow Copy strt_bot_74190425 P4T12ICK 2025-11-03 16:45:57 +01:00
  • cb7cda0a46 Add detection: Credential Dumping via Symlink to Shadow Copy strt_bot_20960153 P4T12ICK 2025-11-03 16:40:04 +01:00
  • c664c282b9 Merge pull request #3748 from splunk/dependabot/github_actions/actions/upload-artifact-5 Lou Stella 2025-10-30 12:36:44 -05:00
  • 6f3c42cac5 Bump actions/upload-artifact from 4 to 5 dependabot[bot] 2025-10-30 17:30:15 +00:00
  • c5413e93f2 updating version and removing detections (#3749) Bhavin Patel 2025-10-30 10:29:04 -07:00
  • 437a5cdf62 revert - Splunk Add-on for Microsoft Security (#3747) v5.17.0 Bhavin Patel 2025-10-27 15:38:58 -07:00
  • d2ca19aab5 detection_fixed (#3746) Br3akp0int 2025-10-27 18:23:56 +01:00
  • 58bf9a1bc8 WSUSpect in Custody: CVE-2025-59287 (#3743) Michael Haag 2025-10-27 10:48:44 -06:00
  • 9fc8942993 New Rules & Updates - Oct 25 (#3726) Nasreddine Bencherchali 2025-10-24 23:19:48 +02:00
  • 0227a4f5f1 Add Oracle Exploitation Snort Coverage (#3742) Nasreddine Bencherchali 2025-10-23 23:49:04 +02:00
  • 7c092c7eb6 HTTP Request Smuggling (#3731) Raven Tait 2025-10-21 17:08:57 -04:00
  • 66aa9e9232 Duplicate - 3737 (#3738) Bhavin Patel 2025-10-21 12:42:28 -07:00
  • 7b9274f9fb Scattered Lapsus$ Hunters (#3724) Michael Haag 2025-10-21 12:27:25 -06:00
  • 1286d0fcd8 ctl_bump (#3734) Bhavin Patel 2025-10-17 12:25:15 -07:00
  • 23ccb3855b updating yaml version_bumnps Bhavin Patel 2025-10-17 11:30:52 -07:00
  • 22da3767c5 version bumps (#3732) Bhavin Patel 2025-10-17 11:15:52 -07:00
  • f79a6b11ea version bumps Bhavin Patel 2025-10-17 10:57:35 -07:00
  • a4ef2443cd appinspect failing fixes data_source_bug_fix P4T12ICK 2025-10-17 07:49:47 +02:00
  • 438aa44e6d data source improvements P4T12ICK 2025-10-17 07:40:10 +02:00
  • a548ed769a Hellcat United (#3723) Michael Haag 2025-10-16 17:53:02 -06:00
  • 9ebe647494 remove duplicate input type Bhavin Patel 2025-10-15 19:10:59 -07:00
  • 89a9a1cc73 updating various files and added commented sections for other detections Bhavin Patel 2025-10-15 18:58:17 -07:00
  • 8446045730 updating yaml Bhavin Patel 2025-10-15 14:54:17 -07:00
  • 5050291eea mionr Bhavin Patel 2025-10-15 14:53:14 -07:00
  • 7356b396a5 updating structure Bhavin Patel 2025-10-15 14:42:36 -07:00
  • f7526fa052 adding skelatons Bhavin Patel 2025-10-15 13:56:41 -07:00
  • 704fdd68ae adding skelatons Bhavin Patel 2025-10-15 13:56:36 -07:00
  • 64ed5bb1e8 APT 37 and The No Good Rustonotto (#3686) v5.16.0 Michael Haag 2025-10-13 14:54:03 -06:00
  • 0bcb54b6f9 Ollama TA detections (#3710) Rod Soto 2025-10-13 15:54:37 -04:00
  • 6cf5b0f8f6 Copilot based Detections (#3693) Rod Soto 2025-10-13 15:14:09 -04:00
  • 547be58923 Update windows_ad_self_dacl_assignment.yml (#3721) Nasreddine Bencherchali 2025-10-13 18:30:50 +02:00
  • 21ee673940 Fix Issues & Updates (#3705) Nasreddine Bencherchali 2025-10-13 18:18:21 +02:00
  • ae022339ac Remove manual test (#3717) Bhavin Patel 2025-10-10 11:51:50 -07:00
  • a52d560c80 lokibot (#3701) Br3akp0int 2025-10-10 20:32:18 +02:00
  • e41bd98cb9 fix_net_profile_analytic (#3689) Br3akp0int 2025-10-10 19:20:14 +02:00
  • 86f5ad09e2 Merge pull request #3719 from splunk/auto-ta-update-414 Nasreddine Bencherchali 2025-10-10 11:39:36 +02:00
  • 5f36e1ea07 Updated TAs patel-bhavin 2025-10-10 06:57:53 +00:00
  • 7cb7c973cf bump contentctl version to latest (#3718) pyth0n1c 2025-10-09 15:46:34 -07:00
  • 188099c364 Merge pull request #3715 from splunk/auto-ta-update-413 Bhavin Patel 2025-10-09 08:37:24 -07:00
  • 73097a131f Updated TAs patel-bhavin 2025-10-09 06:58:04 +00:00
  • 1a9c8ffbd6 Merge pull request #3713 from splunk/auto-ta-update-412 Lou Stella 2025-10-08 08:13:50 -05:00
  • 50284777f7 Updated TAs patel-bhavin 2025-10-08 06:57:56 +00:00
  • 64a821213e Merge pull request #3712 from splunk/auto-ta-update-411 Bhavin Patel 2025-10-07 10:04:27 -07:00
  • 96cfc3ee82 Updated TAs patel-bhavin 2025-10-07 06:58:20 +00:00
  • 342f49f82d Merge pull request #3711 from splunk/auto-ta-update-410 Bhavin Patel 2025-10-06 09:21:16 -07:00
  • 807bd7730e Updated TAs patel-bhavin 2025-10-06 06:58:11 +00:00
  • e7bb08b488 Updated TAs auto-ta-update-409 patel-bhavin 2025-10-05 06:57:59 +00:00
  • 3413f60a4d Updated TAs auto-ta-update-408 patel-bhavin 2025-10-04 06:58:05 +00:00
  • 5b9a84c3f0 Merge pull request #3707 from splunk/auto-ta-update-406 Bhavin Patel 2025-10-02 09:27:31 -07:00
  • 4f4485d8bd Updated TAs patel-bhavin 2025-10-02 06:58:12 +00:00
  • 60060eda68 Merge pull request #3688 from splunk/issue_2980 Bhavin Patel 2025-10-01 11:46:08 -07:00
  • 55980f5867 Merge branch 'develop' into issue_2980 Bhavin Patel 2025-10-01 11:45:03 -07:00
  • b156c3607a Merge pull request #3683 from splunk/ctl_515 Bhavin Patel 2025-10-01 11:44:38 -07:00
  • 3e409200b2 Updated TAs auto-ta-update-405 patel-bhavin 2025-10-01 06:58:22 +00:00
  • facbcbecc2 remove manual nix_ta_test Bhavin Patel 2025-09-30 12:15:34 -07:00
  • 47f78a4836 updting version Bhavin Patel 2025-09-30 12:13:59 -07:00
  • e6cb8bc384 Merge branch 'develop' into ctl_515 Bhavin Patel 2025-09-30 11:57:33 -07:00
  • 68e7778b8a Update azure_ad_multi_source_failed_authentications_spike.yml Bhavin Patel 2025-09-29 14:45:01 -07:00
  • a64e29cbcc Merge branch 'develop' into issue_2980 Bhavin Patel 2025-09-29 14:44:43 -07:00
  • dcc0850ba3 Merge pull request #3679 from splunk/promptlock Bhavin Patel 2025-09-29 13:54:28 -07:00
  • 52b42c0da9 Merge branch 'develop' into promptlock Bhavin Patel 2025-09-29 13:31:36 -07:00
  • 57afb6b9b7 Merge pull request #3691 from splunk/fix-issue-3690 Bhavin Patel 2025-09-29 13:30:41 -07:00
  • 55577a6e56 Merge branch 'develop' into fix-issue-3690 Bhavin Patel 2025-09-29 12:57:48 -07:00
  • 8695fc5315 Version Update Bhavin Patel 2025-09-29 12:19:29 -07:00
  • 6721794934 Update windows_process_execution_in_temp_dir.yml Bhavin Patel 2025-09-29 12:11:26 -07:00
  • 889a9e4dc1 Update cisco_nvm___curl_execution_with_insecure_flags.yml Bhavin Patel 2025-09-29 12:11:02 -07:00
  • afb75a6bac Merge branch 'develop' into ctl_515 Bhavin Patel 2025-09-29 12:07:09 -07:00
  • 3784436646 Merge branch 'develop' into promptlock Bhavin Patel 2025-09-29 12:06:29 -07:00
  • 3514a3e979 Merge pull request #3687 from splunk/GhostRedirector Bhavin Patel 2025-09-29 12:02:51 -07:00
  • 8b2056475f Merge branch 'develop' into GhostRedirector Bhavin Patel 2025-09-29 11:34:54 -07:00
  • 65da41c221 Merge branch 'develop' into fix-issue-3690 Bhavin Patel 2025-09-29 11:20:58 -07:00
  • eb4400c1d1 Merge pull request #3700 from splunk/auto-ta-update-403 Bhavin Patel 2025-09-29 11:20:41 -07:00
  • b12935d33c Updated TAs patel-bhavin 2025-09-29 06:59:13 +00:00
  • 938375aade Updated TAs auto-ta-update-402 patel-bhavin 2025-09-28 06:58:13 +00:00
  • c9d9f8e9c1 Updated TAs auto-ta-update-401 patel-bhavin 2025-09-27 06:58:00 +00:00
  • e76df2ee12 Updated TAs auto-ta-update-400 patel-bhavin 2025-09-26 06:57:54 +00:00
  • 0fbf9b9b8d Merge pull request #3696 from splunk/asa_story v5.15.2 Bhavin Patel 2025-09-25 18:29:51 -07:00
  • a1d2b73915 updating links Bhavin Patel 2025-09-25 18:23:04 -07:00
  • e51e23aab1 associating with new story Bhavin Patel 2025-09-25 18:19:34 -07:00
  • 8e631051fd Merge pull request #3695 from splunk/asa_public Jose Enrique Hernandez 2025-09-25 20:17:28 -04:00
  • 4d7faff280 link for debug logging Bhavin Patel 2025-09-25 16:35:50 -07:00