Commit Graph

  • 4b651364a4 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-20 11:47:37 -07:00
  • c81a4879ca Merge pull request #2848 from splunk/release_v4.12.0 v4.12.0 Bhavin Patel 2023-09-20 11:47:13 -07:00
  • 76ee731e87 Update juniper_networks_remote_code_execution_exploit_detection.yml Michael Haag 2023-09-20 12:06:59 -06:00
  • e5bd4447d2 update score Bhavin Patel 2023-09-20 09:42:49 -07:00
  • eae9147b3d remove dynamic risk score Bhavin Patel 2023-09-20 09:40:12 -07:00
  • b755851d40 updates for failued searches Bhavin Patel 2023-09-19 15:57:43 -07:00
  • 9638d6de53 remove wrong file Bhavin Patel 2023-09-19 15:27:12 -07:00
  • 50d19ab56d updating moar Bhavin Patel 2023-09-19 15:26:01 -07:00
  • 1d35e00366 testing a change for sysmon Bhavin Patel 2023-09-19 15:17:24 -07:00
  • 8a8f5949e5 updating type Bhavin Patel 2023-09-19 14:35:11 -07:00
  • 37d89888a9 adding description mvelazco 2023-09-19 16:40:15 -04:00
  • 6102e44a9d O365 Advanced Audit Disabled mvelazco 2023-09-19 13:56:05 -04:00
  • 82b1651668 Update windows_fileless_storage_via_registry.yml tccontre 2023-09-19 11:38:39 +02:00
  • 6db976f90c Update windows_disable_or_modify_tools_via_taskkill.yml tccontre 2023-09-19 10:59:23 +02:00
  • d6c314af41 Update windows_disable_or_modify_tools_via_taskkill.yml tccontre 2023-09-19 10:55:21 +02:00
  • 36f9391857 Update windows_disable_or_modify_tools_via_taskkill.yml tccontre 2023-09-19 10:52:57 +02:00
  • 677b3313fa Update windows_time_based_evasion.yml tccontre 2023-09-19 10:52:03 +02:00
  • b3d34a5bef njrat2 tccontre 2023-09-19 10:43:13 +02:00
  • 7aa6020ad9 fix search formatting pyth0n1c 2023-09-18 13:09:11 -07:00
  • e68a8a7145 fix dataset links pyth0n1c 2023-09-18 08:23:40 -07:00
  • 0d91f17892 fix search typos pyth0n1c 2023-09-18 07:44:25 -07:00
  • 97019576b0 Fix missing macro pyth0n1c 2023-09-18 07:38:30 -07:00
  • 90e2bc27ee merged with develop Patrick 2023-09-18 08:50:10 +02:00
  • db69bf0060 Merge pull request #2846 from splunk/fix-automated-enrichment Bhavin Patel 2023-09-15 14:52:57 -07:00
  • 6098afb440 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-15 14:36:00 -07:00
  • 63c9384624 Merge pull request #2851 from splunk/TR-2409 Bhavin Patel 2023-09-15 14:35:58 -07:00
  • f0666c4282 Merge pull request #2850 from splunk/Edit_How_To_Implement Bhavin Patel 2023-09-15 14:35:36 -07:00
  • d429ccd9fb Merge branch 'release_v4.12.0' into TR-2409 Bhavin Patel 2023-09-15 13:48:03 -07:00
  • 47ec8dbbdd fixes Bhavin Patel 2023-09-15 13:46:33 -07:00
  • fdb4417077 Merge branch 'release_v4.12.0' into Edit_How_To_Implement Bhavin Patel 2023-09-15 12:52:51 -07:00
  • e06cfa133d Edit how_to_implement for Endpoint.Processes Gowthamaraj rajendran 2023-09-15 10:58:38 -07:00
  • dacd82df4e Branch was auto-updated. srv-rr-gh-researchbt 2023-09-14 15:05:14 -07:00
  • ec9e45ce5b Merge pull request #2836 from splunk/AD_TR_3271 Bhavin Patel 2023-09-14 15:04:58 -07:00
  • a0f7f081e1 remove macro Bhavin Patel 2023-09-14 14:29:45 -07:00
  • df48560256 spl fixes Bhavin Patel 2023-09-14 14:02:06 -07:00
  • 1edd30be97 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-14 13:49:43 -07:00
  • f5ab746d29 Merge pull request #2810 from splunk/duplicate_2716 Bhavin Patel 2023-09-14 13:49:22 -07:00
  • e623806a7a minor fixes mvelazco 2023-09-14 15:45:05 -04:00
  • 5497c4ba03 new detection mvelazco 2023-09-14 13:11:33 -04:00
  • 5fb03b31b4 fix typo mvelazco 2023-09-14 12:16:39 -04:00
  • c4a7ae08a0 associated datasets with detections pyth0n1c 2023-09-13 17:36:26 -07:00
  • 73dfe5d8de Merge pull request #2847 from splunk/headless-horseman Bhavin Patel 2023-09-13 14:35:56 -07:00
  • 69f552393a Update certutil_with_decode_argument.yml Bhavin Patel 2023-09-13 14:32:50 -07:00
  • 4abb1eafe8 Update windows_ad_privileged_object_access_activity.yml Bhavin Patel 2023-09-13 14:00:42 -07:00
  • c6b398bd73 Update windows_ad_abnormal_object_access_activity.yml Bhavin Patel 2023-09-13 13:58:28 -07:00
  • 59e0e8601e Initial commit of draft searches before adding datasets pyth0n1c 2023-09-13 13:17:58 -07:00
  • 0c2ee7d288 njrat tccontre 2023-09-13 11:25:18 +02:00
  • f310833637 Merge pull request #2804 from ericli-splunk/ericli-snow-typo Bhavin Patel 2023-09-12 17:13:53 -07:00
  • 439cf218eb Update SPL Gowthamaraj rajendran 2023-09-12 17:07:34 -07:00
  • fbc808c1e3 Update windows_ad_privileged_object_access_activity.yml Bhavin Patel 2023-09-12 14:41:57 -07:00
  • 1cf276183d Update windows_ad_abnormal_object_access_activity.yml Bhavin Patel 2023-09-12 14:41:13 -07:00
  • 6a3c737845 edit macro Gowthamaraj rajendran 2023-09-12 14:39:44 -07:00
  • f12ba109e7 Update CIM, add macros Gowthamaraj rajendran 2023-09-12 14:14:10 -07:00
  • 64cf65a0c9 Merge pull request #2756 from splunk/Splunk_Attack_Analyzer_Dynamic_Analysis_Fix_Bug Bhavin Patel 2023-09-12 12:48:06 -07:00
  • b2fd265afb Merge pull request #2834 from splunk/ba_spec_update Bhavin Patel 2023-09-11 17:30:28 -07:00
  • f5b9e60ad1 Merge pull request #2803 from ericli-splunk/ericli-jira-playbook Bhavin Patel 2023-09-11 17:21:21 -07:00
  • 09ba97b0e4 Merge pull request #2817 from splunk/observables_set_4 Bhavin Patel 2023-09-11 17:19:12 -07:00
  • 36feda3d3a Merge pull request #2816 from splunk/observables_set_3 Bhavin Patel 2023-09-11 17:18:46 -07:00
  • d204e47cd1 Merge pull request #2815 from splunk/observables_set_2 Bhavin Patel 2023-09-11 17:18:21 -07:00
  • 280bd3a03b Merge pull request #2814 from splunk/observables_set Bhavin Patel 2023-09-11 17:17:57 -07:00
  • c124c0b81e Merge pull request #2818 from splunk/observables_set_5 Bhavin Patel 2023-09-11 17:17:28 -07:00
  • 24e287210d Merge pull request #2819 from splunk/observables_set_6 Bhavin Patel 2023-09-11 17:16:58 -07:00
  • 5126cf3393 Merge pull request #2845 from splunk/smb_mltk Bhavin Patel 2023-09-11 17:16:04 -07:00
  • 8fd50e0320 adding CVE Bhavin Patel 2023-09-11 17:13:40 -07:00
  • 9ab7703293 Added Contributors Gowthamaraj rajendran 2023-09-11 15:13:54 -07:00
  • f2b06795a6 fixes Michael Haag 2023-09-11 13:56:10 -06:00
  • e743b6a4d7 Update filter Gowthamaraj rajendran 2023-09-11 11:04:20 -07:00
  • 545dcb7201 Rename File Name according to the Convention Gowthamaraj rajendran 2023-09-11 10:42:21 -07:00
  • b039b3e929 The Haagless Horseman headless-horseman Michael Haag 2023-09-11 11:20:03 -06:00
  • 3daa1cef5d updating detections mvelazco 2023-09-11 11:33:47 -04:00
  • cd6b8bc7ba Fixed automated enrichment to reference renamed playbooks Kelby Shelton 2023-09-08 14:20:10 -05:00
  • 566b6b54ea update baseline time and text Bhavin Patel 2023-09-08 10:13:28 -07:00
  • b7c54ed489 adding O365 Mailbox Inbox Folder Shared with All Users mvelazco 2023-09-07 16:36:20 -04:00
  • 5cd495b96a adding O365 Application Registration Owner Added mvelazco 2023-09-07 12:25:01 -04:00
  • 3f6b80bb32 Merge branch 'o365_detections' of github.com:splunk/security_content into o365_detections mvelazco 2023-09-06 15:08:31 -04:00
  • 048675b750 adding admin consent detection mvelazco 2023-09-06 15:08:29 -04:00
  • 7f8822f754 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:09 -07:00
  • 237623e416 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:04 -07:00
  • 0734bf9890 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:03 -07:00
  • 055e3887ac Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:02 -07:00
  • 3373772442 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:01 -07:00
  • 7a36bf53c9 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:54:00 -07:00
  • 0fef71b902 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:58 -07:00
  • 43875bc544 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:57 -07:00
  • c7e4ad46c7 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:57 -07:00
  • c52769b6b5 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:56 -07:00
  • ff47f5e30e Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:54 -07:00
  • 7d9a97ce06 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:53 -07:00
  • 32bf3d0b90 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:52 -07:00
  • 39a10101e0 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-06 08:53:51 -07:00
  • 40894a1942 Merge pull request #2831 from splunk/website-improvements update_status_experimental_to_validation_ba_srs P4T12ICK 2023-09-06 17:53:31 +02:00
  • f3876753bd Update dataset Gowthamaraj rajendran 2023-09-05 16:30:23 -07:00
  • 79c0a731d7 Merge pull request #2839 from splunk/dependabot/pip/gitpython-3.1.33 dependabot[bot] 2023-09-05 22:43:04 +00:00
  • c8a8a3436b Merge pull request #2842 from splunk/dependabot/pip/jsonschema-4.19.0 dependabot[bot] 2023-09-05 22:42:25 +00:00
  • 78fcdd9d94 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:36 -07:00
  • 6e700bbb53 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:35 -07:00
  • a54d9cbc02 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:34 -07:00
  • a0057524a1 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:33 -07:00
  • cbbe67b0b5 Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:33 -07:00
  • b5d11205ea Branch was auto-updated. srv-rr-gh-researchbt 2023-09-05 15:35:32 -07:00