Nasreddine Bencherchali b87507b551 Update Suricata TA and Related Analytics (#3974) ...

* update suricata ta

* update analytics for new TA

* Update ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35078.yml

---------

Co-authored-by: Lou Stella <ljstella@gmail.com>

2026-03-28 10:09:22 +00:00

..

.gitkeep

adding gitkeep for empty folders

2025-03-17 18:04:26 -07:00

abnormally_high_number_of_cloud_infrastructure_api_calls.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

abnormally_high_number_of_cloud_instances_destroyed.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

abnormally_high_number_of_cloud_instances_launched.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

abnormally_high_number_of_cloud_security_group_api_calls.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

attempt_to_add_certificate_to_untrusted_store.yml

bumped version numbers and dates

2026-03-26 08:01:41 +01:00

chcp_command_execution.yml

Improved detections based on telemetry.

2026-03-26 07:46:49 +01:00

detect_dga_domains_using_pretrained_model_in_dsdl.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

dns_query_length_outliers___mltk.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

ivanti_sentry_authentication_bypass.yml

Update Suricata TA and Related Analytics (#3974)

2026-03-28 10:09:22 +00:00

linux_docker_privilege_escalation.yml

Split and tweak of linux_docker_privilege_escalation (#3929)

2026-03-10 12:46:59 +05:30

potentially_malicious_code_on_commandline.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

processes_launching_netsh.yml

bumped version numbers and dates

2026-03-26 08:01:41 +01:00

sc_exe_manipulating_windows_services.yml

bumped version numbers and dates

2026-03-26 08:01:41 +01:00

smb_traffic_spike___mltk.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

unusually_long_command_line___mltk.yml

Deprecate MLTK detections (#3922)

2026-03-16 14:59:40 +01:00

windows_excel_activemicrosoftapp_child_process.yml

Fix Issue #3950 (#3957)

2026-03-16 16:18:01 +01:00