Code

New Azure AD Detections#2799

Code

Closed

mvelazc0 wants to merge 91 commits intodevelopsplunk/security_content:developfrom TR_3232_azure_adsplunk/security_content:TR_3232_azure_adCopy head branch name to clipboard

+718-20

Commits

Commits on Aug 3, 2023

• adding new detection

  mvelazc0

  committed
  4e10322

  Copy full SHA for 4e10322

Commits on Aug 7, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  66b96a2

  Copy full SHA for 66b96a2

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  10610a9

  Copy full SHA for 10610a9

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  e25a5bb

  Copy full SHA for e25a5bb

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  730671f

  Copy full SHA for 730671f

Commits on Aug 8, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  eabcdde

  Copy full SHA for eabcdde

• update detections/cloud/azure_ad_device_code_authentication.yml

  gowthamarajr

  committed
  62d4818

  Copy full SHA for 62d4818

Commits on Aug 9, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  b72645a

  Copy full SHA for b72645a

• Edit SPL

  gowthamarajr

  committed
  a19575a

  Copy full SHA for a19575a

• Merge branch 'TR_3232_azure_ad' of https://github.com/splunk/security_content into TR_3232_azure_ad

  gowthamarajr

  committed
  d3c33ff

  Copy full SHA for d3c33ff

• Update SPL

  gowthamarajr

  committed
  92b7f39

  Copy full SHA for 92b7f39

• Update required fields

  gowthamarajr

  committed
  881722c

  Copy full SHA for 881722c

• Update SPL

  gowthamarajr

  committed
  b0b9f93

  Copy full SHA for b0b9f93

Commits on Aug 10, 2023

• Add info

  gowthamarajr

  committed
  00e0bef

  Copy full SHA for 00e0bef

Commits on Aug 17, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  4baee1c

  Copy full SHA for 4baee1c

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  67d0a05

  Copy full SHA for 67d0a05

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  5def886

  Copy full SHA for 5def886

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  185c123

  Copy full SHA for 185c123

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  930e559

  Copy full SHA for 930e559

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  6ce8631

  Copy full SHA for 6ce8631

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  8fa5bb6

  Copy full SHA for 8fa5bb6

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  78802d8

  Copy full SHA for 78802d8

Commits on Aug 18, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  66a28c6

  Copy full SHA for 66a28c6

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  c2bd3a5

  Copy full SHA for c2bd3a5

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  4b845c2

  Copy full SHA for 4b845c2

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  7f31e22

  Copy full SHA for 7f31e22

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  49c90e2

  Copy full SHA for 49c90e2

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  050cc96

  Copy full SHA for 050cc96

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  098abff

  Copy full SHA for 098abff

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  1852d8b

  Copy full SHA for 1852d8b

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  7505c95

  Copy full SHA for 7505c95

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  678eeec

  Copy full SHA for 678eeec

Commits on Aug 28, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  d46df79

  Copy full SHA for d46df79

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  5f6fd0d

  Copy full SHA for 5f6fd0d

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  e3305cd

  Copy full SHA for e3305cd

Commits on Aug 29, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  9e06eec

  Copy full SHA for 9e06eec

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  91709f4

  Copy full SHA for 91709f4

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  a0127be

  Copy full SHA for a0127be

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  4c583c6

  Copy full SHA for 4c583c6

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  ec0bb82

  Copy full SHA for ec0bb82

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  480dfdb

  Copy full SHA for 480dfdb

Commits on Aug 30, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  7e3bea8

  Copy full SHA for 7e3bea8

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  80389b2

  Copy full SHA for 80389b2

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  b3cc397

  Copy full SHA for b3cc397

Commits on Sep 1, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  dce66c8

  Copy full SHA for dce66c8

Commits on Sep 5, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  cbbe67b

  Copy full SHA for cbbe67b

Commits on Sep 6, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  ff47f5e

  Copy full SHA for ff47f5e

Commits on Sep 14, 2023

• new detection

  mvelazc0

  committed
  5497c4b

  Copy full SHA for 5497c4b

Commits on Sep 20, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  9538d20

  Copy full SHA for 9538d20

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  b13135b

  Copy full SHA for b13135b

Commits on Oct 4, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  1cc51a8

  Copy full SHA for 1cc51a8

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  ddd9780

  Copy full SHA for ddd9780

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  dd2b96f

  Copy full SHA for dd2b96f

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  de995b1

  Copy full SHA for de995b1

Commits on Oct 5, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  2b140c0

  Copy full SHA for 2b140c0

Commits on Oct 13, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  053e651

  Copy full SHA for 053e651

Commits on Oct 18, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  166eb75

  Copy full SHA for 166eb75

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  cb95a59

  Copy full SHA for cb95a59

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  5d86414

  Copy full SHA for 5d86414

Commits on Oct 25, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  321c040

  Copy full SHA for 321c040

• adding new detection

  mvelazc0

  committed
  d68a917

  Copy full SHA for d68a917

• update macro

  mvelazc0

  committed
  706f713

  Copy full SHA for 706f713

Commits on Oct 26, 2023

• updating detections

  mvelazc0

  committed
  92cf159

  Copy full SHA for 92cf159

• adding new detection

  mvelazc0

  committed
  dcc7081

  Copy full SHA for dcc7081

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  792e695

  Copy full SHA for 792e695

Commits on Oct 27, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  095838e

  Copy full SHA for 095838e

• adding detection

  mvelazc0

  committed
  b5acee8

  Copy full SHA for b5acee8

• updating macro. adding new detection.

  mvelazc0

  committed
  b4356da

  Copy full SHA for b4356da

• update sourcetype

  mvelazc0

  committed
  15453d5

  Copy full SHA for 15453d5

Commits on Oct 30, 2023

• new detection

  mvelazc0

  committed
  cff4168

  Copy full SHA for cff4168

• updates

  mvelazc0

  committed
  a62bde4

  Copy full SHA for a62bde4

Commits on Oct 31, 2023

• adding detection

  mvelazc0

  committed
  d2e1de3

  Copy full SHA for d2e1de3

• adding detection

  mvelazc0

  committed
  31d2d20

  Copy full SHA for 31d2d20

• update detection

  mvelazc0

  committed
  77b591f

  Copy full SHA for 77b591f

• Update azure_ad_multiple_denied_mfa_requests_for_user.yml

  mvelazc0

  committed
  1ff4ed0

  Copy full SHA for 1ff4ed0

Commits on Nov 1, 2023

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  8a0f56b

  Copy full SHA for 8a0f56b

• updating detections

  mvelazc0

  committed
  1741f91

  Copy full SHA for 1741f91

• Merge branch 'TR_3232_azure_ad' of github.com:splunk/security_content into TR_3232_azure_ad

  mvelazc0

  committed
  43f748d

  Copy full SHA for 43f748d

• Branch was auto-updated.

  srv-rr-gh-researchbt

  authored
  5f61268

  Copy full SHA for 5f61268

• Update azure_ad_multiple_failed_mfa_requests_for_user.yml

  mvelazc0

  committed
  7b501ac

  Copy full SHA for 7b501ac

• Merge branch 'TR_3232_azure_ad' of github.com:splunk/security_content into TR_3232_azure_ad

  mvelazc0

  committed
  e7b504d

  Copy full SHA for e7b504d

Commits on Nov 8, 2023

• add some testing

  pyth0n1c

  committed
  a08846e

  Copy full SHA for a08846e

• can't run poetry shell in github

  pyth0n1c

  committed
  304ae9a

  Copy full SHA for 304ae9a

• forgot to add checkout

  pyth0n1c

  committed
  7c76a97

  Copy full SHA for 7c76a97

• fix spacing

  pyth0n1c

  committed
  96d7006

  Copy full SHA for 96d7006

• Fix observable issues, unicode characters,

  Show description for 51a3b86
  pyth0n1c

  committed
  51a3b86

  Copy full SHA for 51a3b86

• More minor testing fixes

  pyth0n1c

  committed
  6d6a603

  Copy full SHA for 6d6a603

• fix pathing

  pyth0n1c

  committed
  f77422a

  Copy full SHA for f77422a

Commits on Nov 9, 2023

• adding new detection

  mvelazc0

  committed
  7776ce8

  Copy full SHA for 7776ce8

• update detection

  mvelazc0

  committed
  5070105

  Copy full SHA for 5070105

• updating hunting query

  mvelazc0

  committed
  8c0c057

  Copy full SHA for 8c0c057