Code

Crowdstrike FDR#745

Code

Merged

calkim-panther merged 26 commits intomasterpanther-labs/panther-analysis:masterfrom crowdstrike_fdrpanther-labs/panther-analysis:crowdstrike_fdrCopy head branch name to clipboardMay 10, 2023

+952-2

Commits

Commits on Apr 24, 2023

• Additional crowdstrike detections

  jzandona

  committed
  c6978d7

  Copy full SHA for c6978d7

Commits on Apr 28, 2023

• Crowdstrike FDR UDM

  jzandona

  committed
  2c0d63e

  Copy full SHA for 2c0d63e

• updated udm

  jzandona

  committed
  8a2eaf7

  Copy full SHA for 8a2eaf7

Commits on May 1, 2023

• added get_process_name

  jzandona

  committed
  62862c2

  Copy full SHA for 62862c2

• test cases and tuning

  jzandona

  committed
  0a5864f

  Copy full SHA for 0a5864f

• minor updates to yml

  jzandona

  committed
  f59ca93

  Copy full SHA for f59ca93

• initial aws dns data model

  jzandona

  committed
  7e50a2c

  Copy full SHA for 7e50a2c

• initial data model

  jzandona

  committed
  eaa11cd

  Copy full SHA for eaa11cd

• added defang function

  jzandona

  committed
  10d2c6c

  Copy full SHA for 10d2c6c

• corrected method

  jzandona

  committed
  749b4eb

  Copy full SHA for 749b4eb

• new rules

  jzandona

  committed
  5986a14

  Copy full SHA for 5986a14

• linting

  jzandona

  committed
  de3c240

  Copy full SHA for de3c240

• removing connection to malicious site

  jzandona

  committed
  2f2e3a8

  Copy full SHA for 2f2e3a8

• remove suspicious downloads

  jzandona

  committed
  ddd601f

  Copy full SHA for ddd601f

• added process context

  jzandona

  committed
  758b024

  Copy full SHA for 758b024

• linting

  jzandona

  committed
  581ed34

  Copy full SHA for 581ed34

• small fix

  jzandona

  committed
  52f9da0

  Copy full SHA for 52f9da0

• Merge branch 'master' into crowdstrike_fdr

  jzandona

  committed
  0ece92d

  Copy full SHA for 0ece92d

• moved to standard directory

  jzandona

  committed
  f7a10ac

  Copy full SHA for f7a10ac

• Merge branch 'master' into crowdstrike_fdr

  jzandona

  authored
  be91381

  Copy full SHA for be91381

• linting

  jzandona

  committed
  24340e2

  Copy full SHA for 24340e2

Commits on May 10, 2023

• updated base64 regex

  jzandona

  committed
  febed99

  Copy full SHA for febed99

• update logic and title

  jzandona

  committed
  21fc4c5

  Copy full SHA for 21fc4c5

• updated title

  jzandona

  committed
  90bea5e

  Copy full SHA for 90bea5e

• linting

  jzandona

  committed
  49ab017

  Copy full SHA for 49ab017

• Merge branch 'master' into crowdstrike_fdr

  jzandona

  authored
  350d316

  Copy full SHA for 350d316