Code

Prepare for v3.62.0#1338

Code

Merged

arielkr256 merged 49 commits intomainpanther-labs/panther-analysis:mainfrom releasepanther-labs/panther-analysis:releaseCopy head branch name to clipboardAug 27, 2024

+3,117-1,087

Commits

Commits on Jul 22, 2024

• add: new user created, password changed

  ben-githubs

  committed
  944da69

• add: Crowdstrike.UserDeleted

  ben-githubs

  committed
  4cae76b

• add: Crowdstrike.EphemeralUserAccount

  ben-githubs

  committed
  5caa1be

• abstract "turn audit keys to dictionary" away from "alert context"

  ben-githubs

  committed
  f5b63ff

• add: Crowdstrike.AdminRoleAssigned

  ben-githubs

  committed
  5f930be

Commits on Jul 24, 2024

• chore: formatting updates to python code

  ben-githubs

  committed
  d4381b7

Commits on Jul 26, 2024

• add: Crowdstrike.SingleIpAllowlisted

  ben-githubs

  committed
  6b6cb06

• add: Crowdstrike.AllowlistRemoved

  ben-githubs

  committed
  349a077

• edit: Crowdstrike.SingleIpAllowlisted detects updated allow lists as well

  ben-githubs

  committed
  b3a70a6

Commits on Aug 9, 2024

• Improve github webhook modified rule

  Show description for a9498ba
  geoffg-sentry

  committed
  a9498ba

• remove deprecated iocs and helper references

  arielkr256

  committed
  7bcec48

Commits on Aug 13, 2024

• remove deprecated ioc rules

  arielkr256

  committed
  c06b89f

• remove failing tests

  arielkr256

  committed
  9f207a6

• lint

  arielkr256

  committed
  a12ba46

• edit: update Crowdstrike.UserPasswordChange with dynamic severity

  ben-githubs

  committed
  b2eb2af

• edit: minor fixes and suggestions raised by Ariel

  ben-githubs

  committed
  0d0d4db

• add: Crowdstrike.IpAllowlistChanged

  ben-githubs

  committed
  dc3d432

Commits on Aug 14, 2024

• fix: minor changes to str_to_list and Crowdstrike.IpAllowlistChanged

  ben-githubs

  committed
  a66a12f

• Merge pull request #1325 from panther-labs/remove-deprecated

  Show description for 4299b50
  arielkr256

  authored
  4299b50

Commits on Aug 15, 2024

• add: Crowdstrike.NewAdminUserCreated

  ben-githubs

  committed
  901901f

• chore: make yaml formatting consistent

  ben-githubs

  committed
  a060b68

• Info Alerts are Signals, Nonrouted

  arielkr256

  committed
  594556e

Commits on Aug 16, 2024

• Merge pull request #1328 from panther-labs/info-alerts-are-signals-nonrouted

  Show description for e3cb9a2
  arielkr256

  authored
  e3cb9a2

• edit: update pack manifest

  ben-githubs

  committed
  fcb3433

• fix: mispelled rule id in pack manifest

  ben-githubs

  committed
  896e4ac

• Merge branch 'release' into ben/new/cs_eventstreams_audit_rules

  arielkr256

  authored
  d1f1ce3

• Merge pull request #1307 from panther-labs/ben/new/cs_eventstreams_audit_rules

  Show description for 98c4c4a
  arielkr256

  authored
  98c4c4a

Commits on Aug 19, 2024

• Okta rate limit tuning (#1329)

  Show description for 790b4e5
  

  arielkr256

  and

  ben-githubs

  authored
  790b4e5

• traffic mirroring tuning (#1330)

  Show description for 1e0fbf5
  

  arielkr256

  and

  ben-githubs

  authored
  1e0fbf5

• better deduplication of alerts (#1331)

  Show description for 3e6592f
  

  arielkr256

  and

  ben-githubs

  authored
  3e6592f

Commits on Aug 21, 2024

• add dynamic severity to AWS.CloudTrail.SnapshotMadePublic

  ben-githubs

  committed
  14aec5e

• initial commit

  ben-githubs

  committed
  155d4c2

• Missing MITRE ATT&CK tactics (#1322)

  Show description for 64703f6
  

  arielkr256

  and

  ben-githubs

  authored
  64703f6

• tuning Wiz Alert Passthrough rule (#1326)

  Show description for 3ee6ad2
  

  arielkr256

  and

  ben-githubs

  authored
  3ee6ad2

Commits on Aug 22, 2024

• Merge branch 'release' into improve-github-webhook-modified-rule

  arielkr256

  authored
  38cf297

• Merge pull request #1324 from geoffg-sentry/improve-github-webhook-modified-rule

  Show description for 14932ca
  arielkr256

  authored
  14932ca

• Merge branch 'release' into THREAT-325-Tweak-AWS.CloudTrail.SnapshotMadePublic

  arielkr256

  authored
  704b750

• Merge pull request #1333 from panther-labs/THREAT-325-Tweak-AWS.CloudTrail.SnapshotMadePublic

  Show description for 77f83ed
  arielkr256

  authored
  77f83ed

• fixed unit tests that were failing in pypanther

  ben-githubs

  committed
  254fa34

• Merge pull request #1335 from panther-labs/THREAT-378/fix-failing-pypanther-tests

  Show description for 04187a0
  arielkr256

  authored
  04187a0

Commits on Aug 26, 2024

• Convert to Signals

  arielkr256

  committed
  4ba7f33

• Merge pull request #1336 from panther-labs/signals-for-noisy-alerts

  Show description for 4532e1b
  arielkr256

  authored
  4532e1b

Commits on Aug 27, 2024

• update slack passthrough anomaly rules

  arielkr256

  committed
  9d38712

• Merge branch 'release' into THREAT-371/slack-anomaly-detection-tuning

  arielkr256

  authored
  51efb76

• Merge pull request #1334 from panther-labs/THREAT-371/slack-anomaly-detection-tuning

  Show description for d5a2b43
  arielkr256

  authored
  d5a2b43

• PAT update v0.52.1

  arielkr256

  committed
  2ba9384

• Merge branch 'release' into pat-version-bump

  le4ker

  authored
  8341a04

• Merge pull request #1337 from panther-labs/pat-version-bump

  Show description for 7833588
  arielkr256

  authored
  7833588

• Merge branch 'main' into release

  arielkr256

  authored
  a4aed26