splunk/security_content v4.29.0

on GitHub

Release notes

New Analytics Story

• APT29 Diplomatic Deceptions with WINELOADER
• Outlook RCE CVE-2024-21378

Updated Analytics Story

New Analytics

• Windows InProcServer32 New Outlook Form
• Windows MSHTA Writing to World Writable Path
• Windows New InProcServer32 Added
• Windows Phishing Outlook Drop Dll In FORM Dir
• Windows SqlWriter SQLDumper DLL Sideload

Updated Analytics

• CertUtil With Decode Argument