Merge branch 'develop' into ssa_why_chrome_why

bin/automated_detection_testing/ci/labeled_data/requirements.txt

@@ -1,4 +1,4 @@
-ansible==2.9.20
+ansible==4.2.0
 ansible-runner==1.4.4
 attackcti==0.3.4.3
 boto3==1.11.0

requirements.txt

@@ -3,41 +3,41 @@ appdirs==1.4.4
 aspy.yaml==1.3.0
 attackcti==0.3.4.4
 attrs==21.2.0
-backports.entry-points-selectable==1.1.0
-CacheControl==0.12.6
-certifi==2021.5.30
+backports.entry-points-selectable==1.1.1
+CacheControl==0.12.10
+certifi==2021.10.8
 cfgv==3.3.1
 chardet==4.0.0
-charset-normalizer==2.0.4
+charset-normalizer==2.0.7
 colorama==0.4.4
 coloredlogs==15.0.1
 configparser==5.0.2
 contextlib2==21.6.0
 distlib==0.3.3
 distro==1.6.0
-filelock==3.2
+filelock==3.3.2
 fire==0.4.0
-gitdb==4.0.7
+gitdb==4.0.9
 html5lib==1.1
 humanfriendly==10.0
 identify==2.2.13
 idna==3.3
-importlib-metadata==4.8.1
+importlib-metadata==4.8.2
 importlib-resources==5.2.2
 ipaddr==2.2.0
-Jinja2==3.0.2
-jsonschema==3.2.0
+Jinja2==3.0.3
+jsonschema==4.2.1
 lockfile==0.12.2
 MarkupSafe==2.0.1
 more-itertools==8.8.0
 msgpack==1.0.2
 nodeenv==1.6.0
-packaging==21.0
+packaging==21.2
 pathlib2==2.3.6
 pendulum==2.1.2
 pep517==0.11.0
-Pillow==8.3.2
-platformdirs==2.3.0
+Pillow==8.4.0
+platformdirs==2.4.0
 pre-commit==2.14.1
 progress==1.6
 prompt-toolkit==1.0.14
@@ -49,10 +49,10 @@ pyparsing==2.4.7
 pyrsistent==0.18.0
 python-dateutil==2.8.2
 pytoml==0.1.21
-pytz==2021.1
+pytz==2021.3
 pytzdata==2020.1
 PyYAML==6.0
-regex==2021.8.28
+regex==2021.11.10
 requests==2.26.0
 retrying==1.3.3
 scandir==1.10.0
@@ -70,7 +70,7 @@ tomli==1.2.2
 typing==3.7.4.3
 tzlocal==3.0
 urllib3==1.26.6
-virtualenv==20.9.0
+virtualenv==20.10.0
 wcwidth==0.2.5
 webencodings==0.5.1
-zipp==3.5.0
+zipp==3.6.0

tests/endpoint/ssa___detect_pass_hash.test.yml

@@ -1,12 +0,0 @@
-name: Detect Pass the Hash - SSA Unit test
-tests:
-  - name: Detect Pass the Hash
-    file: endpoint/ssa___detect_pass_hash.yml 
-    pass_condition: '@count_gt(0)'
-    description: Test detection of pass-the-hash
-    attack_data:
-      - file_name: windows-security.log
-        data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1550.002/atomic_red_team/windows-security.log
-        source: WinEventLog:Security
-
-