diff --git a/bin/automated_detection_testing/ci/labeled_data/requirements.txt b/bin/automated_detection_testing/ci/labeled_data/requirements.txt index 698a3b0abf..4ec326670d 100644 --- a/bin/automated_detection_testing/ci/labeled_data/requirements.txt +++ b/bin/automated_detection_testing/ci/labeled_data/requirements.txt @@ -1,4 +1,4 @@ -ansible==2.9.20 +ansible==4.2.0 ansible-runner==1.4.4 attackcti==0.3.4.3 boto3==1.11.0 diff --git a/detections/endpoint/ssa___detect_pass_hash.yml b/detections/deprecated/ssa___detect_pass_hash.yml similarity index 100% rename from detections/endpoint/ssa___detect_pass_hash.yml rename to detections/deprecated/ssa___detect_pass_hash.yml diff --git a/requirements.txt b/requirements.txt index cdbb0cd114..56704889d8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,41 +3,41 @@ appdirs==1.4.4 aspy.yaml==1.3.0 attackcti==0.3.4.4 attrs==21.2.0 -backports.entry-points-selectable==1.1.0 -CacheControl==0.12.6 -certifi==2021.5.30 +backports.entry-points-selectable==1.1.1 +CacheControl==0.12.10 +certifi==2021.10.8 cfgv==3.3.1 chardet==4.0.0 -charset-normalizer==2.0.4 +charset-normalizer==2.0.7 colorama==0.4.4 coloredlogs==15.0.1 configparser==5.0.2 contextlib2==21.6.0 distlib==0.3.3 distro==1.6.0 -filelock==3.2 +filelock==3.3.2 fire==0.4.0 -gitdb==4.0.7 +gitdb==4.0.9 html5lib==1.1 humanfriendly==10.0 identify==2.2.13 idna==3.3 -importlib-metadata==4.8.1 +importlib-metadata==4.8.2 importlib-resources==5.2.2 ipaddr==2.2.0 -Jinja2==3.0.2 -jsonschema==3.2.0 +Jinja2==3.0.3 +jsonschema==4.2.1 lockfile==0.12.2 MarkupSafe==2.0.1 more-itertools==8.8.0 msgpack==1.0.2 nodeenv==1.6.0 -packaging==21.0 +packaging==21.2 pathlib2==2.3.6 pendulum==2.1.2 pep517==0.11.0 -Pillow==8.3.2 -platformdirs==2.3.0 +Pillow==8.4.0 +platformdirs==2.4.0 pre-commit==2.14.1 progress==1.6 prompt-toolkit==1.0.14 @@ -49,10 +49,10 @@ pyparsing==2.4.7 pyrsistent==0.18.0 python-dateutil==2.8.2 pytoml==0.1.21 -pytz==2021.1 +pytz==2021.3 pytzdata==2020.1 PyYAML==6.0 -regex==2021.8.28 +regex==2021.11.10 requests==2.26.0 retrying==1.3.3 scandir==1.10.0 @@ -70,7 +70,7 @@ tomli==1.2.2 typing==3.7.4.3 tzlocal==3.0 urllib3==1.26.6 -virtualenv==20.9.0 +virtualenv==20.10.0 wcwidth==0.2.5 webencodings==0.5.1 -zipp==3.5.0 +zipp==3.6.0 diff --git a/tests/endpoint/ssa___detect_pass_hash.test.yml b/tests/endpoint/ssa___detect_pass_hash.test.yml deleted file mode 100644 index f0f2098ac0..0000000000 --- a/tests/endpoint/ssa___detect_pass_hash.test.yml +++ /dev/null @@ -1,12 +0,0 @@ -name: Detect Pass the Hash - SSA Unit test -tests: - - name: Detect Pass the Hash - file: endpoint/ssa___detect_pass_hash.yml - pass_condition: '@count_gt(0)' - description: Test detection of pass-the-hash - attack_data: - - file_name: windows-security.log - data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1550.002/atomic_red_team/windows-security.log - source: WinEventLog:Security - -