 pyth0n1c
|
eb6378e805
|
Made some changes to properly supporting testing changed test file. Had some trouble before locating the appropriate detection file. Also throw an error if we try to test a file that was changed and is in the experimental path. Set up to run a test of the DetectionBaselineFixes branch to test these changes in GitHub Actions.
|
2021-11-30 09:52:36 -08:00 |
|
|
mvelazco
|
5fa8ad9210
|
Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4
|
2021-11-30 12:51:46 -05:00 |
|
|
mvelazco
|
b5783ab849
|
adding 2 experimental detections
|
2021-11-30 12:51:43 -05:00 |
|
|
pyth0n1c
|
97c83a1864
|
Created Experimental folder in tests,
as well as cloud, endpoint, and network
subfolders, and moved some tests into it.
This corresponds with the experimental
folder in detections.
|
2021-11-30 09:47:01 -08:00 |
|
|
root
|
e1947f155a
|
Added detection testing service results inDetect RClone Command-Line Usage
|
2021-11-30 12:56:06 +00:00 |
|
|
Michael Haag
|
b87061f794
|
rookie mistake
|
2021-11-30 05:34:29 -07:00 |
|
|
pyth0n1c
|
868c98082b
|
Small change to test changes on a specific branch instead of develop.
|
2021-11-29 16:49:06 -08:00 |
|
|
pyth0n1c
|
84e54e26d6
|
Changing to the correct baseline paths after restructuring repo
|
2021-11-29 16:44:40 -08:00 |
|
|
Michael Haag
|
bae2e35b1c
|
fix
|
2021-11-29 16:19:21 -07:00 |
|
|
mhaag-spl
|
81e952185e
|
Rclone Haagrid
|
2021-11-29 15:55:38 -07:00 |
|
|
pyth0n1c
|
180785c7d4
|
Certain types of error would have missing fields in the results json, causing the summarization code to crash. Fixed that. Also sorted the output of the summarization to made it easier to look at a glance. Errors and failures will be at the top and the rest will be sorted alphabetically.
|
2021-11-29 14:40:17 -08:00 |
|
|
root
|
7ea845c9d5
|
Added detection testing service results inPossible Lateral Movement PowerShell Spawn
|
2021-11-29 22:12:37 +00:00 |
|
|
mvelazco
|
0254c60a28
|
adding detection
|
2021-11-29 16:50:39 -05:00 |
|
|
mhaag-spl
|
fe7817f28a
|
Update detect_html_help_renamed.yml
Fixing issue #1849
|
2021-11-29 13:43:41 -07:00 |
|
|
pyth0n1c
|
2b3fd66bb3
|
Run a test on everything, saving the intermediate files to help debugging.
|
2021-11-29 11:54:26 -08:00 |
|
|
pyth0n1c
|
fff797358c
|
Run a handlful of tests on push to produce output artifacts.
|
2021-11-29 11:34:59 -08:00 |
|
|
pyth0n1c
|
95e7169e05
|
fix quote
|
2021-11-29 10:53:29 -08:00 |
|
|
pyth0n1c
|
e8fb9578ea
|
Change types of quotes around schedule
|
2021-11-29 10:51:44 -08:00 |
|
|
pyth0n1c
|
38ad36c296
|
Run at 55th minute each hour for testing.
|
2021-11-29 10:49:54 -08:00 |
|
|
Bhavin Patel
|
024a0be7ff
|
Branch was auto-updated.
|
2021-11-25 05:31:55 -08:00 |
|
|
Bhavin Patel
|
bac32282a4
|
Branch was auto-updated.
|
2021-11-25 05:31:54 -08:00 |
|
|
Bhavin Patel
|
73ddbbfd27
|
Branch was auto-updated.
|
2021-11-25 05:31:53 -08:00 |
|
|
Bhavin Patel
|
699dfa0f5c
|
Branch was auto-updated.
|
2021-11-25 05:31:52 -08:00 |
|
|
P4T12ICK
|
49170484ea
|
Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip
Ssa anomalous usage of archive tool
|
2021-11-25 14:31:31 +01:00 |
|
|
Bhavin Patel
|
19d0ead8c5
|
Branch was auto-updated.
|
2021-11-25 05:07:27 -08:00 |
|
|
Bhavin Patel
|
80ba7482e4
|
Branch was auto-updated.
|
2021-11-25 05:07:25 -08:00 |
|
|
Bhavin Patel
|
0bd09d6126
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
|
Bhavin Patel
|
c778a2e35c
|
Branch was auto-updated.
|
2021-11-25 05:07:24 -08:00 |
|
|
Bhavin Patel
|
b25f7b80c3
|
Branch was auto-updated.
|
2021-11-25 05:07:23 -08:00 |
|
|
tccontre
|
2451defe2a
|
Merge pull request #1848 from splunk/remcos_evasion
remcos_evasion
|
2021-11-25 14:07:03 +01:00 |
|
|
Detection Testing Service
|
6d8151d915
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:13:52 +00:00 |
|
|
root
|
1b28033819
|
Added detection testing service results inPowershell Windows Defender Exclusion Commands
|
2021-11-25 12:13:51 +00:00 |
|
|
Detection Testing Service
|
724101f8ed
|
Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
4ed89e21a2
|
Added detection testing service results inWindows Defender Exclusion Registry Entry
|
2021-11-25 12:00:54 +00:00 |
|
|
root
|
b6bb18d20c
|
Added detection testing service results inAdd or Set Windows Defender Exclusion
|
2021-11-25 11:55:39 +00:00 |
|
|
tccontre
|
dfd210cf29
|
remcos_evasion
|
2021-11-25 12:27:39 +01:00 |
|
|
Bhavin Patel
|
49e82e39ff
|
Branch was auto-updated.
|
2021-11-25 01:25:30 -08:00 |
|
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
|
Bhavin Patel
|
469f9ab43f
|
Branch was auto-updated.
|
2021-11-25 01:25:28 -08:00 |
|
|
Bhavin Patel
|
5addbd5188
|
Branch was auto-updated.
|
2021-11-25 01:25:27 -08:00 |
|
|
Bhavin Patel
|
00755bf36b
|
Branch was auto-updated.
|
2021-11-25 01:25:26 -08:00 |
|
|
tccontre
|
06b65d7163
|
Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
|
2021-11-25 10:25:05 +01:00 |
|
|
Bhavin Patel
|
bb2a01499a
|
Branch was auto-updated.
|
2021-11-25 01:04:18 -08:00 |
|
|
Bhavin Patel
|
67bbcd8d30
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
|
Bhavin Patel
|
0a01fb8181
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
|
Bhavin Patel
|
c681fb48b4
|
Branch was auto-updated.
|
2021-11-25 01:04:16 -08:00 |
|
|
Bhavin Patel
|
c753fb67c3
|
Branch was auto-updated.
|
2021-11-25 01:04:15 -08:00 |
|
|
Bhavin Patel
|
8b9637b86f
|
Branch was auto-updated.
|
2021-11-25 01:04:14 -08:00 |
|
|
P4T12ICK
|
a14e50ac10
|
Merge pull request #1847 from splunk/improvements
Improvements
|
2021-11-25 10:03:58 +01:00 |
|
|
tccontre
|
295acf12f0
|
Update ssa___delete_a_net_user.test.yml
|
2021-11-25 09:30:44 +01:00 |
|