Commit Graph

12922 Commits

Author SHA1 Message Date
P4T12ICK e1844e0333 removed devsecops 2021-11-25 08:55:22 +01:00
P4T12ICK 2993c66134 Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip 2021-11-25 08:37:12 +01:00
P4T12ICK 40a80473a2 Merge branch 'develop' into ssa_anomalous_usage_of_7zip 2021-11-25 08:36:33 +01:00
Bhavin Patel 28ad164d89 Branch was auto-updated. 2021-11-24 23:36:30 -08:00
Bhavin Patel a619c9829e Branch was auto-updated. 2021-11-24 23:36:29 -08:00
Bhavin Patel d9525ef7e3 Branch was auto-updated. 2021-11-24 23:36:28 -08:00
Bhavin Patel 86fd20b169 Branch was auto-updated. 2021-11-24 23:36:28 -08:00
Bhavin Patel 3e22487ffc Branch was auto-updated. 2021-11-24 23:36:27 -08:00
Bhavin Patel 9697382643 Branch was auto-updated. 2021-11-24 23:36:23 -08:00
P4T12ICK 2eda496ddd Merge pull request #1845 from splunk/ssa_test_ci_cd_pipeline
Ssa test ci cd pipeline
2021-11-25 08:36:00 +01:00
pyth0n1c afb07b6714 Run it on push too for an immediate test 2021-11-24 17:14:33 -08:00
pyth0n1c b94ef641ec Changed the detection testing to run on all, develop instead of changes to a different branch. This will collect some data for us over the next few days. 2021-11-24 17:13:41 -08:00
pyth0n1c 827cc97cdc Better support for arg validation and command line arguments. Print out the password for the container, if the flag exists to print it out, to enable interactive testing. A few other format updates. 2021-11-24 17:06:07 -08:00
pyth0n1c abd568f7d7 Small update to summarize_json.py to set show_splunk_app_password to True when generatingf the detection_failure_manifest.json file. This way, you can run that file directly as the configuration without making any other changes or passing command line values and get right into debugging everything 2021-11-24 15:57:13 -08:00
pyth0n1c eb01127d03 Fixed key error in summarize.json. Had called detection_list detections_list, so it was failing jsonschema validation. 2021-11-24 15:25:24 -08:00
pyth0n1c ae3e8f1b75 slim failed to install, causing escu app install to fail. 2021-11-24 14:56:38 -08:00
pyth0n1c aa985d5077 Made some small changes to printed strings. Fixed summarize_json missing python library error by sourcing virtualenv set up in previous step. 2021-11-24 14:42:18 -08:00
pyth0n1c 9517171204 Small change to the output format of the test-config file that is generated at runtime to accurately describe the current test. Also added install of requirements.txt to final summary step. 2021-11-24 14:20:46 -08:00
pyth0n1c 88977a9fb8 Changes to template and summary to support passing a commit_hash parameter, not just a branch parameter, so that even old tests can be replicated. 2021-11-24 13:58:32 -08:00
d1vious bda64cb7d4 added logic to include test file in the detections, also renamed the files to have prefixed ssa____ on name 2021-11-24 16:26:17 -05:00
pyth0n1c 4f6be10581 Testing with the proper mode for a specific branch. 2021-11-24 12:00:02 -08:00
pyth0n1c f32f1bed2a More verbose debug messages in summarize_json. 2021-11-24 11:45:52 -08:00
pyth0n1c ccc29005fa Still diagnosing path issues for summarize. 2021-11-24 11:12:19 -08:00
pyth0n1c 54a34608fe Fixed results paths once more for summary. 2021-11-24 10:36:33 -08:00
pyth0n1c 5012b0f766 Another run to check and see if the summarization works and confirm the directory structure of the artifacts. 2021-11-24 10:10:27 -08:00
pyth0n1c 3cd3ca6692 Another CI change to list directory structure during summarize step. 2021-11-24 09:54:27 -08:00
Bhavin Patel ef126c979d Branch was auto-updated. 2021-11-24 09:13:43 -08:00
Bhavin Patel 9392c15f40 Branch was auto-updated. 2021-11-24 09:13:38 -08:00
Bhavin Patel 9fd5ba2d7b Branch was auto-updated. 2021-11-24 09:13:37 -08:00
Bhavin Patel 945377a3cc Branch was auto-updated. 2021-11-24 09:13:36 -08:00
Bhavin Patel c57f06c3a9 Branch was auto-updated. 2021-11-24 09:13:35 -08:00
Bhavin Patel 61b717f51d Branch was auto-updated. 2021-11-24 09:13:34 -08:00
Bhavin Patel fd77109f22 Branch was auto-updated. 2021-11-24 09:13:34 -08:00
Michael Haag 694e5ef724 Merge pull request #1844 from splunk/TR-1085_LateralMovement_3
Lateral Movement Content Update #3
2021-11-24 10:13:14 -07:00
Michael Haag 144b6971d2 Update wsmprovhost_exe_lolbas_execution_process_spawn.yml 2021-11-24 10:08:13 -07:00
Michael Haag 097683ffbb Update wmiprsve_exe_lolbas_execution_process_spawn.yml 2021-11-24 10:07:35 -07:00
root ba111107f8 Added detection testing service results inWindows Service Created Within Public Path 2021-11-24 15:24:21 +00:00
root 9f122d542c Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn 2021-11-24 14:58:42 +00:00
mvelazco 42913444c4 update dataset location 2021-11-24 09:37:47 -05:00
P4T12ICK 1fa6e25756 ssa test ci cd 2021-11-24 15:14:31 +01:00
P4T12ICK 704e469362 ssa test ci cd 2021-11-24 14:38:08 +01:00
P4T12ICK ebbc82c8c3 ssa test ci cd 2021-11-24 14:09:39 +01:00
P4T12ICK 7baeb01691 ssa test ci cd 2021-11-24 13:28:56 +01:00
P4T12ICK e7a55b8d29 ssa test ci cd 2021-11-24 13:15:50 +01:00
P4T12ICK b02e05a11c ssa test ci cd 2021-11-24 13:12:39 +01:00
P4T12ICK 312209bea7 ssa test ci cd 2021-11-24 13:10:56 +01:00
P4T12ICK 395ef2c546 ssa test ci cd 2021-11-24 12:46:18 +01:00
P4T12ICK 2eea8708ed ssa test ci cd 2021-11-24 12:34:55 +01:00
P4T12ICK 59b3520084 ssa test ci cd 2021-11-24 11:50:45 +01:00
P4T12ICK b4e4c1385f ssa test ci cd 2021-11-24 11:33:10 +01:00