Commit Graph

12922 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 4d700facca Merge pull request #1045 from splunk/dependabot/pip/botocore-1.19.44
Bump botocore from 1.19.39 to 1.19.44
2020-12-28 21:02:00 -05:00
dependabot[bot] 8292c00f33 Bump botocore from 1.19.39 to 1.19.44
Bumps [botocore](https://github.com/boto/botocore) from 1.19.39 to 1.19.44.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.39...1.19.44)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-28 21:19:47 +00:00
Jose Enrique Hernandez e973121349 Merge branch 'develop' into dependabot/pip/pytest-6.2.1 2020-12-28 16:19:34 -05:00
Jose Enrique Hernandez f500aa678f Merge pull request #1044 from splunk/dependabot/pip/importlib-metadata-3.3.0
Bump importlib-metadata from 3.1.1 to 3.3.0
2020-12-28 16:19:18 -05:00
Ignacio 50782e7620 Merge pull request #999 from splunk/misko_typo
Update ssa___applying_stolen_credentials_via_powersploit_modules.yml
2020-12-22 12:03:23 -08:00
Ignacio 5d6e7595a1 Merge branch 'develop' into misko_typo 2020-12-22 10:38:46 -08:00
dependabot[bot] ea385dfc8b Bump importlib-metadata from 3.1.1 to 3.3.0
Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 3.1.1 to 3.3.0.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/CHANGES.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v3.1.1...v3.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-22 14:03:32 +00:00
dependabot[bot] 0ce4c9ffe9 Bump pytest from 6.1.2 to 6.2.1
Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.1.2 to 6.2.1.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/6.1.2...6.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-21 14:08:06 +00:00
dependabot[bot] aa1edccfdb Merge pull request #1043 from splunk/dependabot/pip/requests-2.25.1 2020-12-21 14:07:08 +00:00
dependabot[bot] 3006434d5d Bump requests from 2.25.0 to 2.25.1
Bumps [requests](https://github.com/psf/requests) from 2.25.0 to 2.25.1.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/master/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.25.0...v2.25.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-21 14:03:46 +00:00
dependabot[bot] 3e3bb646f0 Merge pull request #1040 from splunk/dependabot/pip/botocore-1.19.39 2020-12-18 14:19:55 +00:00
dependabot[bot] 5fd4ac004d Bump botocore from 1.19.35 to 1.19.39
Bumps [botocore](https://github.com/boto/botocore) from 1.19.35 to 1.19.39.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.35...1.19.39)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-18 14:03:25 +00:00
research bot fb4416ca31 updating docs and package bits [ci skip] 2020-12-18 01:21:37 +00:00
divious1 1dee0313dd moved sunburst detection v3.10.0 2020-12-17 19:59:16 -05:00
divious1 47d2b5c91d fixing bug due to version changes 2020-12-17 19:41:15 -05:00
Bhavin Patel c6ffd4dd65 Merge pull request #1028 from splunk/sunburst_detections
new detection sunburst
2020-12-17 16:19:16 -08:00
Bhavin Patel 14d6e6d01a Merge branch 'develop' into sunburst_detections 2020-12-17 16:14:28 -08:00
Bhavin Patel 596c326de0 Merge branch 'develop' into deprecated_aws_searches 2020-12-17 16:10:21 -08:00
divious1 2304ca424a adding a package 2020-12-17 18:36:13 -05:00
divious1 9f77561c23 removing appinspect for now since it is failing due to token issues 2020-12-17 18:28:28 -05:00
divious1 974437c22b fixed validate mistakes 2020-12-17 18:13:25 -05:00
divious1 fc4c30587b renamed test file 2020-12-17 18:05:54 -05:00
Bhavin Patel ae67c5f146 Merge branch 'develop' into TR-320-suspicious-rights-delegation 2020-12-17 13:07:31 -08:00
bpatel 224478807d test push 2020-12-17 12:34:52 -08:00
divious1 b8326d8b38 Merge branch 'sunburst_detections' of github.com:splunk/security-content into sunburst_detections 2020-12-17 13:53:29 -05:00
divious1 ca1ae13328 renaming dragonfly 2020-12-17 13:53:20 -05:00
Jose Enrique Hernandez 56d4471b78 Merge branch 'develop' into sunburst_detections 2020-12-17 13:01:38 -05:00
divious1 58eade42b6 adding new detection and test for sunburst 2020-12-17 12:20:26 -05:00
root c6edd5dd27 Added detection testing service results inO365 Excessive Authentication Failures Alert 2020-12-17 11:17:16 +00:00
P4T12ICK eee9e6bb2f bug fix 2020-12-17 12:00:53 +01:00
root 366a7b8213 Added detection testing service results inO365 PST export alert 2020-12-17 10:56:41 +00:00
P4T12ICK 2c62bc7ede bug fix 2020-12-17 11:40:00 +01:00
P4T12ICK 504a11d8be bug fix 2020-12-17 11:22:22 +01:00
root 5598782ca0 Added detection testing service results inO365 Disable MFA 2020-12-17 10:21:24 +00:00
P4T12ICK 48ada30a34 o365 disable mfa 2020-12-17 11:02:20 +01:00
P4T12ICK d8fa8188e5 Merge branch 'rodo365' into TR-320-suspicious-rights-delegation 2020-12-17 10:49:59 +01:00
bpatel ee9d4131bc filter 2020-12-16 18:26:07 -08:00
bpatel fdb698cdb3 new detection for login failure 2020-12-16 16:26:25 -08:00
Bhavin Patel db03702098 Merge pull request #998 from splunk/detection_testing_part_two
Detection Testing Part 2
2020-12-16 12:40:27 -08:00
Rod Soto 018d1bd766 addedmacros 2020-12-16 14:32:10 -05:00
Rod Soto 6c47a0d56e excessiveauthfailures 2020-12-16 14:28:48 -05:00
divious1 4c7b7c0397 updated CI job 2020-12-16 14:17:18 -05:00
Rod Soto 8b1b7bd5a6 fixandnewdisablemfa 2020-12-16 14:16:20 -05:00
divious1 6204c225c9 added logic to pass a username password a service account 2020-12-16 13:56:19 -05:00
Rod Soto d9f0ee461a o365rodetections 2020-12-16 13:49:57 -05:00
P4T12ICK 07aa33af22 Merge branch 'develop' into detection_testing_part_two 2020-12-16 15:59:31 +01:00
P4T12ICK 81162132d7 wrong detections in deprecated 2020-12-16 15:59:08 +01:00
P4T12ICK 7410b6d670 Merge branch 'develop' into TR-320-suspicious-rights-delegation 2020-12-16 15:56:45 +01:00
root 4c49c04851 Added detection testing service results inO365 Suspicious Admin Email Forwarding 2020-12-16 14:50:54 +00:00
root a2bc2aa5df Added detection testing service results inO365 Suspicious User Email Forwarding 2020-12-16 14:25:18 +00:00