Commit Graph

12922 Commits

Author SHA1 Message Date
Detection Testing Service 800df744a3 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:50 +00:00
root d5df1b0c1e Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address 2020-12-01 00:11:49 +00:00
Detection Testing Service 624ef5b790 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:37 +00:00
root 56a1852463 Added detection testing service results inDetect AWS Console Login by User from New Country 2020-12-01 00:11:36 +00:00
Detection Testing Service 22ae8ac9c0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:11:28 +00:00
root 96ddfdc0f6 Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region 2020-12-01 00:11:26 +00:00
Detection Testing Service 6421ec1b47 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-12-01 00:02:23 +00:00
root 740a7e2f89 Added detection testing service results inCloud Provisioning Activity From Previously Unseen City 2020-12-01 00:02:22 +00:00
root 36fd1141e4 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type 2020-12-01 00:02:09 +00:00
Detection Testing Service 216281f568 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:39:11 +00:00
root e174abe001 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image 2020-11-30 23:39:10 +00:00
Detection Testing Service 17ab3cf97b Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:29:25 +00:00
root 8c50ef2beb Added detection testing service results inCloud Compute Instance Created By Previously Unseen User 2020-11-30 23:29:24 +00:00
Detection Testing Service f57e539ad0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 23:29:05 +00:00
root a0dc08a2f7 Added detection testing service results inCloud API Calls From Previously Unseen User Roles 2020-11-30 23:29:04 +00:00
Bhavin Patel f39ea4b631 Merge branch 'develop' into mustang_beta_test_files 2020-11-30 15:16:18 -08:00
root 0d2d8c573d Added detection testing service results inAWS Cross Account Activity From Previously Unseen Account 2020-11-30 23:05:14 +00:00
bpatel 8dee7b1001 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files 2020-11-30 14:47:56 -08:00
bpatel 2f48f15024 update test condition 2020-11-30 14:43:55 -08:00
root 9655f9245a Added detection testing service results inCloud Compute Instance Created In Previously Unused Region 2020-11-30 22:19:34 +00:00
bpatel 48a1d3af9e new test file format 2020-11-30 12:56:31 -08:00
Bhavin Patel 0e2760f4dd Merge pull request #973 from splunk/issue_948
updated sourcetype
2020-11-30 12:39:09 -08:00
bpatel ba60c97e4d terra innnit 2020-11-30 12:35:47 -08:00
bpatel 0e410b3dc2 updated sourcetype 2020-11-30 12:30:47 -08:00
P4T12ICK e082acc73e Merge pull request #907 from splunk/detection_testing_part_one
PR for Patrick Detection Testing
2020-11-30 18:25:14 +01:00
P4T12ICK 354bf5c03a merged 2020-11-30 18:12:44 +01:00
P4T12ICK bafb1f6674 Merge pull request #961 from splunk/new_testing_format
New format for detection testing
2020-11-30 18:10:04 +01:00
P4T12ICK 22118b2ce0 new test file 2020-11-30 17:20:43 +01:00
P4T12ICK 3f4370788a new test format 2020-11-30 17:18:10 +01:00
P4T12ICK 0c73cd7759 Merge pull request #905 from splunk/ryuktestsfiles
Ryuktestsfiles
2020-11-30 17:15:05 +01:00
P4T12ICK b449989ac9 small changes 2020-11-30 17:09:24 +01:00
P4T12ICK 0a22d9b2c7 ryuk test files 2020-11-30 17:07:17 +01:00
root 7c5a45e2a5 Added detection testing service results inRunDLL Loading DLL By Ordinal 2020-11-30 16:02:55 +00:00
P4T12ICK 40478f6377 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-30 16:39:43 +01:00
P4T12ICK c84455b8ce detection test 2020-11-30 16:39:27 +01:00
root f0ae106811 Added detection testing service results inRemote Process Instantiation via WMI 2020-11-30 14:20:03 +00:00
P4T12ICK e6fe82dbe3 new test file 2020-11-30 14:53:59 +01:00
root ef9956b601 Added detection testing service results inRegistry Keys Used For Privilege Escalation 2020-11-27 09:42:21 +00:00
root 61c8403d81 Added detection testing service results inRegistry Keys Used For Persistence 2020-11-27 09:17:39 +00:00
P4T12ICK d07068eda9 new test 2020-11-27 09:49:16 +01:00
P4T12ICK 31fc4903fd Merge branch 'develop' into dependabot/pip/importlib-metadata-3.1.0 2020-11-27 09:16:05 +01:00
P4T12ICK e874e0675d Merge pull request #954 from splunk/dependabot/pip/virtualenv-20.2.1
Bump virtualenv from 20.1.0 to 20.2.1
2020-11-27 09:15:52 +01:00
dependabot[bot] 62658b8ec6 Bump importlib-metadata from 2.0.0 to 3.1.0
Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 2.0.0 to 3.1.0.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/master/CHANGES.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v2.0.0...v3.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-27 08:07:34 +00:00
P4T12ICK f698e0f4f1 Merge branch 'develop' into dependabot/pip/virtualenv-20.2.1 2020-11-27 09:06:58 +01:00
P4T12ICK ef1ef56ca9 Merge pull request #965 from splunk/dependabot/pip/attackcti-0.3.4.3
Bump attackcti from 0.3.4 to 0.3.4.3
2020-11-27 09:06:43 +01:00
dependabot[bot] 1aec3eac01 Bump virtualenv from 20.1.0 to 20.2.1
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.1.0 to 20.2.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.1.0...20.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-27 07:51:08 +00:00
P4T12ICK b820c26155 Merge branch 'develop' into dependabot/pip/attackcti-0.3.4.3 2020-11-27 08:50:36 +01:00
P4T12ICK 69e36d86ba Merge pull request #967 from splunk/dependabot/pip/antlr4-python3-runtime-4.9
Bump antlr4-python3-runtime from 4.8 to 4.9
2020-11-27 08:50:24 +01:00
root 24a448823a Added detection testing service results inRegistry Keys for Creating SHIM Databases 2020-11-27 07:43:34 +00:00
dependabot[bot] 14cb8fb1c9 Bump attackcti from 0.3.4 to 0.3.4.3
Bumps [attackcti](https://github.com/OTRF/ATTACK-Python-Client) from 0.3.4 to 0.3.4.3.
- [Release notes](https://github.com/OTRF/ATTACK-Python-Client/releases)
- [Commits](https://github.com/OTRF/ATTACK-Python-Client/compare/0.3.4...0.3.4.3)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-27 07:37:58 +00:00