admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jzsplunk c1d01b4a46 Update README.md 
Fix link to community-slack channel
 2020-11-09 09:32:55 -08:00
divious1 79a9a16809 updating with upstream 2020-11-09 11:23:11 -05:00
Jose Enrique Hernandez 37dd447777 Merge pull request #884 from splunk/detection_testing_part_one 
Automated Detection Testing PR detection_testing_part_one
 2020-11-09 11:21:16 -05:00
P4T12ICK f51a8f5b10 Merge branch 'develop' into detection_testing_part_one 2020-11-09 17:16:01 +01:00
divious1 f8fc4fa95d fixing warning on comparisons 2020-11-09 11:10:10 -05:00
root 31ec8a4bc3 Added detection testing service results inDetect mshta exe running scripts in command-line arguments 2020-11-09 15:59:06 +00:00
Jose Enrique Hernandez 8c12dd3eee Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-09 10:56:44 -05:00
divious1 b1db736eb2 Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story 2020-11-09 10:55:45 -05:00
dependabot[bot] b0a9af9bdb Bump certifi from 2020.6.20 to 2020.11.8 
Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.6.20 to 2020.11.8.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2020.06.20...2020.11.08)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:42:28 +00:00
dependabot[bot] 46d503405b Merge pull request #886 from splunk/dependabot/pip/ansible-2.10.3 2020-11-09 15:41:35 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
dependabot[bot] 919b7236d8 Bump ansible from 2.10.2 to 2.10.3 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.2...v2.10.3)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:31:19 +00:00
Jose Enrique Hernandez 1819339f4d Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:14:28 -05:00
P4T12ICK 5a34ae63ae Merge branch 'develop' into detection_testing_part_one 2020-11-09 15:56:23 +01:00
dependabot[bot] f053664217 Merge pull request #903 from splunk/dependabot/pip/boto3-1.16.13 2020-11-09 14:38:33 +00:00
dependabot[bot] fc25eb7cb9 Bump boto3 from 1.16.11 to 1.16.13 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.11 to 1.16.13.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.11...1.16.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 14:05:25 +00:00
P4T12ICK 97181a2276 detection review 2020-11-09 14:36:48 +01:00
P4T12ICK cfcaa4c0e8 Merge branch 'develop' into detection_testing_part_one 2020-11-09 14:36:14 +01:00
Detection Testing Service 60dec9ea55 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 12:43:38 +00:00
root 89ede1f1f8 Added detection testing service results inDetect Excessive Account Lockouts From Endpoint 2020-11-09 12:43:35 +00:00
root a99d31c43a Added detection testing service results inDetect Excessive User Account Lockouts 2020-11-09 12:43:26 +00:00
P4T12ICK 53bc5414f9 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 13:25:41 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
root 1e5bbadd2b Added detection testing service results inDeleting Shadow Copies 2020-11-09 09:56:18 +00:00
P4T12ICK ff910fa590 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 10:38:50 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
inspired a9a17dee87 Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:17:58 +01:00
Mikael Bjerkeland fb0398fafb Added test 2020-11-09 10:12:52 +01:00
Detection Testing Service fbccb2412c Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:51:53 +00:00
root ffb6fb5409 Added detection testing service results inCommon Ransomware Notes 2020-11-09 08:51:52 +00:00
Detection Testing Service 69d8c00af3 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:43:18 +00:00
root ede365c015 Added detection testing service results inCommon Ransomware Extensions 2020-11-09 08:43:16 +00:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
P4T12ICK b25ef1a4cb ransomware extension 2020-11-09 09:24:14 +01:00
Rod Soto f8a131528d widowswsecuritysamsearch 2020-11-08 11:30:34 -05:00
Rod Soto e21455a145 fixnamedaddedantispyware 2020-11-08 11:10:49 -05:00
Rod Soto 2fd9f07c75 winconhostryuksearch 2020-11-08 10:57:02 -05:00
Rod Soto 7af33cfd4f ryuktestfilestestfile 2020-11-08 10:27:03 -05:00
Stanislav Miskovic fbb5ee4c7f Reconnaissance - adding detections for AD infrastructure, network connectivity, computers, domains, processes, services, registry, shares, etc. 2020-11-06 18:15:45 -08:00
divious1 026bb228a0 Merge branch 'ryuk-story' of github.com:splunk/security-content into ryuk-story 2020-11-06 19:08:00 -05:00
divious1 2d37dc2e26 fixed validation errors 2020-11-06 19:07:54 -05:00
divious1 2ecead4232 added additional checks to validate 2020-11-06 18:32:56 -05:00
Jose Enrique Hernandez b6fe73df7d Merge branch 'develop' into ryuk-story 2020-11-06 18:03:20 -05:00
Stanislav Miskovic 6eadeb857b Fix: Slip in renaming of tests 2020-11-06 15:01:54 -08:00
divious1 301c13f7fa new detections 2020-11-06 17:34:40 -05:00
bpatel f786d10f41 fixes 2020-11-06 13:50:51 -08:00
Ignacio c1c3923941 Merge branch 'develop' into issue_#850 2020-11-06 13:06:59 -08:00
Ignacio Bermudez Corrales c1f56e36f1 Showing number of passed tests in info, since it was confusing 2020-11-06 12:48:46 -08:00
Ignacio Bermudez Corrales ebd7e678a1 Adding min coverage 100% for SSA detections 2020-11-06 12:19:19 -08:00