Commit Graph

12922 Commits

Author SHA1 Message Date
Stanislav Miskovic 391bb12781 Fix: File names of recon and use detections 2020-11-06 11:48:29 -08:00
Ignacio Bermudez Corrales 26d787daa2 support for types, and min-coverage testing with throwing error code for CI 2020-11-06 11:38:57 -08:00
miskoSplunk 3ef46f17f7 Merge branch 'develop' into misko_recon_use_cases 2020-11-06 11:09:18 -08:00
Jose Enrique Hernandez 884372729c Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-06 14:02:48 -05:00
Jose Enrique Hernandez 05eef5af56 Merge pull request #894 from splunk/dependabot_auto_merges
specific token that requires github repo access otherwise auto merges…
2020-11-06 14:02:36 -05:00
Jose Enrique Hernandez d14703fa3c Merge branch 'develop' into dependabot_auto_merges 2020-11-06 13:57:58 -05:00
Ignacio Bermudez Corrales afe64bdb3e detection/experimental folder for untested detections 2020-11-06 10:37:11 -08:00
Jose Enrique Hernandez 15bcf0bde3 Merge branch 'develop' into ryuk-story 2020-11-06 12:36:01 -05:00
divious1 77af8684bc ryuk story and detections 2020-11-06 12:32:48 -05:00
Ignacio 2f8ea360f4 Merge branch 'develop' into TR162 2020-11-06 08:59:31 -08:00
Ignacio 6459b1f637 Merge branch 'develop' into issue_#850 2020-11-06 08:58:51 -08:00
Ignacio 9c3cbf193b Merge branch 'develop' into detection_testing_part_one 2020-11-06 08:58:12 -08:00
Ignacio c3398357d7 Merge branch 'develop' into misko_recon_use_cases 2020-11-06 08:54:25 -08:00
Ignacio 52898f78aa Merge pull request #895 from splunk/TR-281
Selecting only necessary fields to avoid serialization problem on DSP
2020-11-06 08:46:17 -08:00
dependabot[bot] ac7d92eda1 Bump botocore from 1.19.11 to 1.19.12
Bumps [botocore](https://github.com/boto/botocore) from 1.19.11 to 1.19.12.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.11...1.19.12)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-06 14:03:33 +00:00
root 39c6a6c1e8 Added detection testing service results inBatch File Write to System32 2020-11-06 12:58:46 +00:00
Detection Testing Service afc2ee1777 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-06 12:44:39 +00:00
root 3420a755d0 Added detection testing service results inAttempt To Stop Security Service 2020-11-06 12:44:38 +00:00
P4T12ICK 85f349668c new detection testing file 2020-11-06 13:43:49 +01:00
P4T12ICK ee59a8150b new test file 2020-11-06 13:26:45 +01:00
Stanislav Miskovic b988641071 Reconnaissance and access to accounts groups and policies via Mimikatz and PowerSploit modules 2020-11-05 23:10:53 -08:00
Ignacio 049d9da7a3 Merge branch 'develop' into TR-281 2020-11-05 19:22:36 -08:00
Ignacio Bermudez Corrales 10917d4c8d Selecting only necessary fields to avoid serialization problem on DSP 2020-11-05 19:19:50 -08:00
Stanislav Miskovic 9b5ccc2f93 Adding Reconnaissance of Credential Stores and Services via Mimikatz modules 2020-11-05 19:12:04 -08:00
Jose Enrique Hernandez 94e73720b4 Merge branch 'develop' into dependabot_auto_merges 2020-11-05 21:43:23 -05:00
divious1 71abe0338c specific token that requires github repo access otherwise auto merges fail 2020-11-05 21:42:10 -05:00
dependabot[bot] ef2c32d06a Merge pull request #887 from splunk/dependabot/pip/botocore-1.19.11 2020-11-06 02:32:40 +00:00
Shannon Davis 098aa9019a mods 2020-11-06 11:08:38 +11:00
Jose Enrique Hernandez 44b5080384 Merge branch 'develop' into dependabot/pip/botocore-1.19.11 2020-11-05 19:06:48 -05:00
Jose Enrique Hernandez 10bdaa537e Merge pull request #888 from splunk/dependabot/pip/boto3-1.16.11
Bump boto3 from 1.16.10 to 1.16.11
2020-11-05 19:05:34 -05:00
Jose Enrique Hernandez dd0704e323 Merge pull request #889 from splunk/dependabot/pip/attrs-20.3.0
Bump attrs from 20.2.0 to 20.3.0
2020-11-05 19:05:07 -05:00
bpatel 4d87173809 detection updates 2020-11-05 16:04:50 -08:00
miskoSplunk 229391234d Merge branch 'develop' into misko_credential_probing 2020-11-05 16:00:56 -08:00
Shannon Davis 1ab400a565 mods 2020-11-06 10:57:35 +11:00
davisshannon 329c2e59e2 Merge pull request #6 from splunk/develop
update
2020-11-06 10:53:29 +11:00
Ignacio Bermudez Corrales ee80e0c09d added timeout 2020-11-05 15:31:59 -08:00
Jose Enrique Hernandez 4fe445695e Merge branch 'develop' into dependabot/pip/attrs-20.3.0 2020-11-05 17:52:46 -05:00
Bhavin Patel f6566e39dc Merge branch 'develop' into ransomwares3 2020-11-05 13:04:35 -08:00
Ignacio cf3bce9ca7 Merge pull request #891 from splunk/TR-254-new
using artifactory api to retrieve latest humvee jar
2020-11-05 12:32:40 -08:00
Ignacio Bermudez Corrales c57016f99d using artifactory api to retrieve latest humvee jar 2020-11-05 11:46:46 -08:00
root de839bc3b8 Added detection testing service results inDetect New Local Admin account 2020-11-05 18:15:30 +00:00
P4T12ICK 608af0ae98 bug fix 2020-11-05 18:58:28 +01:00
Stanislav Miskovic 5e845f4b3d Probing access and credential strength with stolen credentials 2020-11-05 09:46:23 -08:00
Xiao Lin 811ba865fa change test files to use ssa prefix 2020-11-05 17:36:30 +00:00
Xiao Lin fa2ca47546 test yml 2020-11-05 17:03:54 +00:00
Xiao Lin 4f581f419d add 3 underscore 2020-11-05 17:01:20 +00:00
Xiao Lin 640cadef7c use ssa as prefix 2020-11-05 16:59:13 +00:00
P4T12ICK 0bb7df59f5 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-05 17:40:48 +01:00
P4T12ICK e46b37300f bug fix in detection 2020-11-05 17:40:31 +01:00
dependabot[bot] 17c2951b92 Bump attrs from 20.2.0 to 20.3.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.2.0 to 20.3.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.2.0...20.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:58 +00:00