admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Xiao Lin 1f51317037 update 2020-10-22 10:22:33 +00:00
Xiao Lin 54d12d03c1 add two lateral movement detections 2020-10-22 09:03:21 +00:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Bhavin Patel 54829289f2 Merge pull request #809 from splunk/develop 
update master for v3.0.8
 2020-10-21 17:12:05 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
Ignacio Bermudez Corrales 779e9e1555 updated .gitlab-ci 2020-10-21 15:30:21 -07:00
Ignacio Bermudez Corrales 96892d3e4e added more output for debugging 
added more output for debugging

more info
 2020-10-21 15:30:13 -07:00
Ignacio Bermudez Corrales c05d8c07cc command line parsing 2020-10-21 15:01:18 -07:00
Ignacio Bermudez Corrales 597af60b05 added dependencies that by mistake I removed 2020-10-21 14:48:03 -07:00
Ignacio Bermudez Corrales 9f0ea179aa First test end to end 2020-10-21 14:34:05 -07:00
Xiao Lin 91240efdab Merge branch 'develop' of github.com:splunk/security-content into tf23 2020-10-21 13:09:22 -07:00
research bot 089d08bd84 updating docs and package bits [ci skip] 2020-10-20 22:29:07 +00:00
peter ddf9d107f4 Merge pull request #806 from splunk/misko_category_fixes_cred_extract 
Fixing categories & text in Credential Extraction detections
v3.0.8 		2020-10-20 15:08:18 -07:00
peter e541880a7f Merge branch 'develop' into misko_category_fixes_cred_extract 2020-10-20 14:55:03 -07:00
dependabot-preview[bot] c62d2f0c6c Merge pull request #808 from splunk/dependabot/pip/botocore-1.19.1 2020-10-20 20:43:44 +00:00
dependabot-preview[bot] 4c03676136 Bump botocore from 1.19.0 to 1.19.1 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.0...1.19.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-20 20:39:13 +00:00
dependabot-preview[bot] 434e0e03b1 Merge pull request #807 from splunk/dependabot/pip/boto3-1.16.1 2020-10-20 20:38:04 +00:00
dependabot-preview[bot] a8c65aeffc Bump boto3 from 1.16.0 to 1.16.1 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.0 to 1.16.1.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.0...1.16.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-20 20:34:02 +00:00
Stanislav Miskovic 3984d0e5b4 Fixing detection categories and polishing some descriptions in Credential Extraction detections. 2020-10-20 13:20:25 -07:00
Bhavin Patel d6e268ee86 Merge pull request #631 from splunk/response_phases 
[WIP] Response plans and templates
 2020-10-20 11:48:24 -07:00
Bhavin Patel 990c4134f8 Merge branch 'develop' into response_phases 2020-10-20 11:42:26 -07:00
bpatel e94b358a88 blank references 2020-10-20 11:39:00 -07:00
bpatel 9000dd4e23 tags and ascii fixes 2020-10-20 11:24:37 -07:00
Bhavin Patel 8fef4fe2fe Merge pull request #775 from splunk/improved_kerberoasting_attack 
Automated Detection Testing PR improved_kerberoasting_attack
 2020-10-20 11:01:40 -07:00
Bhavin Patel 7a45ca7143 Merge pull request #774 from splunk/pass_the_hash_detection 
Automated Detection Testing PR pass_the_hash_detection
 2020-10-20 10:55:43 -07:00
Bhavin Patel 8210804332 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-20 10:54:22 -07:00
Bhavin Patel c27c1b9a9c Merge pull request #791 from splunk/misko_cred_extract_ssa 
SSA detections for credential extraction
 2020-10-20 10:53:52 -07:00
Jose Enrique Hernandez 6838cbc393 Merge branch 'develop' into misko_cred_extract_ssa 2020-10-20 13:21:13 -04:00
Bhavin Patel 836c2a0c3b Merge branch 'develop' into response_phases 2020-10-20 10:20:12 -07:00
dependabot-preview[bot] f78268de5e Merge pull request #805 from splunk/dependabot/pip/pyparsing-2.4.7 2020-10-20 14:18:35 +00:00
dependabot-preview[bot] c0189b0409 Bump pyparsing from 2.4.6 to 2.4.7 
Bumps [pyparsing](https://github.com/pyparsing/pyparsing) from 2.4.6 to 2.4.7.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/pyparsing_2.4.6...pyparsing_2.4.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-20 14:13:35 +00:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg 64e6680aca Fixed a couple typos 2020-10-19 16:23:48 -07:00
peter b3586064f1 Merge pull request #804 from splunk/update_credump_notebooks 
Updating credential dumping notebooks
 2020-10-19 15:07:20 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
peter ecc99f2455 Merge pull request #734 from splunk/add_gitlab_ci 
WIP - SSA CI job
 2020-10-19 14:31:50 -07:00
Jose Enrique Hernandez ca119d7cb5 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-19 17:29:03 -04:00
Jose Enrique Hernandez ff2ee69853 Merge branch 'develop' into add_gitlab_ci 2020-10-19 17:27:50 -04:00
Jose Enrique Hernandez 38aecd9114 Merge pull request #770 from splunk/lolbas-fixes 
Lolbas SSA fixes
 2020-10-19 17:27:34 -04:00
Jose Enrique Hernandez ade78957f1 Merge branch 'develop' into lolbas-fixes 2020-10-19 17:19:18 -04:00
dependabot-preview[bot] ad0b9eb9b0 Merge pull request #803 from splunk/dependabot/pip/boto3-1.16.0 2020-10-19 19:43:04 +00:00
Bhavin Patel ee112491e2 Merge branch 'develop' into mustang_beta 2020-10-19 12:37:10 -07:00
dependabot-preview[bot] 2fd0c55f4c Bump boto3 from 1.15.18 to 1.16.0 
Bumps [boto3](https://github.com/boto/boto3) from 1.15.18 to 1.16.0.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.15.18...1.16.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-19 19:37:04 +00:00
dependabot-preview[bot] 064a4dc1d5 Merge pull request #802 from splunk/dependabot/pip/botocore-1.19.0 2020-10-19 19:35:48 +00:00
dependabot-preview[bot] 45f1b31891 Bump botocore from 1.18.18 to 1.19.0 
Bumps [botocore](https://github.com/boto/botocore) from 1.18.18 to 1.19.0.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.18.18...1.19.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-19 19:31:16 +00:00
bpatel 7ccbf4b171 deleting old files 2020-10-19 11:42:59 -07:00
bpatel 0cce001a42 merge with develop 2020-10-19 11:19:41 -07:00
dependabot-preview[bot] ec881ec61d Merge pull request #801 from splunk/dependabot/pip/virtualenv-20.0.35 2020-10-19 18:08:41 +00:00
dependabot-preview[bot] 56b06d2246 Bump virtualenv from 20.0.33 to 20.0.35 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.33 to 20.0.35.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.33...20.0.35)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-19 18:04:13 +00:00
Bhavin Patel 4f417cb867 Merge pull request #732 from splunk/gcploit 
Gcploit
 2020-10-19 10:34:46 -07:00