admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
divious1 6caea176a6 corrected a few bugs with the spec 2020-02-07 13:51:31 -05:00
Bhavin Patel 096234f417 Merge pull request #354 from splunk/fix_convert_bug_issue_343 
fixes issue 343
 2020-02-07 10:38:14 -08:00
Bhavin Patel 6b2c9e4172 Merge pull request #327 from splunk/supicious_email_updates 
updating boiler plate, detection not working out of box against T1193…
 2020-02-07 10:35:35 -08:00
Bhavin Patel 556efc4a78 Merge pull request #325 from splunk/dns_query_updates 
Update version info and macros
 2020-02-07 10:33:05 -08:00
divious1 3336663726 fixes issue 343 2020-02-07 13:32:56 -05:00
bpatel ff7a6fef59 update mod dates of stories: 2020-02-07 10:30:32 -08:00
Bhavin Patel 77ca56ce19 Merge pull request #347 from splunk/CRL-1725_Processes.parent_process.Correction 
Crl 1725 processes.parent process.correction
 2020-02-07 10:28:07 -08:00
bpatel 6896cf9b58 removing incorrect mitre id 2020-02-07 10:27:21 -08:00
Bhavin Patel f682a22461 Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction 2020-02-07 10:18:17 -08:00
bpatel 1c97742fed macros node 2020-02-07 10:17:14 -08:00
Bhavin Patel 98195728fc Merge pull request #324 from splunk/first_time_seen_cmd_updates 
update version info, add macros for first time seen cmd line detection
 2020-02-07 10:07:18 -08:00
Bhavin Patel 0432161688 Merge pull request #326 from splunk/smb_detection_updates 
update smb related content.
 2020-02-07 10:05:44 -08:00
Bhavin Patel 44761d1106 Merge pull request #348 from splunk/CRL-1723 
CRL-1723 : corrected field name in SPL Filesystem.filepath [which doe…
 2020-02-07 10:04:22 -08:00
Bhavin Patel 7d61248099 Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction 2020-02-07 10:03:49 -08:00
Jose Enrique Hernandez 382d0d719d Merge pull request #351 from splunk/issue_336 
updating mod dates and version
 2020-02-07 13:02:48 -05:00
Bhavin Patel 9849b76aff Merge branch 'develop' into first_time_seen_cmd_updates 2020-02-07 10:02:26 -08:00
bpatel f307274f95 story mod updates 2020-02-07 10:00:28 -08:00
Bhavin Patel 11e67aefb4 Merge pull request #352 from splunk/fixing_external_pr_ci 
fixing issue with seans PR
 2020-02-07 09:54:05 -08:00
Jose Enrique Hernandez 08d7ba3900 Merge pull request #346 from splunk/CRL-1726_lookups_csv_ci 
CRL-1726 adding logic to copy over lookups
 2020-02-06 23:49:33 -05:00
research bot 345858c83b updating docs and package bits [ci skip] 2020-02-06 22:47:39 +00:00
Rico Valdez 537f51434e Merge branch 'develop' of github.com:splunk/security-content into develop 
local merge of develop prior to push
 2020-02-05 16:28:45 -07:00
Rico Valdez ac7bd7cfee changed the file name of the .csv file and updated the associated yml file 2020-02-05 16:27:57 -07:00
rvaldez617 7d33b5c36c Merge pull request #350 from splunk/issue_323 
CRL-1721 - updating files as per Dons/Andrew Lee's feedback
 2020-02-05 16:06:17 -07:00
Jose Enrique Hernandez 2fb2d880f0 Merge pull request #344 from smalloy2/develop 
Making color contrast changes for 508 compliance
 2020-02-04 17:07:13 -05:00
divious1 caa5437fad fixing issue with seans PR 2020-02-04 16:31:56 -05:00
bpatel dbbc58fb43 renaming lookup file in package/lookup 2020-02-04 09:46:22 -08:00
bpatel 8b0f74c34d updating mod dates and version 2020-02-04 09:21:52 -08:00
bpatel 92768472e0 updating files as per Dons feedback 2020-02-04 09:15:39 -08:00
dependabot-preview[bot] e134fb24c8 Merge pull request #349 from splunk/dependabot/pip/nodeenv-1.3.5 2020-02-04 08:35:32 +00:00
dependabot-preview[bot] 6ac73bb183 Bump nodeenv from 1.3.4 to 1.3.5 
Bumps [nodeenv](https://github.com/ekalinin/nodeenv) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/ekalinin/nodeenv/releases)
- [Changelog](https://github.com/ekalinin/nodeenv/blob/master/CHANGES)
- [Commits](https://github.com/ekalinin/nodeenv/compare/1.3.4...1.3.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-04 08:31:13 +00:00
Jason Brewer e18a1402f4 CRL-1723 : corrected field name in SPL Filesystem.filepath [which does not exist] to Filesystem.file_path. 2020-02-03 21:00:55 -08:00
Jason Brewer c06702a7f4 CRL-1725 - Added update to detections.spec.json to accomodate a new output entity parent_process_name. 2020-02-03 15:32:12 -08:00
Jason Brewer 346709b58f CRL-1725 - Changed prohibited_apps_spawning_cmdprompt.yml to use parent_process_name as entity. Changed supress field to add user. Bumped detection version number and story version numbers on stories/suspicious_cmd_line_executions.yml and stories/suspicious_mshta_activities.yml. 2020-02-03 15:24:49 -08:00
Jose Enrique Hernandez 667ac3ffa3 Merge pull request #345 from splunk/CRL-1727_detection_bug_issue_343 
fixing issue #343
 2020-02-03 17:36:49 -05:00
divious1 6730dbefd8 adding logic to copy over lookups 2020-02-03 17:35:06 -05:00
divious1 2b6db17c99 fixing issue #343 2020-02-03 17:10:15 -05:00
seanmalloy 6a3c1d4988 Making color contrast changes for 508 compliance 2020-02-03 10:31:13 -08:00
dependabot-preview[bot] 70a3aa3841 Merge pull request #342 from splunk/dependabot/pip/jinja2-2.11.1 2020-01-30 18:28:52 +00:00
dependabot-preview[bot] a696b13961 Bump jinja2 from 2.11.0 to 2.11.1 
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/master/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/2.11.0...2.11.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-30 18:23:29 +00:00
dependabot-preview[bot] 5e88f84ba5 Merge pull request #341 from splunk/dependabot/pip/pre-commit-2.0.1 2020-01-30 02:14:17 +00:00
dependabot-preview[bot] d0d0772679 Bump pre-commit from 2.0.0 to 2.0.1 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.0.0...v2.0.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-30 02:09:24 +00:00
dependabot-preview[bot] 90cdbe7ef0 Merge pull request #340 from splunk/dependabot/pip/more-itertools-8.2.0 2020-01-29 13:09:31 +00:00
dependabot-preview[bot] 0b110b541a Bump more-itertools from 8.1.0 to 8.2.0 
Bumps [more-itertools](https://github.com/erikrose/more-itertools) from 8.1.0 to 8.2.0.
- [Release notes](https://github.com/erikrose/more-itertools/releases)
- [Commits](https://github.com/erikrose/more-itertools/compare/v8.1.0...v8.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-29 13:05:09 +00:00
dependabot-preview[bot] c0ef423eef Merge pull request #339 from splunk/dependabot/pip/importlib-metadata-1.5.0 2020-01-29 05:15:01 +00:00
dependabot-preview[bot] 503dbe5e40 Bump importlib-metadata from 1.4.0 to 1.5.0 
Bumps [importlib-metadata](http://importlib-metadata.readthedocs.io/) from 1.4.0 to 1.5.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-29 05:10:30 +00:00
Jose Enrique Hernandez a7baf3fcc2 Merge pull request #338 from splunk/dependabot_automerge 
adding github workflow to auto approve dependabot PRs that passed CI …
 2020-01-28 22:24:32 -05:00
divious1 d4fbe656d6 adding github workflow to auto approve dependabot PRs that passed CI this is to circumvent branch protection 2020-01-28 22:12:14 -05:00
dependabot-preview[bot] 94664241b6 Merge pull request #337 from splunk/dependabot/pip/pre-commit-2.0.0 2020-01-29 03:07:41 +00:00
dependabot-preview[bot] 992eedfecc Bump pre-commit from 1.21.0 to 2.0.0 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 1.21.0 to 2.0.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v1.21.0...v2.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-29 02:51:57 +00:00
dependabot-preview[bot] 5d49e31f16 Merge pull request #328 from splunk/dependabot/pip/identify-1.4.11 2020-01-29 00:35:23 +00:00