Commit Graph

12922 Commits

Author SHA1 Message Date
pyth0n1c f57185496c Removed comment from if: for run_appinspect CI
job.  This is in prep for merging it into develop.
It was commented so that it would run on testing.
2021-11-09 17:18:07 -08:00
pyth0n1c 3bf8de2066 changed [stash] in props.conf for devsecops
app to [MODIFIED-stash] since the name
[stash] conflicts with a value in 
$SPLUNK_HOME/system/default/props.conf
and appinspect does not like that.  We may be
able to just remove it, but we will keep it for
now until we determine whether it can be 
entirely removed.
2021-11-09 16:51:22 -08:00
Michael Haag da26a79fa7 missing OR 2021-11-09 15:17:11 -07:00
Michael Haag 84b0ef1c94 Modified queries 2021-11-09 15:15:23 -07:00
pyth0n1c f31a303bab Fixed app.conf so that we can pass appinspect.
Added 
[package]
check_for_updates =0 
and simple reload triggers.
2021-11-09 13:50:48 -08:00
Bhavin Patel 5fa4e50172 Branch was auto-updated. 2021-11-09 13:29:54 -08:00
Bhavin Patel a93c1624ea Branch was auto-updated. 2021-11-09 13:29:53 -08:00
Bhavin Patel 9333beeb2d Branch was auto-updated. 2021-11-09 13:29:52 -08:00
Bhavin Patel d39cd85181 Branch was auto-updated. 2021-11-09 13:29:51 -08:00
Bhavin Patel 701e117d08 Branch was auto-updated. 2021-11-09 13:29:51 -08:00
Bhavin Patel 19447e8451 Branch was auto-updated. 2021-11-09 13:29:48 -08:00
Michael Haag 9dd2e83196 Merge pull request #1777 from splunk/issue_1774
issue: 1774 wrong category
2021-11-09 14:29:31 -07:00
Bhavin Patel 7a31160b63 Branch was auto-updated. 2021-11-09 13:24:01 -08:00
Bhavin Patel a5c830e16b Branch was auto-updated. 2021-11-09 13:24:00 -08:00
Bhavin Patel 00d2668bc4 Branch was auto-updated. 2021-11-09 13:23:58 -08:00
Bhavin Patel 00a9820dba Branch was auto-updated. 2021-11-09 13:23:56 -08:00
Bhavin Patel facbfc7b56 Branch was auto-updated. 2021-11-09 13:23:55 -08:00
Bhavin Patel 4a418c88ca Branch was auto-updated. 2021-11-09 13:23:54 -08:00
Bhavin Patel 01127694ed Branch was auto-updated. 2021-11-09 13:23:53 -08:00
Michael Haag 02001dc4d5 Merge pull request #1782 from splunk/huskersec_bug
splunk_usergroups bug - spl update
2021-11-09 14:23:32 -07:00
pyth0n1c 5fa9c7a9fe Comment typo in
build-and-validate.yml
$ sign instead of # for comment
2021-11-09 13:04:53 -08:00
Bhavin Patel 04075a0763 Branch was auto-updated. 2021-11-09 13:04:33 -08:00
Bhavin Patel 6ecd8015ad Branch was auto-updated. 2021-11-09 13:04:32 -08:00
Bhavin Patel 5c6c21844e Branch was auto-updated. 2021-11-09 13:04:31 -08:00
Bhavin Patel 4dc372ff81 Branch was auto-updated. 2021-11-09 13:04:27 -08:00
Bhavin Patel 742c1b2edb Branch was auto-updated. 2021-11-09 13:04:25 -08:00
Bhavin Patel 17d39b0802 Branch was auto-updated. 2021-11-09 13:04:24 -08:00
Bhavin Patel 0498500e6c Branch was auto-updated. 2021-11-09 13:04:23 -08:00
Bhavin Patel 930172ed68 Branch was auto-updated. 2021-11-09 13:04:22 -08:00
Bhavin Patel 2181a3de66 Merge pull request #1788 from splunk/cmdline-not-cmd-shell-docs-edit
Update cmdline_tool_not_executed_in_cmd_shell.yml
2021-11-09 13:04:02 -08:00
pyth0n1c 9cb134658d Realized SSA isn't a full app, it's just
a directory with detections.  Made changes
so that it won't run through slim or appinspect.
Will manually verify by looking at the 
artifacts that it is correct.
2021-11-09 12:58:13 -08:00
mhaag-spl 24779bc8ef Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:47:05 -07:00
mhaag-spl babbd47d81 Update wineventlog_task_scheduler.yml 2021-11-09 13:42:23 -07:00
pyth0n1c f176eeb109 Fixed generation, checksumming, and
appinspect of SSA and dev_sec_ops 
packages.
2021-11-09 12:37:04 -08:00
mhaag-spl 932eb17619 Update windows_curl_download_to_suspicious_path.yml 2021-11-09 13:22:11 -07:00
mhaag-spl 9ef1d009e8 Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:18:00 -07:00
root 8c756bda52 Added detection testing service results inCmdline Tool Not Executed In CMD Shell 2021-11-09 16:33:22 +00:00
mhaag-spl 10d9734d73 Update cmdline_tool_not_executed_in_cmd_shell.yml 2021-11-09 09:11:35 -07:00
root 0687655d8c Added detection testing service results inRegsvr32 with Known Silent Switch Cmdline 2021-11-09 16:08:37 +00:00
tccontre 97da96df03 fix_issues 2021-11-09 16:47:05 +01:00
tccontre fdecebc8b5 Merge branch 'fixing_issues' of github.com:splunk/security_content into fixing_issues 2021-11-09 16:43:23 +01:00
tccontre a5203495a7 fix_issues 2021-11-09 16:42:56 +01:00
Bhavin Patel 27dd1e7465 Branch was auto-updated. 2021-11-09 06:41:21 -08:00
Bhavin Patel f8633063e2 Branch was auto-updated. 2021-11-09 06:41:21 -08:00
Bhavin Patel 9c6bce05d2 Branch was auto-updated. 2021-11-09 06:41:18 -08:00
Bhavin Patel 94dd1489a4 Branch was auto-updated. 2021-11-09 06:41:17 -08:00
Bhavin Patel d085434c60 Branch was auto-updated. 2021-11-09 06:41:16 -08:00
Bhavin Patel 209b97a310 Branch was auto-updated. 2021-11-09 06:41:15 -08:00
Bhavin Patel 45cc0280bf Branch was auto-updated. 2021-11-09 06:41:14 -08:00
Bhavin Patel 8443ca2e3a Branch was auto-updated. 2021-11-09 06:41:13 -08:00