Commit Graph

12922 Commits

Author SHA1 Message Date
patel-bhavin 0dfff97830 yml errors 2021-11-02 18:11:32 -07:00
patel-bhavin 767461b47d remove wrong lookup 2021-11-02 18:04:52 -07:00
patel-bhavin 1c1d17df17 Merge branch 'expgsuite' of github.com:splunk/security_content into expgsuite 2021-11-02 18:03:33 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
pyth0n1c dbc1e604b8 Changed datamodel from Endpoint to Endpoint_Process
for a number of the ssa___ detection files.
2021-11-02 17:40:19 -07:00
pyth0n1c 244fad2f7e Removed Endpoint, it should be Endpoint_Process
for relevant detections.
2021-11-02 17:34:47 -07:00
pyth0n1c 80db3a4e86 Added Endpoint to ba_detections.spec.json 2021-11-02 17:29:55 -07:00
pyth0n1c 2009a6541c more fixes to getting ssa detections 2021-11-02 17:22:03 -07:00
pyth0n1c 26af696757 fixed checking of the ssa filename, I think 2021-11-02 17:15:02 -07:00
pyth0n1c 3d84051d80 some print statements during
validation to help with debugging
2021-11-02 17:05:49 -07:00
pyth0n1c ac4bbd06a6 Just ba_detections to make parsing easier. 2021-11-02 16:57:47 -07:00
pyth0n1c f0f7092884 Removed one line from json schema.
This should fail, removal and check for
failure checks that we fixed the underlying
issue.
2021-11-02 16:51:11 -07:00
pyth0n1c 5117990730 Added a ba_detections.spec.json file for
validation of the BA detections.  Updated
validate_schema to use a different shcema
for BA detections vs non BA detections.
2021-11-02 16:30:49 -07:00
Bhavin Patel 581ace9401 Branch was auto-updated. 2021-11-02 11:56:15 -07:00
Bhavin Patel bb1b3ed291 Branch was auto-updated. 2021-11-02 11:56:14 -07:00
Bhavin Patel 9cc5671f48 Branch was auto-updated. 2021-11-02 11:56:12 -07:00
Bhavin Patel fcf073e01f Branch was auto-updated. 2021-11-02 11:56:08 -07:00
Bhavin Patel b0a44e4d2f Branch was auto-updated. 2021-11-02 11:56:07 -07:00
Bhavin Patel 5e300eafa3 Merge pull request #1772 from splunk/TR-880_generate_ssa_package
Honey, I shrunk the YAMLs!
2021-11-02 11:55:48 -07:00
Bhavin Patel b0c0d89368 Branch was auto-updated. 2021-11-02 09:57:02 -07:00
Bhavin Patel 571276f9f5 Branch was auto-updated. 2021-11-02 09:57:01 -07:00
Bhavin Patel db8142e1e8 Branch was auto-updated. 2021-11-02 09:56:56 -07:00
Bhavin Patel 5459d17d29 Branch was auto-updated. 2021-11-02 09:56:55 -07:00
Bhavin Patel fd953d2dbe Branch was auto-updated. 2021-11-02 09:56:52 -07:00
Bhavin Patel 7181933d48 Branch was auto-updated. 2021-11-02 09:56:51 -07:00
Bhavin Patel 2407813a61 Branch was auto-updated. 2021-11-02 09:56:49 -07:00
tccontre a0411fd063 Merge pull request #1731 from splunk/iceid_ttps
iceid_ttps
2021-11-02 17:56:25 +01:00
Danny Leung 280f6f4a10 PEX-33: fix repo path duplication issue 2021-11-02 00:11:24 -07:00
Danny Leung ade0bf3bf6 PEX-33: remove chalice import 2021-11-01 22:56:37 -07:00
Danny Leung 500dcf256e PEX-33: test running build on current branch instead of develop. 2021-11-01 22:42:44 -07:00
Danny Leung 7737249d92 Revert "PEX-33: manual revert to develop"
This reverts commit bb2050269f.
2021-11-01 22:16:43 -07:00
pyth0n1c 79833fccd0 Fixed how OrderedDict is imported to hopefully fix CSV output format. 2021-11-01 18:10:25 -07:00
Bhavin Patel 8d7ed3105b Update attempted_credential_dump_from_registry_via_reg_exe.yml 2021-11-01 17:44:38 -07:00
patel-bhavin 3ecdae1e84 minor 2021-11-01 17:43:37 -07:00
pyth0n1c aadb588fff Changes to generate JSON artifacts as well as CSV and upload them after a test run on GH Actions. 2021-11-01 17:23:22 -07:00
d1vious 19a159802c updating with no savedsearches_annotations 2021-11-01 20:01:33 -04:00
patel-bhavin ad5afdc3dc calendar search 2021-11-01 16:14:12 -07:00
d1vious 3237b98c0b remove pretty search 2021-11-01 18:58:09 -04:00
d1vious bc3209042b pretty print search yaml, update ci 2021-11-01 18:55:23 -04:00
pyth0n1c 0c53c4a9ab Changed to test against a different branch for testing purposes 2021-11-01 14:45:57 -07:00
pyth0n1c e0dc0e6743 Testing 2 containers with a larger number of detections 2021-11-01 14:24:49 -07:00
pyth0n1c 75bc9ee74c Badly formatted secrets fixed 2021-11-01 14:10:41 -07:00
pyth0n1c 1bf59b0ca7 Installing pip by script, not by apt 2021-11-01 14:05:11 -07:00
pyth0n1c e04135b8ae Properly installing python2 2021-11-01 14:02:55 -07:00
pyth0n1c c8615d208c Docker is already installed on VM, no need to install it. 2021-11-01 13:48:46 -07:00
pyth0n1c ceb606a01f Explicitly installing containerd 2021-11-01 13:34:39 -07:00
pyth0n1c bb22ea0604 Printing out version of containerd 2021-11-01 13:31:37 -07:00
patel-bhavin 0539ea52f2 macro update 2021-11-01 13:30:50 -07:00
pyth0n1c a1521a1dce Created a GitHub Action YML for testing using docker container on GitHub actions. Right now, it's just testing a single, static detection since that's easier and faster. 2021-11-01 13:23:56 -07:00
mjobanputra b4122efa5c Change the pipeline trigger conditions 2021-11-01 18:52:33 +05:30