 divious1
|
c24c062206
|
fixing display bugs
|
2021-10-27 10:40:45 -04:00 |
|
|
pyth0n1c
|
afbc033601
|
Wait some time after ready before starting all of the tests to allow the container to settle.
|
2021-10-26 16:58:24 -07:00 |
|
|
pyth0n1c
|
710efec1a0
|
Tweak how long we wait before starting tests with the containers.
|
2021-10-26 16:19:37 -07:00 |
|
|
pyth0n1c
|
5fc1b7585b
|
Fixed the last source to . changes for building slim. Also added the number of containers argument to the Synchronization object.
|
2021-10-26 15:55:07 -07:00 |
|
|
pyth0n1c
|
b97fb13555
|
Rolling back some changes that introduced slim installation errors
|
2021-10-26 15:25:26 -07:00 |
|
|
pyth0n1c
|
673c95673c
|
Fixed slim install
|
2021-10-26 14:47:01 -07:00 |
|
|
pyth0n1c
|
549bcac8a7
|
Changes to support Ubuntu, which doesn't have curl installed by default, and moving to python3 for slim.
|
2021-10-26 14:33:01 -07:00 |
|
|
d1vious
|
e05b95130c
|
adding cve to annotations
|
2021-10-25 21:25:49 -04:00 |
|
|
d1vious
|
73ca3b59d7
|
added CVESearch to requirements
|
2021-10-25 21:09:37 -04:00 |
|
|
d1vious
|
4da636a426
|
adding cves to docs
|
2021-10-25 21:05:57 -04:00 |
|
|
pyth0n1c
|
fd9e91d569
|
Write out a summary csv and write environment iformation, to include datetime, splunk version, and installed splunk apps, to the csv files.
|
2021-10-25 14:28:06 -07:00 |
|
|
pyth0n1c
|
83d6869c6c
|
Better support for different types of structured output files, including a summary of all the detections before they are even run.
|
2021-10-25 11:24:16 -07:00 |
|
|
Bhavin Patel
|
94bdfa90b1
|
Branch was auto-updated.
|
2021-10-25 08:09:05 -07:00 |
|
|
Bhavin Patel
|
9fc04a9e83
|
Branch was auto-updated.
|
2021-10-25 08:09:03 -07:00 |
|
|
Bhavin Patel
|
c641c0b9e6
|
Branch was auto-updated.
|
2021-10-25 08:09:03 -07:00 |
|
|
Bhavin Patel
|
70df86065b
|
Branch was auto-updated.
|
2021-10-25 08:09:01 -07:00 |
|
|
Bhavin Patel
|
45bc334721
|
Branch was auto-updated.
|
2021-10-25 08:09:00 -07:00 |
|
|
Bhavin Patel
|
1d0cc9cc97
|
Branch was auto-updated.
|
2021-10-25 08:08:57 -07:00 |
|
|
Bhavin Patel
|
e686c17f46
|
Branch was auto-updated.
|
2021-10-25 08:08:56 -07:00 |
|
|
Bhavin Patel
|
296f4d528b
|
Branch was auto-updated.
|
2021-10-25 08:08:55 -07:00 |
|
|
Bhavin Patel
|
1694d401e3
|
Branch was auto-updated.
|
2021-10-25 08:08:51 -07:00 |
|
|
Bhavin Patel
|
8f1af508e4
|
Branch was auto-updated.
|
2021-10-25 08:08:50 -07:00 |
|
|
Jose Enrique Hernandez
|
c93daad34f
|
Merge pull request #1734 from drewchurch/add-cve-tag
Add CVE tag
|
2021-10-25 11:08:29 -04:00 |
|
|
Rod Soto
|
e9d1a85251
|
prforbhavingsuiteexperimentalsearches
|
2021-10-24 12:08:39 -07:00 |
|
|
divious1
|
a67a2b18e0
|
added check if detections are present or not
|
2021-10-22 23:29:45 -04:00 |
|
|
pyth0n1c
|
0846bb6d0b
|
Putting download attack data into a 'temp dir' and removing attack data as soon as it's used. We need to do this when we're testing on CI/CD, otherwise we will run out of space. Should keep/remove attack data be an option instead of forced?
|
2021-10-22 16:42:53 -07:00 |
|
|
pyth0n1c
|
194de0c28a
|
Added ability to test individual detection by specifying them on the command line.
|
2021-10-22 15:41:18 -07:00 |
|
|
pyth0n1c
|
53dedd468f
|
Big changes to make the tool much more usable. Actually useful for testing, but no nice output files just yet.
|
2021-10-22 12:57:38 -07:00 |
|
|
Drew Church
|
3b18c5abcb
|
Added CVE tags to 35 files
|
2021-10-22 10:03:24 -07:00 |
|
|
drew
|
94950c337a
|
Merge branch 'splunk:develop' into develop
|
2021-10-22 12:21:22 -04:00 |
|
|
Danny Leung
|
4faf474711
|
PEX-33: initial commit
|
2021-10-22 00:01:59 -07:00 |
|
|
pyth0n1c
|
c5b5dfac88
|
Lots more changes - adding more error checking, typing to more functions, and better logging for testing detections. Initial cut at fixing up issues involving bad return types. Still had not been run/tested yet.
|
2021-10-21 17:06:35 -07:00 |
|
|
pyth0n1c
|
365bcc82ac
|
More cleanup and removal of dead code. Created an object to synchronize all the threads and their status instead of having a massive number of arguments to each thread. Includes a synchronization primitive.
|
2021-10-21 15:32:57 -07:00 |
|
|
pyth0n1c
|
7ba61bc2b5
|
Generate good password for a container instead of always using a static password. Note that a password can also be supplied on the command line.
|
2021-10-21 12:22:28 -07:00 |
|
|
mhaag-spl
|
3dda0e6571
|
Update winevent_windows_task_scheduler_event_action_started.test.yml
|
2021-10-21 13:02:34 -06:00 |
|
|
mhaag-spl
|
27521060d9
|
Update wineventlog_task_scheduler.yml
|
2021-10-21 12:07:26 -06:00 |
|
|
mhaag-spl
|
0772e6352b
|
taskscheduler hunting
|
2021-10-21 09:56:27 -06:00 |
|
|
mjobanputra
|
2347743eed
|
Add one stage in gitlab CI file which will trigger on tag push, which will publish build to pre_qa artifactory
|
2021-10-21 18:50:54 +05:30 |
|
|
root
|
0f12c3141a
|
Added detection testing service results inCMD Carry Out String Command Parameter
|
2021-10-21 10:46:20 +00:00 |
|
|
tccontre
|
bb1a684667
|
iceid_ttps
|
2021-10-21 12:24:22 +02:00 |
|
|
root
|
ca54d339da
|
Added detection testing service results inDisabling Defender Services
|
2021-10-21 10:10:35 +00:00 |
|
|
pyth0n1c
|
10d43aa599
|
Added functionality and checks to remove the security_content directory or persist the security_content directory. This is useful because, on slow connections, it makes running subsequent tests A LOT faster. It is also faster on a fast connection. Finally, and most importantly, it lets you easily persist and re-test changes that you've made to detections.
|
2021-10-20 18:17:07 -07:00 |
|
|
pyth0n1c
|
60262a57f8
|
Added some more command line arguments to speed up testing and did some more smoketesting.
|
2021-10-20 17:33:26 -07:00 |
|
|
pyth0n1c
|
4e52891726
|
Better parsing of files to test, better error handling, more code reuse.
|
2021-10-20 17:06:44 -07:00 |
|
|
pyth0n1c
|
505e2f7986
|
Cleanup and restructuring of main logic. Better prints, error handling, and readability.
|
2021-10-20 15:13:50 -07:00 |
|
|
mhaag-spl
|
ebfe049534
|
Update windows_curl_download_to_suspicious_path.yml
|
2021-10-20 15:25:48 -06:00 |
|
|
root
|
682b9cbc74
|
Added detection testing service results inWindows Curl Download to Suspicious Path
|
2021-10-20 13:34:35 +00:00 |
|
|
mhaag-spl
|
f7112aca62
|
fixes
|
2021-10-20 07:08:14 -06:00 |
|
|
root
|
50f4a08cca
|
Added detection testing service results inWmic NonInteractive App Uninstallation
|
2021-10-20 12:01:43 +00:00 |
|
|
tccontre
|
efdc9df9d5
|
iceid_ttps
|
2021-10-20 11:38:22 +02:00 |
|