admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
patel-bhavin 7dbacd0674 errors and text updates 2021-10-12 13:02:16 -07:00
Bhavin Patel 3b2cb3f2ee Merge branch 'develop' into CARS_UPDATE_MITRE_ID_B1 2021-10-12 11:14:31 -07:00
tccontre d2719d316e Update gsuite_drive_share_in_external_email.yml 2021-10-12 11:12:12 +02:00
tccontre eb02a97423 Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-12 09:29:19 +02:00
pyth0n1c 2f06facd23 Lots of testing changes.... lots of progress. Need to clean up and test entire set of detections properly with sleeps and diagnose how long sleep should be or if there is a way to block while input data is processed entirely. 2021-10-11 17:05:28 -07:00
divious1 3cc1eee594 fixing up base on feedback 2021-10-11 18:18:23 -04:00
Bhavin Patel 8c114abc1f Branch was auto-updated. 2021-10-11 12:56:24 -07:00
Michael Haag 0be2434332 Merge pull request #1717 from splunk/stay-haag 
Update suspicious_wevtutil_usage.yml
 2021-10-11 13:56:06 -06:00
mhaag-spl 95ad76f9ba Update suspicious_wevtutil_usage.yml 
Resolving #1669 . Thank you!
 2021-10-11 12:17:40 -06:00
pyth0n1c 06a9c0f15e Lots more changes to how we run. Now based off of the splunk/splunk container on docker hub as much as possible. We use ENV arguments to install required apps. Still only at 50% pass rate, so we need more troubleshooting to figure out why. 2021-10-11 10:23:42 -07:00
Bhavin Patel b6f201a846 Branch was auto-updated. 2021-10-11 03:30:23 -07:00
tccontre ff5189357c Merge pull request #1690 from splunk/privilege_escalation_persistence 
privilege_escalation_persistence
 2021-10-11 12:29:56 +02:00
tccontre e564e5a9f2 Delete screensaver_event_trigger_execution.test.yml 2021-10-11 11:05:42 +02:00
tccontre cd46d4cf61 Delete screensaver_event_trigger_execution.yml 2021-10-11 11:05:34 +02:00
tccontre 8a1bed2fb9 CARS_UPDATE_MITRE_ID_B1 2021-10-11 11:03:20 +02:00
mhaag-spl 69d72deb15 Delete powershell_reflective_load.test.yml 2021-10-08 12:37:20 -06:00
mhaag-spl f6804d708b Fixes and removed duplicate 2021-10-08 12:33:23 -06:00
tccontre b371bc5b5d Merge branch 'develop' of github.com:splunk/security_content into develop 2021-10-08 14:49:55 +02:00
tccontre 5226dbd99c privilege_escalation_persistence 2021-10-08 14:23:55 +02:00
root 393aad02aa Added detection testing service results inETW Registry Disabled 2021-10-08 07:55:48 +00:00
dependabot[bot] 3f161640cc Bump protobuf from 3.17.0 to 3.18.1 
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.17.0 to 3.18.1.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/master/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.17.0...v3.18.1)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-07 22:33:56 +00:00
Bhavin Patel 8a09315e93 Merge pull request #1694 from splunk/dependabot/pip/jsonschema-4.0.1 
Bump jsonschema from 3.2.0 to 4.0.1
 2021-10-07 15:33:28 -07:00
Bhavin Patel 1d21924935 Merge pull request #1708 from splunk/removing_my_name_from_docs 
removing name
 2021-10-07 15:33:03 -07:00
Bhavin Patel 038206d836 Branch was auto-updated. 2021-10-07 15:26:33 -07:00
Bhavin Patel 735883dc0a Merge pull request #1703 from splunk/sec-researcher_duplicate 
Contribution: Duplicate of #1678
 2021-10-07 15:26:17 -07:00
patel-bhavin 6da13a75c5 Merge branch 'develop' into removing_my_name_from_docs 2021-10-07 15:22:55 -07:00
divious1 9478681c7f removing name 2021-10-07 14:54:45 -04:00
tccontre 87e17c3505 privilege_escalation_persistence 2021-10-07 14:53:56 +02:00
Bhavin Patel a9a2c05c9c Branch was auto-updated. 2021-10-06 16:03:18 -07:00
Bhavin Patel 24b0173f44 Branch was auto-updated. 2021-10-06 16:03:17 -07:00
Bhavin Patel 87018e6d13 Branch was auto-updated. 2021-10-06 16:03:16 -07:00
Bhavin Patel 1fc61adef1 Branch was auto-updated. 2021-10-06 16:03:16 -07:00
Bhavin Patel e32c95a93b Branch was auto-updated. 2021-10-06 16:03:15 -07:00
Bhavin Patel bd4cc12c11 Branch was auto-updated. 2021-10-06 16:03:14 -07:00
Bhavin Patel 3ee70d2ec6 Branch was auto-updated. 2021-10-06 16:03:13 -07:00
Bhavin Patel 350416a501 Branch was auto-updated. 2021-10-06 16:03:13 -07:00
Bhavin Patel cb35f15b34 Merge pull request #1681 from splunk/dependabot/pip/automated_detection_testing/ci/detection_testing_batch/ansible-4.2.0 
Bump ansible from 2.9.20 to 4.2.0 in /automated_detection_testing/ci/detection_testing_batch
 2021-10-06 16:02:55 -07:00
dependabot[bot] 21dbc114cd Bump stix2 from 3.0.0 to 3.0.1 
Bumps [stix2](https://github.com/oasis-open/cti-python-stix2) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/oasis-open/cti-python-stix2/releases)
- [Changelog](https://github.com/oasis-open/cti-python-stix2/blob/master/CHANGELOG)
- [Commits](https://github.com/oasis-open/cti-python-stix2/compare/v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: stix2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-06 23:02:21 +00:00
Bhavin Patel 1da9ac1f2c Branch was auto-updated. 2021-10-06 16:01:57 -07:00
Bhavin Patel 1d1ba69450 Branch was auto-updated. 2021-10-06 16:01:56 -07:00
Bhavin Patel 8c3e051df6 Branch was auto-updated. 2021-10-06 16:01:56 -07:00
Bhavin Patel e393b28ed2 Branch was auto-updated. 2021-10-06 16:01:55 -07:00
Bhavin Patel 7aea799f8a Branch was auto-updated. 2021-10-06 16:01:54 -07:00
Bhavin Patel c60bffa0fe Branch was auto-updated. 2021-10-06 16:01:53 -07:00
Bhavin Patel 16238008a6 Branch was auto-updated. 2021-10-06 16:01:51 -07:00
Bhavin Patel 6183054500 Merge pull request #1652 from splunk/dependabot/pip/boto3-1.18.38 
Bump boto3 from 1.17.104 to 1.18.38
 2021-10-06 16:01:38 -07:00
Bhavin Patel e495dc20cd Branch was auto-updated. 2021-10-06 15:46:05 -07:00
dependabot[bot] c6f274abd4 Bump s3transfer from 0.4.2 to 0.5.0 
Bumps [s3transfer](https://github.com/boto/s3transfer) from 0.4.2 to 0.5.0.
- [Release notes](https://github.com/boto/s3transfer/releases)
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/s3transfer/compare/0.4.2...0.5.0)

---
updated-dependencies:
- dependency-name: s3transfer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-06 22:45:08 +00:00
Bhavin Patel 7955b91184 Branch was auto-updated. 2021-10-06 15:45:05 -07:00
Bhavin Patel 435a40d1b2 Branch was auto-updated. 2021-10-06 15:45:04 -07:00