Commit Graph

12922 Commits

Author SHA1 Message Date
patel-bhavin 3d80496f79 if victim then risk 2021-08-31 10:49:39 -07:00
root 84bf0e3ec2 Added detection testing service results inPassword Policy Discovery with Net 2021-08-31 13:48:54 +00:00
root 4ecb10aff7 Added detection testing service results inGet DomainPolicy with Powershell Script Block 2021-08-31 11:43:10 +00:00
root 4d4ed72a51 Added detection testing service results inGet DomainPolicy with Powershell 2021-08-31 10:37:41 +00:00
root 4d91dcbe0f Added detection testing service results inGet ADUserResultantPasswordPolicy with Powershell Script Block 2021-08-31 10:15:36 +00:00
root c1b5706e22 Added detection testing service results inGet ADUserResultantPasswordPolicy with Powershell 2021-08-31 09:38:54 +00:00
root 048d9e6e1d Added detection testing service results inGet ADDefaultDomainPasswordPolicy with Powershell Script Block 2021-08-31 09:12:42 +00:00
root 76a46e2b83 Added detection testing service results inGet ADDefaultDomainPasswordPolicy with Powershell 2021-08-31 08:49:23 +00:00
tccontre ca0e6f21f7 AD_Discovery_TR-789_4 2021-08-31 10:31:08 +02:00
github-actions[bot] 467da8bdf8 Branch was auto-updated. 2021-08-31 00:18:44 +00:00
github-actions[bot] 21ce693569 Branch was auto-updated. 2021-08-31 00:18:43 +00:00
Bhavin Patel 60eb53ad18 Merge pull request #1608 from zbraiterman/develop
Enhance specificity of cybersecurity terminology and references in README.md
2021-08-30 17:18:23 -07:00
github-actions[bot] 18dfefd6db Branch was auto-updated. 2021-08-30 23:14:43 +00:00
github-actions[bot] 99c33a5cb8 Branch was auto-updated. 2021-08-30 23:14:43 +00:00
Bhavin Patel 2083671135 Merge pull request #1603 from splunk/blackbolt_patch
blackbolt duplicate
2021-08-30 16:14:25 -07:00
Bhavin Patel aa446f4c30 Merge branch 'develop' into blackbolt_patch 2021-08-30 15:46:45 -07:00
github-actions[bot] 3bdb518dc7 Branch was auto-updated. 2021-08-30 22:45:31 +00:00
github-actions[bot] fc6b8dbeb7 Branch was auto-updated. 2021-08-30 22:45:30 +00:00
Bhavin Patel 290f27b069 Merge pull request #1611 from splunk/DetectionTestingPRMapping
Detection testing pr mapping
2021-08-30 15:45:12 -07:00
patel-bhavin 23dd1e6f64 test 2021-08-30 15:13:16 -07:00
pyth0n1c bddb7a7835 Fixed correct branch and PR number for both pushes and PRs for detection testing. 2021-08-30 14:41:20 -07:00
pyth0n1c 289360bc8d Print out more env variables associated with pull request. 2021-08-30 14:35:20 -07:00
pyth0n1c 9ad3e184e2 Priting out pr number and ohter variables 2021-08-30 14:24:51 -07:00
pyth0n1c 8429e51863 Testing what is being passed to detectrion testing. 2021-08-30 14:18:46 -07:00
patel-bhavin 29c6e20ddb detection testing 2021-08-30 13:48:04 -07:00
mvelazco 411f4c9950 adding 3 more detections 2021-08-30 16:39:15 -04:00
pyth0n1c 5bb24d5fc9 Fixed variable name for pull request number. 2021-08-30 13:22:47 -07:00
pyth0n1c 851e0bd536 Removed duplicate id from detection-testing.yml 2021-08-30 13:15:28 -07:00
pyth0n1c c76f9c7c61 Fixed github actions testing behavior for Push vs PR for detection testing. Now checking out of proper source branch and running main.py on the proper source brach and PR number. 2021-08-30 13:14:15 -07:00
pyth0n1c 3d6b2e074d Fixed detection testing to run on PR and push instead of just push. We were bailing on PR 2021-08-30 12:08:51 -07:00
pyth0n1c 7500d66b32 Fixing bad github_ref substitution due to spacing. 2021-08-30 12:03:47 -07:00
pyth0n1c 196a7a07f9 Wrong escape sequence for GITHUB_REF 2021-08-30 12:00:05 -07:00
pyth0n1c 621ecc8ab2 Testing the syntax for the source branch for a pull request. 2021-08-30 11:57:40 -07:00
Bhavin Patel 05b10cecab Update create_local_admin_accounts_using_net_exe.yml 2021-08-30 11:47:43 -07:00
Bhavin Patel 74a25076aa Update create_local_admin_accounts_using_net_exe.yml 2021-08-30 11:47:19 -07:00
mvelazco 9bbcf96620 minor fixes 2021-08-30 13:32:51 -04:00
P4T12ICK e75be12ecf update dashboards 2021-08-30 17:43:13 +02:00
P4T12ICK 001539c692 update dashboards 2021-08-30 17:24:11 +02:00
Detection Testing Service dd720ffe7f Merge branch 'AD_Discovery_TR-789_2' of https://github.com/splunk/security_content into AD_Discovery_TR-789_2 2021-08-30 15:07:41 +00:00
root 62b08792c9 Added detection testing service results inGetWmiObject DS User with PowerShell 2021-08-30 15:07:40 +00:00
root f7db3ebe94 Added detection testing service results inGet DomainUser with PowerShell Script Block 2021-08-30 15:04:32 +00:00
P4T12ICK 9a16c0fc26 update generate 2021-08-30 17:03:34 +02:00
P4T12ICK 2b72209896 update generate 2021-08-30 16:50:39 +02:00
Detection Testing Service 12eaa06631 Merge branch 'AD_Discovery_TR-789_2' of https://github.com/splunk/security_content into AD_Discovery_TR-789_2 2021-08-30 13:55:52 +00:00
root 2d4e4d11d1 Added detection testing service results inGetWmiObject DS User with PowerShell 2021-08-30 13:55:51 +00:00
root 0129d12a32 Added detection testing service results inGetWmiObject DS User with PowerShell Script Block 2021-08-30 13:55:39 +00:00
tccontre 74e241a92e AD_Discovery_TR-789_2 2021-08-30 15:38:27 +02:00
tccontre 05e85ad5bf AD_Discovery_TR-789_2 2021-08-30 14:44:14 +02:00
root 8aab471d30 Added detection testing service results inGet DomainUser with PowerShell 2021-08-30 11:38:56 +00:00
Detection Testing Service dde4062869 Merge branch 'AD_Discovery_TR-789_2' of https://github.com/splunk/security_content into AD_Discovery_TR-789_2 2021-08-30 10:38:04 +00:00