admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c 8f55eb5848 Proper summary.json files are now always generated after a run of the CI. It does not require a separate run of summarize_json.py. Becuase the CI runs different jobs, though, it is still required to run this explicitly in the CI. Also fixed an issue where searches that resulted in an error had incorrect json output due to improper python error handling. 2021-12-08 12:00:51 -08:00
Lou Stella 3b58b30516 Adding custom functions & playbooks 
Adding custom functions & playbooks
 2021-12-08 14:00:13 -06:00
mvelazco dbaa641e13 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-12-08 13:41:07 -05:00
mvelazco 648bf1fc6e minor fixes 2021-12-08 13:41:04 -05:00
Bhavin Patel 8cc5adc54c Branch was auto-updated. 2021-12-08 09:36:32 -08:00
Bhavin Patel a65ae6f35b Branch was auto-updated. 2021-12-08 09:36:31 -08:00
Bhavin Patel 1ecb6d9cc6 Branch was auto-updated. 2021-12-08 09:36:30 -08:00
Bhavin Patel ef05534704 Branch was auto-updated. 2021-12-08 09:36:29 -08:00
Bhavin Patel 5673f80041 Branch was auto-updated. 2021-12-08 09:36:28 -08:00
Bhavin Patel 456d7483d6 Branch was auto-updated. 2021-12-08 09:36:24 -08:00
Jose Enrique Hernandez 0934e5ea2f Merge pull request #1860 from splunk/BA 
Data Stream Haag
 2021-12-08 12:36:06 -05:00
Bhavin Patel 56278252ec Branch was auto-updated. 2021-12-08 07:37:37 -08:00
Jose Enrique Hernandez 16a5285957 Merge pull request #1859 from splunk/re-ssa 
A Nightmare on Haag Street
 2021-12-08 10:37:18 -05:00
P4T12ICK 2e4bebab22 BA detections 2021-12-08 15:27:44 +01:00
P4T12ICK 7e1fbbc8ad BA detections 2021-12-08 12:50:13 +01:00
P4T12ICK 9f6fc87a59 BA detections 2021-12-08 12:21:40 +01:00
P4T12ICK 98d9e927e7 BA detections 2021-12-08 12:08:42 +01:00
P4T12ICK 95268a9d27 BA detections 2021-12-08 11:20:58 +01:00
P4T12ICK 88bbb3dd64 BA detections 2021-12-08 10:43:36 +01:00
P4T12ICK 4c8ab01f3c BA detections 2021-12-08 10:20:36 +01:00
P4T12ICK ae44ed6e6b BA detections 2021-12-08 09:59:22 +01:00
P4T12ICK a7637dae83 BA detections 2021-12-08 09:46:20 +01:00
pyth0n1c 934a3727f2 A number of changes. First we quit immediately if docker is not running on the machine... we were missing the quit before but not the check and error message. Next, we fix a persistent problem with storing the output of a test that encounters an error. We also remove some un-needed print statements 2021-12-07 17:08:11 -08:00
dependabot[bot] a71bd19bdb Bump charset-normalizer from 2.0.7 to 2.0.9 
Bumps [charset-normalizer](https://github.com/ousret/charset_normalizer) from 2.0.7 to 2.0.9.
- [Release notes](https://github.com/ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ousret/charset_normalizer/compare/2.0.7...2.0.9)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-12-07 23:40:51 +00:00
dependabot[bot] 6454098227 Bump simplejson from 3.17.5 to 3.17.6 
Bumps [simplejson](https://github.com/simplejson/simplejson) from 3.17.5 to 3.17.6.
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](https://github.com/simplejson/simplejson/compare/v3.17.5...v3.17.6)

---
updated-dependencies:
- dependency-name: simplejson
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-12-07 23:40:26 +00:00
dependabot[bot] c8cbe5512c Bump pre-commit from 2.14.1 to 2.16.0 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.14.1 to 2.16.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.14.1...v2.16.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-12-07 23:40:05 +00:00
mhaag-spl ec5f5713a1 Update resize_shadowstorage_volume.yml 2021-12-07 15:54:21 -07:00
mhaag-spl 12c8dccc59 added T 2021-12-07 14:46:35 -07:00
mhaag-spl 81a49be5e8 Out of the Gates 
Microsoft Exchange Mailbox Replication service writing Active Server Pages
 2021-12-07 14:46:14 -07:00
pyth0n1c 0f87a6011c Changes to support more of interactive mode and interactive_failure_mode as well as better logic around whether or not the password should be printed to the command line. In short, it will be printed if you are in interactive mode and have not included it in the config. If you are interactive and the password is in the config file, you will be warned but it will not be printed. If you are not interactive, it will not be printed unless you ask it to print. 2021-12-07 13:27:38 -08:00
mhaag-spl 692a565bef Update ssa___wbadmin_delete_system_backups.test.yml 2021-12-07 14:01:52 -07:00
mhaag-spl 3c2c99fb9c Update ssa___wbadmin_delete_system_backups.test.yml 2021-12-07 13:55:05 -07:00
mhaag-spl 44bf73018a wbadmin 2021-12-07 13:31:19 -07:00
pyth0n1c 9176e24d44 A number of small usability updates. Added and tested a --interactive mode flag and changed --interactive_failure to --no_interactive_failure. Interactive_failure mode is now the default mode. Improved spacing and messages on some error strings. 2021-12-07 12:11:29 -08:00
mhaag-spl 890e31a9c1 Update ssa___bcdedit_failure_recovery_modification.test.yml 2021-12-07 12:38:37 -07:00
mhaag-spl 51a47f76df Update ssa___bcdedit_failure_recovery_modification.yml 2021-12-07 12:30:48 -07:00
mhaag-spl e2abbaffe1 fsutil and bcdedit 2021-12-07 12:19:41 -07:00
mhaag-spl faebd2b7cd Merge branch 'BA' of https://github.com/splunk/security_content into BA 2021-12-07 12:02:14 -07:00
Bhavin Patel d64b454702 Branch was auto-updated. 2021-12-07 11:01:51 -08:00
Bhavin Patel b4bab318d2 Branch was auto-updated. 2021-12-07 11:01:46 -08:00
Bhavin Patel 52ce90917e Branch was auto-updated. 2021-12-07 11:01:45 -08:00
Bhavin Patel b409336f85 Merge pull request #1865 from splunk/DetectionBaselineFixes 
Detection baseline fixes
 2021-12-07 11:01:28 -08:00
mhaag-spl 16849ba96e Update ssa___dns_exfiltration_using_nslookup_app.yml 2021-12-07 11:58:44 -07:00
mhaag-spl 77d186e946 Update ssa___dns_exfiltration_using_nslookup_app.yml 2021-12-07 11:51:15 -07:00
mhaag-spl 6b36d8c6ec DNS Exfil 2021-12-07 11:43:34 -07:00
mhaag-spl b51b7dbdf1 Update ssa___detect_rclone_command_line_usage.yml 2021-12-07 11:40:46 -07:00
Bhavin Patel 3807a2565b Branch was auto-updated. 2021-12-07 08:16:58 -08:00
Bhavin Patel 3b07aa32bb Branch was auto-updated. 2021-12-07 08:16:57 -08:00
Bhavin Patel 9be0cf55f6 Branch was auto-updated. 2021-12-07 08:16:51 -08:00
Bhavin Patel 108881783b Branch was auto-updated. 2021-12-07 08:16:50 -08:00