 root
|
0f7d5aa104
|
Added detection testing service results inFsutil Zeroing File
|
2021-08-12 08:07:27 +00:00 |
|
|
tccontre
|
dcfab01e14
|
icedid
|
2021-08-12 09:25:43 +02:00 |
|
|
Detection Testing Service
|
204dd45bc8
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 20:32:46 -06:00 |
|
|
mhaag-spl
|
f7bb6e308d
|
Added detection testing service results inDetect HTML Help Renamed
|
2021-08-11 20:32:46 -06:00 |
|
|
mhaag-spl
|
c6f4791a1b
|
Update suspicious_microsoft_workflow_compiler_rename.test.yml
broken test
|
2021-08-11 19:51:53 -06:00 |
|
|
mhaag-spl
|
bf673e9d1a
|
Update detect_html_help_renamed.yml
|
2021-08-11 15:57:22 -06:00 |
|
|
mhaag-spl
|
56714c68cd
|
Update detect_html_help_renamed.yml
|
2021-08-11 15:01:09 -06:00 |
|
|
mhaag-spl
|
b450921fa1
|
Update suspicious_microsoft_workflow_compiler_rename.yml
|
2021-08-11 13:47:34 -06:00 |
|
|
github-actions[bot]
|
f078e35f81
|
Branch was auto-updated.
|
2021-08-11 19:35:37 +00:00 |
|
|
github-actions[bot]
|
e35372d8bc
|
Branch was auto-updated.
|
2021-08-11 19:35:36 +00:00 |
|
|
github-actions[bot]
|
e0507705c3
|
Branch was auto-updated.
|
2021-08-11 19:35:31 +00:00 |
|
|
github-actions[bot]
|
7fef077ac9
|
Branch was auto-updated.
|
2021-08-11 19:35:30 +00:00 |
|
|
github-actions[bot]
|
4e09f8834e
|
Branch was auto-updated.
|
2021-08-11 19:35:29 +00:00 |
|
|
github-actions[bot]
|
11266b564d
|
Branch was auto-updated.
|
2021-08-11 19:35:28 +00:00 |
|
|
Michael Haag
|
c84a3b3b25
|
Merge pull request #1555 from splunk/blackbolt_1
duplicate
|
2021-08-11 13:35:12 -06:00 |
|
|
patel-bhavin
|
9f71b88e6c
|
duplicate
|
2021-08-11 11:24:14 -07:00 |
|
|
mhaag-spl
|
2317ee7a4b
|
Added detection testing service results inDetect Renamed 7-Zip
|
2021-08-11 12:08:08 -06:00 |
|
|
mhaag-spl
|
a864bdc842
|
Update detect_renamed_7_zip.yml
|
2021-08-11 11:23:42 -06:00 |
|
|
tccontre
|
fa681a604f
|
lockbit_ttp
|
2021-08-11 18:37:03 +02:00 |
|
|
mhaag-spl
|
d13b923f91
|
Update detect_renamed_winrar.yml
|
2021-08-11 10:26:48 -06:00 |
|
|
mhaag-spl
|
0e71fa736a
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 09:34:47 -06:00 |
|
|
mhaag-spl
|
8458ce2eb4
|
Update detect_renamed_winrar.yml
|
2021-08-11 09:34:41 -06:00 |
|
|
mhaag-spl
|
eed6b40e5f
|
Added detection testing service results inDetect Renamed PSExec
|
2021-08-11 09:24:31 -06:00 |
|
|
mhaag-spl
|
ca96ea558f
|
Update detect_renamed_psexec.yml
|
2021-08-11 08:34:05 -06:00 |
|
|
mhaag-spl
|
aeace8d801
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-11 08:33:23 -06:00 |
|
|
mhaag-spl
|
005cfcc40e
|
Added detection testing service results inDetect Renamed RClone
|
2021-08-11 08:25:46 -06:00 |
|
|
mhaag-spl
|
749fbff290
|
Update detect_renamed_rclone.yml
|
2021-08-11 07:39:30 -06:00 |
|
|
mhaag-spl
|
cf669e8deb
|
Added detection testing service results inSuspicious Rundll32 startw
|
2021-08-11 07:25:28 -06:00 |
|
|
mhaag-spl
|
87e23caa40
|
Update suspicious_rundll32_startw.yml
|
2021-08-11 06:38:49 -06:00 |
|
|
miskoSplunk
|
055ed9ca2d
|
Merge branch 'develop' into misko_scores
|
2021-08-10 15:14:52 -07:00 |
|
|
Stanislav Miskovic
|
971315f40e
|
Fixing score rounding for two detections
|
2021-08-10 14:57:40 -07:00 |
|
|
Stanislav Miskovic
|
64b1a1f926
|
Correcting non-integer scores for two detections
|
2021-08-10 14:53:31 -07:00 |
|
|
mhaag-spl
|
dcd72f2f67
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 14:31:04 -06:00 |
|
|
pyth0n1c
|
779c45abc5
|
Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop
|
2021-08-10 12:59:05 -07:00 |
|
|
mhaag-spl
|
668fba767b
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 13:28:55 -06:00 |
|
|
research bot
|
932f368332
|
updating docs and package bits [ci skip]
|
2021-08-10 19:06:43 +00:00 |
|
|
pyth0n1c
|
f2fa2bf079
|
Apparently, unless specified otherwise, exit returns most recent return code. Explicitly have it return 0 on success.
|
2021-08-10 11:56:02 -07:00 |
|
|
pyth0n1c
|
e8b49a3228
|
Better, more verbose tag checking for all the yml
|
2021-08-10 11:53:38 -07:00 |
|
|
pyth0n1c
|
67c4c1fdb2
|
More verbose tag checking.
|
2021-08-10 11:51:30 -07:00 |
|
|
pyth0n1c
|
9c22253318
|
Adding the tag check to the semgrep.yml. Printing our the GITHUB_REF before checking it, because we seem to be failing for some reason on regular pushes.
|
2021-08-10 11:45:57 -07:00 |
|
|
pyth0n1c
|
2cb62a0cd9
|
Legacy code that tried to push to the tag instead of develop
|
2021-08-10 11:39:06 -07:00 |
|
|
mhaag-spl
|
23a2dcb7c1
|
Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm
|
2021-08-10 12:37:25 -06:00 |
|
|
mhaag-spl
|
6a81b49ae9
|
Update suspicious_msbuild_rename.yml
|
2021-08-10 12:37:22 -06:00 |
|
|
mhaag-spl
|
6a99bcffa8
|
Added detection testing service results inDetect Renamed rundll32.exe Rename
|
2021-08-10 12:26:39 -06:00 |
|
|
pyth0n1c
|
98f4f725c8
|
Changed all of the jobs which require tags to always checkout from develop. This will also allow update-sources-github to push to develop.
|
2021-08-10 11:05:53 -07:00 |
|
|
pyth0n1c
|
1eddb135e9
|
Added version=1.1 attributes to the forms to conform with new appinspect security requirements. Also changed the name of the report_failed uploaded report on failure.
|
2021-08-10 10:39:01 -07:00 |
|
|
pyth0n1c
|
1372bc0e8c
|
Store the appinspect report under a different name if it fails
|
2021-08-10 09:47:33 -07:00 |
|
|
tccontre
|
680db63bd5
|
conti_leak
|
2021-08-10 16:03:22 +02:00 |
|
|
tccontre
|
25917a36d6
|
conti_leak
|
2021-08-10 14:24:54 +02:00 |
|
|
tccontre
|
78177e9fe6
|
conti_leak
|
2021-08-10 14:16:33 +02:00 |
|