admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,922 Commits 697 Branches 195 Tags
DetectionTestingDocker
Commit Graph

12922 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c f626f5b5a3 Updating/changing the way pip is used to be 
more verbose and use the correct python and
pip provided by the setup-python action.
 2021-07-27 16:05:52 -07:00
pyth0n1c c0e6f796ec Updated pip and added some commands to 
look at the directory structure during the testing
 2021-07-27 15:50:57 -07:00
pyth0n1c 0d0bc8f401 Validation error with YAML file - single step cannot 
include run and uses.
 2021-07-27 15:36:32 -07:00
pyth0n1c 6a6d1f80ec Initial commit testing the very first job of 
our Github Actions migration.  Should see
the output of running this command in
the Actions->Workflows tab.
 2021-07-27 15:23:25 -07:00
patel-bhavin 90191cd151 risk_update 2021-07-27 14:51:57 -07:00
patel-bhavin 60d499fb99 Merge branch 'blackbolt_duplicate' of github.com:splunk/security_content into blackbolt_duplicate 2021-07-27 14:41:15 -07:00
patel-bhavin f24ba42985 aws-cli 2021-07-27 14:41:06 -07:00
Bhavin Patel 7431704a71 Merge branch 'develop' into blackbolt_duplicate 2021-07-27 14:01:15 -07:00
patel-bhavin bf6804cef7 adding spl updates 2021-07-27 13:57:33 -07:00
github-actions[bot] ffa8a4a805 Branch was auto-updated. 2021-07-27 20:53:22 +00:00
github-actions[bot] da49981e4d Branch was auto-updated. 2021-07-27 20:53:18 +00:00
Bhavin Patel 7f1e68eea6 Merge pull request #1536 from sec-researcher/optimized 
Filter PTR requests to optimize deviation calculation and remove them from result.
 2021-07-27 13:53:02 -07:00
Bhavin Patel 4d3c12cf26 Merge branch 'develop' into optimized 2021-07-27 13:02:37 -07:00
dependabot[bot] 78493550fd Bump distlib from 0.3.1 to 0.3.2 
Bumps [distlib](https://bitbucket.org/pypa/distlib) from 0.3.1 to 0.3.2.
- [Changelog](https://bitbucket.org/pypa/distlib/src/master/CHANGES.rst)
- [Commits](https://bitbucket.org/pypa/distlib/branches/compare/0.3.2..0.3.1)

---
updated-dependencies:
- dependency-name: distlib
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-07-27 20:02:13 +00:00
github-actions[bot] 5dbf545f75 Branch was auto-updated. 2021-07-27 20:01:52 +00:00
Jose Enrique Hernandez 3807152d0a Merge pull request #1510 from splunk/dependabot/pip/splunk-sdk-1.6.16 
Bump splunk-sdk from 1.6.15 to 1.6.16
 2021-07-27 16:01:33 -04:00
root 2fd2af4d29 Added detection testing service results inDNS Query Length With High Standard Deviation 2021-07-27 19:59:57 +00:00
Jose Enrique Hernandez 4eb9a75f80 Merge branch 'develop' into optimized 2021-07-27 10:54:35 -04:00
patel-bhavin df4b290340 minor 2021-07-26 18:40:35 -07:00
github-actions[bot] 5ffddf539e Branch was auto-updated. 2021-07-26 16:11:51 +00:00
github-actions[bot] 6278d12ded Branch was auto-updated. 2021-07-26 16:11:45 +00:00
Bhavin Patel 6fb05a1b9f Merge pull request #1542 from splunk/Shadowsinthecopy 
SAM I AM
 2021-07-26 09:11:29 -07:00
P4T12ICK c4ce0e8590 converted response_task to investigations 2021-07-26 13:49:50 +02:00
P4T12ICK 686b0b5ca4 converted response_task to investigations 2021-07-26 13:39:17 +02:00
Michael Haag 48165c7e35 Merge branch 'develop' into Shadowsinthecopy 2021-07-23 14:10:05 -06:00
mhaag-spl ba92a642a8 SAM I AM 
I AM SAM
 2021-07-23 14:06:27 -06:00
P4T12ICK c69b8c1053 response tasks into investigations 2021-07-23 19:34:01 +02:00
github-actions[bot] c6639226df Branch was auto-updated. 2021-07-22 19:42:29 +00:00
github-actions[bot] c1ee926cac Branch was auto-updated. 2021-07-22 19:42:25 +00:00
Michael Haag d1ac094077 Merge pull request #1537 from splunk/Shadowsinthecopy 
4104 Shadow Copy
 2021-07-22 13:42:08 -06:00
github-actions[bot] cfede36f8f Branch was auto-updated. 2021-07-22 19:12:58 +00:00
github-actions[bot] b7a650741d Branch was auto-updated. 2021-07-22 19:12:53 +00:00
github-actions[bot] f82a26bf8a Branch was auto-updated. 2021-07-22 19:12:52 +00:00
Bhavin Patel a761479f6f Merge pull request #1533 from splunk/aws_snap_exfil 
AWS Exfil
 2021-07-22 12:12:35 -07:00
Michael Haag ad44baef29 Update detect_shared_ec2_snapshot.yml 2021-07-22 13:06:23 -06:00
github-actions[bot] 48babd0a33 Branch was auto-updated. 2021-07-22 16:43:08 +00:00
github-actions[bot] 8e6ab78a8f Branch was auto-updated. 2021-07-22 16:43:07 +00:00
github-actions[bot] 599f9cf046 Branch was auto-updated. 2021-07-22 16:43:02 +00:00
github-actions[bot] d09c80c1cc Branch was auto-updated. 2021-07-22 16:42:56 +00:00
Bhavin Patel 225afaa035 Merge pull request #1540 from splunk/git-fix 
The Haag Continuum
 2021-07-22 09:42:41 -07:00
mhaag-spl afe1d8a286 Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-22 06:55:12 -06:00
mhaag-spl 9acd9f32f7 Update detect_renamed_psexec.yml 
Resolving #1525 . Thank you!
 2021-07-22 06:20:47 -06:00
mhaag-spl d207154de3 Update detect_renamed_winrar.yml 
Resolving #1524. Thank you!
 2021-07-22 06:19:55 -06:00
Amir hossein Mahboubi 70dc0c1a59 Merge branch 'develop' into optimized 2021-07-22 16:35:02 +04:30
mhaag-spl e5d24fba22 Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-21 15:48:36 -06:00
mhaag-spl 28af2af96c Update detect_copy_of_shadowcopy_with_script_block_logging.yml 2021-07-21 15:46:49 -06:00
mhaag-spl e9e56493f8 Update detect_copy_of_shadowcopy_with_script_block_logging.test.yml 2021-07-21 15:44:04 -06:00
mhaag-spl b87f262923 test file 2021-07-21 15:41:42 -06:00
mhaag-spl bd69016d7e PowerShell 4104 copy of Security HIVES 
Modified macro to capture both XML rendered and non. Issue is, if you renderXML for powershell logging, it will have different fields. Something to be aware of.
 2021-07-21 13:57:10 -06:00
P4T12ICK 0c5aeec30c update circle ci 2021-07-21 16:38:01 +02:00