a37dd2c427
Branch was auto-updated.
2022-02-11 08:52:53 -08:00
9f20073cfd
Merge pull request #2008 from splunk/dependabot/pip/urllib3-1.26.8
2022-02-11 11:52:30 -05:00
5b11f3daff
linux_lolbin_stage1
2022-02-11 13:44:14 +01:00
4f0622a5aa
Update to latest Splunkbase Windows Sysmon
2022-02-10 16:24:17 -08:00
889f27064c
Downloaded apps are now cached by default. This can save a huge amount of time on startup, especially for a large number of containers or for slower connections. Otherwise, each container that is set up needs over 600MB of throughput.
2022-02-10 15:50:25 -08:00
ace7ccbb6d
Update windows_schtasks_create_run_as_system.yml
2022-02-10 11:36:02 -07:00
ec90ee19d5
Now, when one or more detection tests fail in the CI/CD,
...
it will cause the workflow to fail. In turn, this would
prevent a PR from being merged. However, this
lets a developer know more easily (without needing
to dive into the GitHub Actions logs) whether or
not their detections passed successfully. It also
upload an extra file called DetectionFailureManifest
which is a test file for ONLY the failed tests.
You can run this locally on your machine to
quickly, interactively debug the failures only.
2022-02-10 09:17:23 -08:00
6c9c932c30
Branch was auto-updated.
2022-02-10 09:10:42 -08:00
2b113361e3
Branch was auto-updated.
2022-02-10 09:10:41 -08:00
98afaaa6b8
Branch was auto-updated.
2022-02-10 09:10:40 -08:00
afa55c5052
Branch was auto-updated.
2022-02-10 09:10:39 -08:00
428785a15f
Revert "Now, failing one or more CI/CD Tests causes"
...
This reverts commit 55e94c3eab
2022-02-10 09:07:02 -08:00
fe09d6238b
Branch was auto-updated.
2022-02-10 09:04:32 -08:00
b8b8c47ff3
Branch was auto-updated.
2022-02-10 09:04:31 -08:00
110a5e8628
Branch was auto-updated.
2022-02-10 09:04:29 -08:00
6a93f59340
Branch was auto-updated.
2022-02-10 09:04:28 -08:00
55e94c3eab
Now, failing one or more CI/CD Tests causes
...
the workflow to fail. An additional file is
also uploaded called "replicate_failures"
which allows the user to easily retest
just the failed tests locally.
2022-02-10 09:04:04 -08:00
40b34450a0
Windows Schtasks Create Run As System
2022-02-10 09:08:52 -07:00
58a6071d3d
Branch was auto-updated.
2022-02-09 16:53:39 -08:00
e456278647
Branch was auto-updated.
2022-02-09 16:53:37 -08:00
17e2f3c94b
Branch was auto-updated.
2022-02-09 16:53:36 -08:00
a1d17cba1a
Branch was auto-updated.
2022-02-09 16:53:35 -08:00
ce9493adca
Merge pull request #2009 from splunk/TR-1194v2
...
Tr 1194v2
2022-02-09 16:53:14 -08:00
baab603657
Update ssa___unusual_volume_download_from_internal_server.yml
2022-02-09 16:45:28 -08:00
ee2ee98742
remove duplicate
2022-02-09 16:44:17 -08:00
4c5f48c507
add detection for unusal volume of data download
2022-02-09 16:40:45 -08:00
a1e6d3e225
update search string
2022-02-09 16:36:10 -08:00
9a04a4e833
fix a typo
2022-02-09 16:36:10 -08:00
ddd492fe23
update data link to attack_range, move detection to experimental
2022-02-09 16:36:10 -08:00
62ab576733
Update ssa___unusual_volume_download_from_internal_server.yml
2022-02-09 16:36:10 -08:00
b31ee54c20
Unusual Volume of Data Download from Internal Server Per Entity
2022-02-09 16:36:10 -08:00
8bf87d95a7
Branch was auto-updated.
2022-02-09 16:29:15 -08:00
2c6c4feb55
Branch was auto-updated.
2022-02-09 16:29:14 -08:00
82adfb243c
Branch was auto-updated.
2022-02-09 16:29:13 -08:00
99e62645bc
Branch was auto-updated.
2022-02-09 16:29:10 -08:00
e3d1ae9be7
Bump urllib3 from 1.26.6 to 1.26.8
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 1.26.6 to 1.26.8.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.6...1.26.8 )
---
updated-dependencies:
- dependency-name: urllib3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-02-10 00:28:52 +00:00
a3c1998e49
Merge pull request #1980 from splunk/dependabot/pip/tomli-2.0.0
...
Bump tomli from 1.2.2 to 2.0.0
2022-02-09 16:28:47 -08:00
6ae9922819
Branch was auto-updated.
2022-02-09 16:28:22 -08:00
50d6d7e956
Branch was auto-updated.
2022-02-09 16:28:21 -08:00
68a55989bd
Branch was auto-updated.
2022-02-09 16:28:20 -08:00
7908ba4d01
Merge pull request #1979 from splunk/dependabot/pip/charset-normalizer-2.0.11
...
Bump charset-normalizer from 2.0.9 to 2.0.11
2022-02-09 16:28:04 -08:00
c4629f483a
Bump semantic-version from 2.8.5 to 2.9.0
...
Bumps [semantic-version](https://github.com/rbarrois/python-semanticversion ) from 2.8.5 to 2.9.0.
- [Release notes](https://github.com/rbarrois/python-semanticversion/releases )
- [Changelog](https://github.com/rbarrois/python-semanticversion/blob/master/ChangeLog )
- [Commits](https://github.com/rbarrois/python-semanticversion/compare/2.8.5...2.9.0 )
---
updated-dependencies:
- dependency-name: semantic-version
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-02-10 00:27:55 +00:00
8d4f4726c2
Branch was auto-updated.
2022-02-09 16:27:49 -08:00
9de796fb52
Branch was auto-updated.
2022-02-09 16:27:48 -08:00
a929cfee4b
Merge pull request #1983 from splunk/dependabot/pip/pre-commit-2.17.0
...
Bump pre-commit from 2.16.0 to 2.17.0
2022-02-09 16:27:47 -08:00
1fc138c12e
Branch was auto-updated.
2022-02-09 16:27:38 -08:00
d05a10a05c
Branch was auto-updated.
2022-02-09 16:27:37 -08:00
2f3e9c7f8f
Merge pull request #1984 from splunk/dependabot/pip/pyrsistent-0.18.1
...
Bump pyrsistent from 0.18.0 to 0.18.1
2022-02-09 16:27:27 -08:00
fac5da5771
Merge pull request #1997 from splunk/PRdeet
...
Update pull_request_template.md
2022-02-09 16:27:14 -08:00
d0afcb458d
Check to ensure that Splunkbase username and password are passed in the config or command line when one or more apps is lacking http_path or local_path. Before, this would be caught later on and not in the beginning. Also, the previous commit added new http_paths for all of the default apps.
2022-02-09 15:37:34 -08:00
pyth0n1c