5952 Commits

Author SHA1 Message Date
github-actions[bot] 24144f5444 Branch was auto-updated. 2021-03-23 07:59:36 +00:00
P4T12ICK 36da0cb9f5 Merge pull request #1284 from splunk/ssa_deprecate_rare_parent_process
ssa deprecate rare parent process
2021-03-23 08:59:14 +01:00
Ignacio Bermudez Corrales adc4aa9908 tear down on any sort of error (not just assertions) 2021-03-22 16:09:20 -07:00
Ignacio Bermudez Corrales 1b76734dd3 check before modifications 2021-03-22 14:42:16 -07:00
Ignacio Bermudez Corrales ec2ba3450a fix check source/sink 2021-03-22 14:16:21 -07:00
Ignacio Bermudez Corrales 641fa24fb3 matching api outputs 2021-03-22 12:56:35 -07:00
Ignacio Bermudez Corrales 61d2dbb0e8 api queries return tuples 2021-03-22 12:44:49 -07:00
Ignacio Bermudez Corrales d6d02eb6fc removing index fixed 2021-03-22 11:56:08 -07:00
Ignacio Bermudez Corrales 13ab17f2d1 refactor test workflow with assertions and catch. Teardown as well 2021-03-22 11:31:49 -07:00
github-actions[bot] 1472d39a61 Branch was auto-updated. 2021-03-22 17:51:54 +00:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
Michael Haag 7c25bb12e2 Merge pull request #1279 from splunk/mhaag
Updated Detect Exchange Web Shell
2021-03-22 11:51:29 -06:00
mhaag-spl 17cbdf590c Update detect_exchange_web_shell.yml 2021-03-22 09:27:09 -06:00
root 3657fc8ea7 Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-03-22 12:54:27 +00:00
mhaag-spl 5f1b737ace Update detect_exchange_web_shell.yml 2021-03-22 06:27:06 -06:00
Ignacio Bermudez Corrales d47e5c395e Dealing with yaml and yml for testing 2021-03-19 16:45:05 -07:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 548f768ff3 refactoring base tests 2021-03-19 15:10:06 -07:00
Ignacio Bermudez Corrales 593ae74fdf Refactoring template replacement 2021-03-19 14:51:53 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
divious1 6bf8b82877 added write to null 2021-03-19 14:08:26 -04:00
divious1 066b81e6ef moved out of deprecated 2021-03-19 13:59:56 -04:00
divious1 63aad3ee43 deprecating detection 2021-03-19 13:58:48 -04:00
github-actions[bot] de37d7879c Branch was auto-updated. 2021-03-19 13:24:22 +00:00
github-actions[bot] cf44d1ac60 Branch was auto-updated. 2021-03-19 13:24:18 +00:00
Michael Haag 72f8a6f88a Merge pull request #1281 from splunk/ssa_detection_testing
Ssa detection testing
2021-03-19 07:23:58 -06:00
P4T12ICK 805f2baea8 small bug fixes 2021-03-19 13:43:37 +01:00
mhaag-spl 00965fbd34 Delete detect_exchange_web_shell.yml 2021-03-19 06:41:51 -06:00
P4T12ICK 6355bb7f72 small bug fixes 2021-03-19 13:30:13 +01:00
mhaag-spl a912985629 Update detect_exchange_web_shell.yml 2021-03-19 06:27:24 -06:00
P4T12ICK 36f63418f0 detection testing SSA 2021-03-19 10:16:58 +01:00
P4T12ICK d13a1896ef detection testing SSA 2021-03-19 09:37:18 +01:00
Michael Haag b59430ab5d Merge branch 'develop' into mhaag 2021-03-18 21:24:34 -06:00
mhaag-spl 1a15d623cf Update detect_exchange_web_shell.yml
UID
2021-03-18 21:06:38 -06:00
mhaag-spl 34e69271f3 Updated Detect Exchange Web Shell
Updated Detect Exchange Web Shell based on data
2021-03-18 21:00:09 -06:00
github-actions[bot] 8d3c28e475 Branch was auto-updated. 2021-03-18 20:06:10 +00:00
Bhavin Patel 0ca9e09988 Merge pull request #1273 from splunk/removed_unused_modules
removed unused modules
2021-03-18 13:05:49 -07:00
github-actions[bot] fd2f9e590a Branch was auto-updated. 2021-03-18 19:51:50 +00:00
github-actions[bot] 4504c76745 Branch was auto-updated. 2021-03-18 19:51:49 +00:00
Jose Enrique Hernandez 7593428e15 Merge pull request #1277 from splunk/ssa_end_to_end_improvements
Fix smoketest concurrency and add more time for smoketest (30m)
2021-03-18 15:51:28 -04:00
Ignacio Bermudez Corrales e320ae812a Fix smoketest concurrency and add more time for smoketest (30m) 2021-03-18 11:28:59 -07:00
github-actions[bot] 02ee0f2834 Branch was auto-updated. 2021-03-18 16:54:42 +00:00
github-actions[bot] 89698a085e Branch was auto-updated. 2021-03-18 16:54:40 +00:00
Ignacio 6a728ad7ac Merge pull request #1245 from splunk/ssa_end_to_end_testing
Ssa end to end testing
2021-03-18 09:54:17 -07:00
Ignacio Bermudez Corrales 2ca3af8293 changing qbec behavior for parallel executions 2021-03-18 08:56:26 -07:00
github-actions[bot] 4d814022cf Branch was auto-updated. 2021-03-18 15:05:58 +00:00
github-actions[bot] 86523734f5 Branch was auto-updated. 2021-03-18 15:05:50 +00:00
github-actions[bot] 20a076d9b5 Branch was auto-updated. 2021-03-18 15:05:48 +00:00
P4T12ICK c902466c23 Merge pull request #1275 from splunk/dependabot/pip/identify-2.1.3
Bump identify from 1.5.13 to 2.1.3
2021-03-18 16:05:20 +01:00
github-actions[bot] 6520997aba Branch was auto-updated. 2021-03-18 14:38:30 +00:00