Commit Graph

18530 Commits

Author SHA1 Message Date
tccontre 204670cbe1 Update linux_at_allow_config_file_creation.yml 2022-01-05 16:33:43 +01:00
root 2e9f51cca4 Added detection testing service results inLinux File Created In Kernel Driver Directory 2022-01-05 14:34:31 +00:00
root 64dfd4a621 Added detection testing service results inLinux Install Kernel Module Using Modprobe Utility 2022-01-05 13:08:14 +00:00
root a1a6087bcd Added detection testing service results inLinux Sudoers Tmp File Creation 2022-01-05 12:38:46 +00:00
tccontre 06ffa22394 Update linux_sudoers_tmp_file_creation.yml 2022-01-05 13:20:37 +01:00
tccontre ab844e062f linux_persist_priv_batch_3 2022-01-05 13:17:08 +01:00
root fb306cb79b Added detection testing service results inLinux Visudo Utility Execution 2022-01-05 12:12:09 +00:00
tccontre 14534c2f53 Merge branch 'linux_persist_priv_batch_3' of github.com:splunk/security_content into linux_persist_priv_batch_3 2022-01-05 12:48:02 +01:00
tccontre 377a4822f7 linux_persist_priv_batch_3 2022-01-05 12:47:45 +01:00
root 78e61e8ee4 Added detection testing service results inLinux Change File Owner To Root 2022-01-05 11:42:47 +00:00
tccontre 37185f3e0d linux_persist_priv_batch_3 2022-01-05 11:34:57 +01:00
tccontre fa843067da Merge pull request #1917 from splunk/remocs_desc_update
remcos_desc_update
2022-01-05 09:41:08 +01:00
tccontre 78732dfe2d Update linux_file_creation_in_profile_directory.yml 2022-01-04 18:00:42 +01:00
tccontre e8cde0b1f6 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 17:59:26 +01:00
pyth0n1c e10f55348c Updated Detection Text
Updated Text of Detection "Suspicious Process DNS Query Known Abuse Web Services"
2022-01-04 08:47:13 -08:00
pyth0n1c 8891384376 Small Text Update
Small Text Update to "Loading Of Dynwrapx Module"
2022-01-04 08:42:39 -08:00
tccontre 7420f730d4 Update suspicious_process_dns_query_known_abuse_web_services.yml 2022-01-04 17:39:17 +01:00
pyth0n1c 249c784daf Small Text Updates
Small Text Updates to "Loading Of Dynwrapx Module"
2022-01-04 08:38:05 -08:00
pyth0n1c 5702bf9c7d Minor Text Updates
Minor Text Updates to "System Info Gathering Using Dxdiag Application"
2022-01-04 08:36:46 -08:00
pyth0n1c 54e6931e48 Minor Text Updates
Minor updates to the text of  "Suspicious Process DNS Query Known Abuse Web Services"
2022-01-04 08:31:04 -08:00
pyth0n1c cff1c5dd74 Update Text of Detection
Minor update to text of "Possible Browser Pass View Parameter"
2022-01-04 08:23:36 -08:00
pyth0n1c 3c6c0dc575 Minor Text Update
Minor update to text of "Loading Of Dynwrapx Module"
2022-01-04 08:21:15 -08:00
Detection Testing Service 7fab0d38e0 test: git token variable name update 2022-01-04 17:45:34 +05:30
Detection Testing Service 79808deea1 Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-04 11:36:48 +00:00
root 4c40ac8961 Added detection testing service results inLinux Setuid Using Chmod Utility 2022-01-04 11:36:47 +00:00
root 1be58f55d2 Added detection testing service results inLinux Service Restarted 2022-01-04 11:35:23 +00:00
tccontre ff3172c7c0 linux_persist_priv_batch_2 2022-01-04 12:15:50 +01:00
tccontre 74dcbf5bbe linux_persist_priv_batch_2 2022-01-04 11:47:11 +01:00
root 472519cac0 Added detection testing service results inLinux File Creation In Init Boot Directory 2022-01-04 10:32:49 +00:00
tccontre f96aa5fbe3 Update linux_file_creation_in_init_boot_directory.yml 2022-01-04 11:11:14 +01:00
tccontre 9c96e69754 remcos_desc_update 2022-01-04 10:25:11 +01:00
Lou Stella 94f903d685 Merge pull request #1916 from splunk/adding_not_supported
modify experimental detections to say not supported
2022-01-03 13:46:45 -06:00
d1vious 8f0518b5af spelling fix 2022-01-03 14:39:48 -05:00
d1vious 7c1025425a fixed spelling 2022-01-03 14:35:49 -05:00
d1vious 50ba793358 fixing formatting 2022-01-03 12:20:42 -05:00
d1vious 1e731ee7af modify experimental detections to say not supported 2022-01-03 12:03:34 -05:00
tccontre 74b0691d7a Update linux_setuid_using_chmod_utility.yml 2022-01-03 15:52:31 +01:00
tccontre b20d3fed32 Update linux_file_creation_in_init_boot_directory.test.yml 2022-01-03 15:43:18 +01:00
Detection Testing Service cfe4b7148e Merge branch 'linux_persist_priv_batch_2' of https://github.com/splunk/security_content into linux_persist_priv_batch_2 2022-01-03 13:06:52 +00:00
root 943802aec6 Added detection testing service results inLinux File Creation In Profile Directory 2022-01-03 13:06:51 +00:00
tccontre 7c2874bb1e linux_persist_priv_batch_2 2022-01-03 13:57:17 +01:00
root 5ea972280c Added detection testing service results inLinux Service File Created In Systemd Directory 2022-01-03 12:38:40 +00:00
tccontre 0140a5a99b Update linux_setuid_using_chmod_utility.yml 2022-01-03 12:54:55 +01:00
tccontre f85658f1a0 linux_persist_priv_batch_2 2022-01-03 12:25:08 +01:00
root 72f7bb0676 Added detection testing service results inLinux Service Started Or Enabled 2022-01-03 10:35:34 +00:00
root 00521f06a5 Added detection testing service results inLinux Setuid Using Setcap Utility 2022-01-03 10:04:59 +00:00
tccontre 780aa81877 Update linux_setuid_using_setcap_utility.yml 2022-01-03 10:40:56 +01:00
dependabot[bot] 733abea5da Bump filelock from 3.4.0 to 3.4.2
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.4.0 to 3.4.2.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.4.0...3.4.2)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-01 23:00:54 +00:00
dependabot[bot] d4063a48cf Bump platformdirs from 2.4.0 to 2.4.1
Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](https://github.com/platformdirs/platformdirs/compare/2.4.0...2.4.1)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-01 23:00:51 +00:00
dependabot[bot] 2c803e1c6f Bump virtualenv from 20.10.0 to 20.12.1
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.10.0 to 20.12.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.10.0...20.12.1)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-01 23:00:48 +00:00