Commit Graph

18530 Commits

Author SHA1 Message Date
tcontreras 0a8ea69864 Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware 2021-03-23 10:57:23 +01:00
P4T12ICK 791b6f1126 increases max timeout limit 2021-03-23 09:50:29 +01:00
P4T12ICK 195dec5c2d Merge branch 'ssa_detection_testing' of github.com:splunk/security-content into ssa_detection_testing 2021-03-23 09:01:09 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] bf465bd253 Branch was auto-updated. 2021-03-23 07:59:38 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 1571523c8f Branch was auto-updated. 2021-03-23 07:59:32 +00:00
P4T12ICK 36da0cb9f5 Merge pull request #1284 from splunk/ssa_deprecate_rare_parent_process
ssa deprecate rare parent process
2021-03-23 08:59:14 +01:00
divious1 0d17d74d44 cleaned up custom js code and configs that are empty 2021-03-22 22:16:16 -04:00
divious1 24cad18e2f fixing requirements issues 2021-03-22 19:23:17 -04:00
divious1 3a9b4b7b4b fixing conflicts 2021-03-22 19:18:30 -04:00
divious1 cce49543b0 added logic to generate docs 2021-03-22 19:12:45 -04:00
Ignacio Bermudez Corrales adc4aa9908 tear down on any sort of error (not just assertions) 2021-03-22 16:09:20 -07:00
divious1 2a5ad289a6 added npm jsonchema2md 2021-03-22 19:02:47 -04:00
divious1 f224e3865e removing unecessary import 2021-03-22 18:02:35 -04:00
Ignacio Bermudez Corrales 1b76734dd3 check before modifications 2021-03-22 14:42:16 -07:00
Ignacio Bermudez Corrales ec2ba3450a fix check source/sink 2021-03-22 14:16:21 -07:00
Ignacio Bermudez Corrales 641fa24fb3 matching api outputs 2021-03-22 12:56:35 -07:00
Ignacio Bermudez Corrales 61d2dbb0e8 api queries return tuples 2021-03-22 12:44:49 -07:00
Ignacio Bermudez Corrales d6d02eb6fc removing index fixed 2021-03-22 11:56:08 -07:00
Ignacio Bermudez Corrales 13ab17f2d1 refactor test workflow with assertions and catch. Teardown as well 2021-03-22 11:31:49 -07:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
github-actions[bot] 445224ad9e Branch was auto-updated. 2021-03-22 17:51:50 +00:00
github-actions[bot] 3fa0fbab3b Branch was auto-updated. 2021-03-22 17:51:49 +00:00
github-actions[bot] b4c5d60a8f Branch was auto-updated. 2021-03-22 17:51:48 +00:00
Michael Haag 7c25bb12e2 Merge pull request #1279 from splunk/mhaag
Updated Detect Exchange Web Shell
2021-03-22 11:51:29 -06:00
root 089e2c09d1 Added detection testing service results inCreate Service In Suspicious File Path 2021-03-22 17:43:09 +00:00
root 52e5b1c6c2 Added detection testing service results inResize ShadowStorage volume 2021-03-22 17:08:42 +00:00
tcontreras 4bc91b7e60 Merge branch 'clop_ransomware' of github.com:splunk/security_content into clop_ransomware
clop_detection_svc
2021-03-22 16:28:39 +01:00
mhaag-spl 17cbdf590c Update detect_exchange_web_shell.yml 2021-03-22 09:27:09 -06:00
tcontreras f2284c0090 clop_detection_svc 2021-03-22 16:26:31 +01:00
root 61fa09ff42 Added detection testing service results inRansomware Notes bulk creation 2021-03-22 15:01:00 +00:00
tcontreras ab216fbfe8 rebase 2021-03-22 15:39:57 +01:00
tcontreras 7c09935e1e clop_detections 2021-03-22 14:22:08 +01:00
root 3657fc8ea7 Added detection testing service results inDetect Exchange Web Shell, ProxyLogon 2021-03-22 12:54:27 +00:00
root 7412098442 Added detection testing service results inClop Common Exec Parameter 2021-03-22 12:36:11 +00:00
mhaag-spl 5f1b737ace Update detect_exchange_web_shell.yml 2021-03-22 06:27:06 -06:00
tcontreras 6fa9ea2c0b clop_detections 2021-03-22 12:05:41 +01:00
tcontreras 08a0b64eb6 clop_test_file 2021-03-22 11:57:42 +01:00
tcontreras ba33452139 clop_test_file 2021-03-22 11:53:18 +01:00
tcontreras b42ef50322 clop_test_file 2021-03-22 11:45:21 +01:00
tcontreras ba2835963d modify-detections 2021-03-22 11:07:01 +01:00
P4T12ICK 5fc3209293 SSA detection tests updated 2021-03-22 09:22:44 +01:00
Daniel Pauler 7a9f57dbfc Updated jsonschema validation 2021-03-20 17:22:42 +01:00
Daniel Pauler 70e25e225a Updated jsonschema validation 2021-03-20 17:18:43 +01:00
Daniel Pauler a48e0fcdbb Fixed error handling 2021-03-20 17:09:48 +01:00
Daniel Pauler 3029ba2dad Added vscode config folder 2021-03-20 17:07:35 +01:00
Ignacio Bermudez Corrales d47e5c395e Dealing with yaml and yml for testing 2021-03-19 16:45:05 -07:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00