admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl dbf7e128af MSBuild Story 2021-01-17 20:09:52 -07:00
mhaag-spl 28827c7fdb MSHTA 
Modified inlne mshta execution with the `about` protocol handler.
Added new mshta.exe child process analytic
 2021-01-17 20:02:56 -07:00
mhaag-spl bcf56faa51 Update suspicious_msbuild_netconn.yml 2021-01-17 19:49:13 -07:00
mhaag-spl 7414436df5 ID Collision 2021-01-17 19:46:00 -07:00
mhaag-spl 2e9bd74689 MSBuild 
fixes
 2021-01-17 19:43:38 -07:00
mhaag-spl 08488e067e Revert "Revert "Revert "Revert "T1127.001 MSbuild"""" 
This reverts commit fd5e4adfb1.
 2021-01-17 19:38:36 -07:00
mhaag-spl fd5e4adfb1 Revert "Revert "Revert "T1127.001 MSbuild""" 
This reverts commit 9617d4d9b3.
 2021-01-17 19:37:58 -07:00
mhaag-spl 9617d4d9b3 Revert "Revert "T1127.001 MSbuild"" 
This reverts commit e27ad1399a.
 2021-01-15 15:06:53 -07:00
mhaag-spl e27ad1399a Revert "T1127.001 MSbuild" 
This reverts commit 0eba4877ff.
 2021-01-15 15:06:15 -07:00
mhaag-spl 0eba4877ff T1127.001 MSbuild 
MSbuild detections and test.
 2021-01-15 14:25:25 -07:00
Bhavin Patel f15c2d33cb Merge pull request #1104 from splunk/allow_external_prs 
fixed bug where it did not checkout external branches
 2021-01-15 12:37:51 -08:00
Bhavin Patel 8cad455781 Merge branch 'develop' into allow_external_prs 2021-01-15 11:53:13 -08:00
divious1 13801b6a0e fixed bug where it did not checkout external branches 2021-01-15 11:14:47 -05:00
dependabot[bot] 7b4836b01b Merge pull request #1103 from splunk/dependabot/pip/botocore-1.19.55 2021-01-15 14:18:11 +00:00
dependabot[bot] 2ae044f136 Bump botocore from 1.19.54 to 1.19.55 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.54 to 1.19.55.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.54...1.19.55)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-15 14:12:10 +00:00
dependabot[bot] c7109e1eef Merge pull request #1102 from splunk/dependabot/pip/boto3-1.16.55 2021-01-15 14:11:10 +00:00
dependabot[bot] 28b54bef7d Bump boto3 from 1.16.54 to 1.16.55 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.54 to 1.16.55.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.54...1.16.55)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-15 14:05:20 +00:00
P4T12ICK 92485a8acd Merge pull request #1097 from splunk/TR-318_mfa 
O365 Bypass MFA via Trusted IP
 2021-01-15 10:21:56 +01:00
bpatel b99d01458e first commit with product tag 2021-01-14 17:09:00 -08:00
github-actions[bot] 18ba87492f Branch was auto-updated. 2021-01-14 20:29:17 +00:00
jzsplunk a772e74a83 Merge pull request #1078 from splunk/detection_testing_branch 
detection testing branch
 2021-01-14 12:28:53 -08:00
root b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers 2021-01-14 15:15:59 +00:00
P4T12ICK 50c3e8ead2 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-14 15:57:55 +01:00
P4T12ICK 2e1234c594 improved detections and tests 2021-01-14 15:57:42 +01:00
github-actions[bot] 42419b043e Branch was auto-updated. 2021-01-14 14:21:59 +00:00
dependabot[bot] e127c23ba0 Merge pull request #1100 from splunk/dependabot/pip/boto3-1.16.54 2021-01-14 14:21:38 +00:00
dependabot[bot] 1e0bc6e64a Bump boto3 from 1.16.53 to 1.16.54 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.53 to 1.16.54.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.53...1.16.54)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-14 14:14:35 +00:00
dependabot[bot] 7e6acc5465 Merge pull request #1099 from splunk/dependabot/pip/botocore-1.19.54 2021-01-14 14:13:29 +00:00
dependabot[bot] a55f2a129a Bump botocore from 1.19.53 to 1.19.54 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.53 to 1.19.54.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.53...1.19.54)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-14 14:05:31 +00:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
P4T12ICK d72747ccd4 new generate feature 2021-01-14 12:33:36 +01:00
root 050b89ebef Added detection testing service results inO365 Bypass MFA via Trusted IP 2021-01-14 02:45:18 +00:00
bpatel 20242b93e6 data path update 2021-01-13 18:27:06 -08:00
bpatel b7c0137282 test timing 2021-01-13 17:57:49 -08:00
bpatel 0b6757738e search error 2021-01-13 17:29:45 -08:00
bpatel 13ae19a958 uuid 2021-01-13 17:26:33 -08:00
bpatel c5e6238e20 updated lookup name 2021-01-13 17:21:27 -08:00
Bhavin Patel f74ebbea1c Merge branch 'develop' into TR-318_mfa 2021-01-13 17:19:00 -08:00
bpatel ab6d8cdfe1 new detection file and test data 2021-01-13 16:30:19 -08:00
bpatel a3193582e4 Merge branch 'lookup_name_duplicate' of github.com:splunk/security-content into lookup_name_duplicate 2021-01-13 15:49:10 -08:00
bpatel acd855474b minor 2021-01-13 15:49:03 -08:00
Bhavin Patel c1325067f1 Merge branch 'develop' into lookup_name_duplicate 2021-01-13 15:35:33 -08:00
bpatel 24128d4982 updating lookup name to avoid duplicates and deprecattion 2021-01-13 15:34:24 -08:00
P4T12ICK 0b025a11c3 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-13 17:59:49 +01:00
P4T12ICK 843d99f9d9 moved detections 2021-01-13 17:59:31 +01:00
github-actions[bot] b3996834e6 Branch was auto-updated. 2021-01-13 14:49:56 +00:00
github-actions[bot] f5b0df6920 Branch was auto-updated. 2021-01-13 14:49:54 +00:00
github-actions[bot] f7969df8c2 Branch was auto-updated. 2021-01-13 14:49:52 +00:00
github-actions[bot] 54f52cca25 Branch was auto-updated. 2021-01-13 14:49:51 +00:00
github-actions[bot] e03132e7d5 Branch was auto-updated. 2021-01-13 14:49:49 +00:00