admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
bpatel 5ea7944a5c Merge branch 'develop' into mustang_beta_test_files 2020-11-23 12:09:26 -08:00
bpatel ccfabb6f64 adding test files 2020-11-23 12:07:09 -08:00
P4T12ICK 41053507a0 Merge branch 'develop' into testing-data-pulling 2020-11-23 18:05:20 +01:00
root 8f29a49084 Added detection testing service results inProcesses created by netsh 2020-11-23 13:38:44 +00:00
P4T12ICK 487bf254e9 bug fix 2020-11-23 14:12:01 +01:00
P4T12ICK 4a16856ea3 new test file 2020-11-23 13:28:48 +01:00
P4T12ICK bd46dd7952 new test file 2020-11-23 13:19:32 +01:00
root 2b226cd902 Added detection testing service results inOverwriting Accessibility Binaries 2020-11-23 11:59:15 +00:00
P4T12ICK eea56a42c7 new test file 2020-11-23 12:41:19 +01:00
root 3230ea0abf Added detection testing service results inMonitor Registry Keys for Print Monitors 2020-11-23 10:55:34 +00:00
P4T12ICK c50404646b new test file 2020-11-23 11:37:22 +01:00
Ignacio Bermudez Corrales 54141c1de6 missing imports in ssa_validate 2020-11-20 09:34:06 -08:00
Ignacio Bermudez Corrales 0b93c814a0 missing sys in ssa_validate 2020-11-20 09:32:02 -08:00
dependabot[bot] dbcda3ca56 Bump botocore from 1.19.21 to 1.19.22 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.21 to 1.19.22.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.21...1.19.22)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-20 09:32:02 -08:00
dependabot[bot] 75da36c992 Bump boto3 from 1.16.21 to 1.16.22 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.21 to 1.16.22.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.21...1.16.22)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-20 09:32:02 -08:00
root 15e747d27e Added detection testing service results inMalicious PowerShell Process - Execution Policy Bypass 2020-11-20 14:56:44 +00:00
P4T12ICK be6690a4d3 new test 2020-11-20 15:39:01 +01:00
dependabot[bot] 41a5c35ba4 Merge pull request #947 from splunk/dependabot/pip/botocore-1.19.22 2020-11-20 14:12:58 +00:00
dependabot[bot] 380437fa38 Bump botocore from 1.19.21 to 1.19.22 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.21 to 1.19.22.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.21...1.19.22)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-20 14:07:48 +00:00
dependabot[bot] f120a059ed Merge pull request #946 from splunk/dependabot/pip/boto3-1.16.22 2020-11-20 14:07:01 +00:00
dependabot[bot] 35c2aab7f0 Bump boto3 from 1.16.21 to 1.16.22 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.21 to 1.16.22.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.21...1.16.22)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-20 14:02:55 +00:00
P4T12ICK e880dc0eb3 new test 2020-11-20 12:16:51 +01:00
root 548f448774 Added detection testing service results inMalicious PowerShell Process - Connect To Internet With Hidden Window 2020-11-20 10:24:45 +00:00
P4T12ICK ed24233aa4 new test 2020-11-20 11:06:14 +01:00
Ignacio fb6d8ac64f Merge branch 'develop' into testing-data-pulling 2020-11-19 16:34:25 -08:00
Ignacio Bermudez Corrales 7187f2cef6 Refactored and pulls data only on ssa detections 2020-11-19 16:32:04 -08:00
bpatel b8bc6147a8 add pass conditions 2020-11-19 14:40:15 -08:00
bpatel 515756519b add test conditions 2020-11-19 12:29:40 -08:00
root 9554c26145 Added detection testing service results inHiding Files And Directories With Attrib exe 2020-11-19 15:49:55 +00:00
P4T12ICK d531531ab6 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-19 16:30:47 +01:00
P4T12ICK 5d69211334 update 2020-11-19 16:30:27 +01:00
dependabot[bot] a8543c539f Merge pull request #943 from splunk/dependabot/pip/botocore-1.19.21 2020-11-19 14:22:07 +00:00
dependabot[bot] 7bb0d714c8 Bump botocore from 1.19.20 to 1.19.21 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.20 to 1.19.21.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.20...1.19.21)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-19 14:09:26 +00:00
dependabot[bot] e39779f761 Merge pull request #944 from splunk/dependabot/pip/boto3-1.16.21 2020-11-19 14:08:36 +00:00
dependabot[bot] 2d3e6ab43a Bump boto3 from 1.16.20 to 1.16.21 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.20 to 1.16.21.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.20...1.16.21)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-19 14:03:42 +00:00
Detection Testing Service 4509b3dadc Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-19 13:44:56 +00:00
root 4fbde2e53d Added detection testing service results inFirst Time Seen Child Process of Zoom 2020-11-19 13:44:55 +00:00
Detection Testing Service ecb63ccbe2 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-19 13:30:31 +00:00
root 0d974f1f5b Added detection testing service results inFile with Samsam Extension 2020-11-19 13:30:29 +00:00
P4T12ICK 36889141d3 new test file 2020-11-19 14:28:31 +01:00
P4T12ICK 3602c9f961 new test file 2020-11-19 14:11:18 +01:00
root 4ce47e6921 Added detection testing service results inExecution of File with Multiple Extensions 2020-11-19 10:55:54 +00:00
P4T12ICK c277a26f14 merge conflict 2020-11-19 11:35:42 +01:00
Bhavin Patel bb6a5d9e75 Merge pull request #942 from splunk/issue_941 
updating risk object
 2020-11-18 15:46:53 -08:00
Bhavin Patel 2772bf4559 Merge pull request #940 from wesinator/patch-1 
add additional suspicious file extensions
 2020-11-18 15:28:33 -08:00
bpatel e0c267779f updating risk object 2020-11-18 15:23:13 -08:00
bpatel 0737c2538a testing file update 2020-11-18 15:20:31 -08:00
Ԝеѕ 0f2056149f add additional suspicious file extensions 
chm, vbe, additional media double ext exe's
 2020-11-18 16:19:11 -05:00
Ignacio 688b006ed0 Merge pull request #890 from splunk/misko_credential_probing 
Probing access with stolen credentials,  assessing credential strength, recon of credential stores and use of CryptoAPI
 2020-11-18 11:36:16 -08:00
Ignacio 4e5b26e322 Merge branch 'develop' into misko_credential_probing 2020-11-18 11:30:43 -08:00