Commit Graph

18530 Commits

Author SHA1 Message Date
Ignacio 1db0cb220e Merge branch 'develop' into misko_credential_probing 2020-11-17 08:58:17 -08:00
Jose Enrique Hernandez 7f24225471 Merge pull request #926 from splunk/TR-279
Find problems with declared SSA fields in detection file
2020-11-17 11:46:01 -05:00
Jose Enrique Hernandez b43558177d Merge branch 'develop' into TR-279 2020-11-17 11:35:51 -05:00
dependabot[bot] c847865345 Merge pull request #933 from splunk/dependabot/pip/botocore-1.19.19 2020-11-17 14:45:36 +00:00
dependabot[bot] 16be07ffab Bump botocore from 1.19.18 to 1.19.19
Bumps [botocore](https://github.com/boto/botocore) from 1.19.18 to 1.19.19.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.18...1.19.19)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-17 14:30:57 +00:00
dependabot[bot] 1caced36cd Merge pull request #934 from splunk/dependabot/pip/boto3-1.16.19 2020-11-17 14:30:11 +00:00
dependabot[bot] e564aade69 Bump boto3 from 1.16.18 to 1.16.19
Bumps [boto3](https://github.com/boto/boto3) from 1.16.18 to 1.16.19.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.18...1.16.19)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-17 14:02:49 +00:00
Bhavin Patel f110c1febe Merge branch 'develop' into mustang_beta_test_files 2020-11-16 20:44:01 -08:00
Bhavin Patel fe317c40fb Merge branch 'develop' into mustang_beta_drop3 2020-11-16 20:34:01 -08:00
bpatel 98bcdf47fc datamodel fix 2020-11-16 20:15:36 -08:00
bpatel 8e5a9e731b spl update 2020-11-16 18:46:43 -08:00
bpatel a7110f1fec change type is EC2 2020-11-16 17:25:45 -08:00
bpatel 8895ffddf7 updating macro fields 2020-11-16 17:22:29 -08:00
bpatel 2bed51a09e spl updates 2020-11-16 15:35:30 -08:00
Ignacio Bermudez Corrales 4f0ae086f5 order in ci pipeline: validate then test 2020-11-16 14:45:58 -08:00
Ignacio Bermudez Corrales e55747704d validating pipeline output required fields
minor change
2020-11-16 14:30:43 -08:00
Ignacio Bermudez Corrales 485a16b19c More refactoring 2020-11-16 14:10:35 -08:00
Ignacio Bermudez Corrales 9432661c7b Merge branch 'develop' into TR-279 2020-11-16 13:43:32 -08:00
Ignacio Bermudez Corrales 71c5439788 minor change 2020-11-16 13:42:46 -08:00
Ignacio Bermudez Corrales 75d4610315 Renaming of objects
renaming of objects
2020-11-16 12:11:48 -08:00
Ignacio Bermudez Corrales 655e3079b8 code cleanup
Adding SPL2 syntax checking in validation
2020-11-16 11:00:46 -08:00
Ignacio Bermudez Corrales af98cad796 refactoring 2020-11-16 10:20:50 -08:00
research bot f174ac7475 updating docs and package bits [ci skip] 2020-11-16 17:17:08 +00:00
P4T12ICK 9b2c2bcf28 Merge branch 'develop' into detection_testing_part_one 2020-11-16 15:38:40 +01:00
P4T12ICK c049e81eec Merge branch 'develop' into ryuktestsfiles 2020-11-16 15:33:11 +01:00
dependabot[bot] 9e789a5d6d Merge pull request #930 from splunk/dependabot/pip/boto3-1.16.18 2020-11-16 14:23:28 +00:00
dependabot[bot] 756c1dbb77 Bump boto3 from 1.16.17 to 1.16.18
Bumps [boto3](https://github.com/boto/boto3) from 1.16.17 to 1.16.18.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.17...1.16.18)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-16 14:18:24 +00:00
dependabot[bot] b4f5da9bdd Merge pull request #928 from splunk/dependabot/pip/botocore-1.19.18 2020-11-16 14:17:32 +00:00
dependabot[bot] 82a0f21480 Bump botocore from 1.19.17 to 1.19.18
Bumps [botocore](https://github.com/boto/botocore) from 1.19.17 to 1.19.18.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.17...1.19.18)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-16 14:05:00 +00:00
Detection Testing Service c8a843c2e6 Merge branch 'ryuktestsfiles' of https://github.com/splunk/security-content into ryuktestsfiles 2020-11-16 13:59:32 +00:00
root e2069b258c Added detection testing service results inWindows Security Account Manager Stopped 2020-11-16 13:59:31 +00:00
root 87488d7c16 Added detection testing service results inRyuk Test Files Detected 2020-11-16 13:59:03 +00:00
P4T12ICK e52c5627be test files changed 2020-11-16 14:41:38 +01:00
research bot 4873864495 updating docs and package bits [ci skip] 2020-11-13 20:27:19 +00:00
Ignacio Bermudez Corrales 869eea1924 Added required fields for all SSA detections 2020-11-13 10:27:29 -08:00
Ignacio Bermudez Corrales 9cc734c38d Find problems with declared SSA fields in detection file
Look for required_fields in tags
2020-11-13 09:32:19 -08:00
dependabot[bot] c5916e5e39 Merge pull request #924 from splunk/dependabot/pip/botocore-1.19.17 2020-11-13 14:16:27 +00:00
dependabot[bot] 87063ab3f4 Bump botocore from 1.19.16 to 1.19.17
Bumps [botocore](https://github.com/boto/botocore) from 1.19.16 to 1.19.17.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.16...1.19.17)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:12:39 +00:00
dependabot[bot] 09a53ac858 Merge pull request #925 from splunk/dependabot/pip/urllib3-1.26.2 2020-11-13 14:11:50 +00:00
dependabot[bot] c4d56ca596 Bump urllib3 from 1.26.1 to 1.26.2
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.1 to 1.26.2.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/master/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.1...1.26.2)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:07:53 +00:00
dependabot[bot] 48f4e53bab Merge pull request #923 from splunk/dependabot/pip/boto3-1.16.17 2020-11-13 14:07:18 +00:00
dependabot[bot] 3a8e95e49e Bump boto3 from 1.16.16 to 1.16.17
Bumps [boto3](https://github.com/boto/boto3) from 1.16.16 to 1.16.17.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.16...1.16.17)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:03:13 +00:00
Ignacio cbd3706b69 Merge pull request #922 from splunk/TR-293
Fixes for SSA 11/12/20
2020-11-12 15:37:00 -08:00
Ignacio Bermudez Corrales 3d88fe1b15 Fixes for SSA 11/12/20 v3.8.1 v3.9.0 2020-11-12 15:03:29 -08:00
bpatel 52d456fa33 detection update and scheduling 2020-11-12 13:51:55 -08:00
Bhavin Patel 398ee5f947 Merge pull request #843 from splunk/ransomwares3
Ransomwares3
2020-11-12 11:51:39 -08:00
Bhavin Patel 757941e42e Merge branch 'develop' into minor_mispelling 2020-11-12 11:49:40 -08:00
jzsplunk 85f6925d9b Merge pull request #920 from splunk/TR-290
Dowloads Humvee fat jar only if local checksum doesnt match repository latest
2020-11-12 11:46:05 -08:00
Ignacio Bermudez Corrales c79a1b06c6 Dowloads Humvee fat jar only if local checksum doesnt match repository latest 2020-11-12 11:29:47 -08:00
Jose Enrique Hernandez 042b0c97e6 Merge pull request #918 from splunk/dependabot/pip/requests-2.25.0
Bump requests from 2.24.0 to 2.25.0
2020-11-12 13:55:28 -05:00