Commit Graph

18530 Commits

Author SHA1 Message Date
Jose Enrique Hernandez dc7d3bf9ea Merge branch 'develop' into misko_illegal_management 2020-11-10 19:21:33 -05:00
Jose Enrique Hernandez 205cfb92af Merge branch 'develop' into ssa-coverage 2020-11-10 18:26:42 -05:00
Jose Enrique Hernandez 238be2ac65 Merge pull request #898 from splunk/dependabot/pip/botocore-1.19.12
Bump botocore from 1.19.11 to 1.19.12
2020-11-10 18:26:21 -05:00
Jose Enrique Hernandez aebfb6286f Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-10 18:26:12 -05:00
Jose Enrique Hernandez edbc2585f7 Merge pull request #904 from splunk/dependabot/pip/certifi-2020.11.8
Bump certifi from 2020.6.20 to 2020.11.8
2020-11-10 18:25:26 -05:00
Jose Enrique Hernandez fb5f8faa76 Merge branch 'develop' into dependabot/pip/certifi-2020.11.8 2020-11-10 18:24:52 -05:00
Jose Enrique Hernandez d026ba24d9 Merge branch 'develop' into fix_broken_links_readme 2020-11-10 18:24:15 -05:00
divious1 0869243901 fixing broken links 2020-11-10 18:23:26 -05:00
Bhavin Patel fb867b5697 Merge pull request #696 from splunk/mustang_beta
WIP: Mustang Beta Drop 2
2020-11-10 15:05:55 -08:00
Xiao Lin 1b253a8d4b Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-10 21:35:09 +00:00
bpatel be86a838e4 Merge branch 'mustang_beta' of https://github.com/splunk/security-content into mustang_beta 2020-11-10 10:56:30 -08:00
bpatel 7c544b9446 deleteing test files 2020-11-10 10:56:13 -08:00
inspired fe003db5d6 Merge branch 'develop' into mbjerkeland-develop 2020-11-10 19:23:19 +01:00
Bhavin Patel 3aa06e82b6 Merge branch 'develop' into mustang_beta 2020-11-10 09:59:18 -08:00
bpatel 64bd08b5ff these macro files are not needed 2020-11-10 09:14:23 -08:00
P4T12ICK 832ce6a2ae Update windows_security_account_manager_stopped.test.yml 2020-11-10 16:49:19 +01:00
P4T12ICK 20b9f7a784 Update windows_disableantispyware_reg.test.yml 2020-11-10 16:49:02 +01:00
P4T12ICK 7eabf717c0 Update windows_conhost_exe_force_flag.test.yml 2020-11-10 16:48:47 +01:00
P4T12ICK ac4bab5bee Update ryuk_test_files_detected.test.yml 2020-11-10 16:48:28 +01:00
P4T12ICK b7876411e2 Update ryuk_test_files_detected.test.yml 2020-11-10 16:48:03 +01:00
P4T12ICK cacd61039b Update windows_security_account_manager_stopped.test.yml 2020-11-10 16:42:51 +01:00
P4T12ICK b435c6ce9c Update windows_disableantispyware_reg.test.yml 2020-11-10 16:42:33 +01:00
P4T12ICK 52993d830a Update windows_conhost_exe_force_flag.test.yml 2020-11-10 16:42:16 +01:00
P4T12ICK b1e4cccec2 Update ryuk_test_files_detected.test.yml 2020-11-10 16:41:13 +01:00
Detection Testing Service 9cdca4e7b6 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 15:15:19 +00:00
root 9e6a855e6d Added detection testing service results inDetect PsExec With accepteula Flag 2020-11-10 15:15:18 +00:00
Detection Testing Service 3a59c7734a Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 15:02:19 +00:00
root ff4207b44c Added detection testing service results inDetect Use of cmd exe to Launch Script Interpreters 2020-11-10 15:02:17 +00:00
P4T12ICK 7867a6c825 new test file 2020-11-10 15:59:50 +01:00
P4T12ICK 3f6f8af783 new test file 2020-11-10 15:44:07 +01:00
dependabot[bot] 47bd9e77f3 Merge pull request #909 from splunk/dependabot/pip/boto3-1.16.14 2020-11-10 14:28:02 +00:00
Detection Testing Service 7f7933af05 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 14:26:42 +00:00
root 285a6f9860 Added detection testing service results inDetect processes used for System Network Configuration Discovery 2020-11-10 14:26:41 +00:00
P4T12ICK 2da2082b6a new test file 2020-11-10 15:13:15 +01:00
dependabot[bot] f243ce0dc9 Bump boto3 from 1.16.13 to 1.16.14
Bumps [boto3](https://github.com/boto/boto3) from 1.16.13 to 1.16.14.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.13...1.16.14)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-10 14:05:09 +00:00
Stanislav Miskovic 4aa2af44d4 Fix adding a missing guid 2020-11-10 01:26:16 -08:00
Stanislav Miskovic 4dc12ac4da Fix a typo in name field 2020-11-10 01:21:39 -08:00
Stanislav Miskovic 1969d4a9ab Illegal control of compromised resources via Mimikatz, PowerSploit and DSInternals modules 2020-11-10 00:58:27 -08:00
Mikael Bjerkeland 3675fa80ad Rename 2020-11-10 09:37:33 +01:00
root 3bf9acae8c Added detection testing service results inDetect Prohibited Applications Spawning cmd exe 2020-11-10 08:35:10 +00:00
Mikael Bjerkeland 4a29a71009 Dashes in references 2020-11-10 09:30:50 +01:00
P4T12ICK 1f3f1ae408 Merge branch 'develop' into mbjerkeland-develop 2020-11-10 09:24:55 +01:00
P4T12ICK 4059b769a2 new detection test 2020-11-10 09:20:22 +01:00
P4T12ICK 70466c9301 new detection test 2020-11-10 09:02:24 +01:00
David Dorsey 941bbf9de7 Added enableSched = 1 to baseline searches 2020-11-09 22:23:43 -06:00
Ignacio Bermudez Corrales 6e14af85c6 changed image to one maintained by Splunk 2020-11-09 15:06:03 -08:00
research bot d0aa011c20 updating docs and package bits [ci skip] 2020-11-09 23:01:54 +00:00
Jose Enrique Hernandez 33561b084c Merge pull request #906 from splunk/jzsplunk-patch-1
Update README.md
2020-11-09 17:51:44 -05:00
Jose Enrique Hernandez 49954af581 Merge branch 'develop' into jzsplunk-patch-1 2020-11-09 17:51:36 -05:00
Jose Enrique Hernandez 2c9c0252c6 Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-09 17:51:15 -05:00