admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jose Enrique Hernandez 41c3669d30 Merge branch 'develop' into dependabot/pip/certifi-2020.11.8 2020-11-09 17:50:47 -05:00
Jose Enrique Hernandez c67d2e5944 Merge pull request #899 from splunk/ryuk-story 
Ryuk story and detections
v3.0.9 		2020-11-09 17:45:04 -05:00
divious1 d73c630bb0 removed samsam notes 2020-11-09 17:38:09 -05:00
divious1 30c6fa6606 fixing minor mistakes 2020-11-09 17:32:13 -05:00
divious1 6b8b2b61ec Revert "Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story" 
This reverts commit b1db736eb2, reversing
changes made to 026bb228a0.
 2020-11-09 14:55:16 -05:00
Jose Enrique Hernandez 54eddbd393 Merge branch 'develop' into ryuktestsfiles 2020-11-09 14:12:10 -05:00
Xiao Lin d71196915e Merge branch 'TR162' of github.com:splunk/security-content into TR162 2020-11-09 19:12:07 +00:00
Xiao Lin 09c43eff66 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-09 18:10:02 +00:00
jzsplunk c1d01b4a46 Update README.md 
Fix link to community-slack channel
 2020-11-09 09:32:55 -08:00
divious1 79a9a16809 updating with upstream 2020-11-09 11:23:11 -05:00
Jose Enrique Hernandez 37dd447777 Merge pull request #884 from splunk/detection_testing_part_one 
Automated Detection Testing PR detection_testing_part_one
 2020-11-09 11:21:16 -05:00
P4T12ICK f51a8f5b10 Merge branch 'develop' into detection_testing_part_one 2020-11-09 17:16:01 +01:00
divious1 f8fc4fa95d fixing warning on comparisons 2020-11-09 11:10:10 -05:00
root 31ec8a4bc3 Added detection testing service results inDetect mshta exe running scripts in command-line arguments 2020-11-09 15:59:06 +00:00
Jose Enrique Hernandez 8c12dd3eee Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-09 10:56:44 -05:00
divious1 b1db736eb2 Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story 2020-11-09 10:55:45 -05:00
dependabot[bot] b0a9af9bdb Bump certifi from 2020.6.20 to 2020.11.8 
Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.6.20 to 2020.11.8.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2020.06.20...2020.11.08)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:42:28 +00:00
dependabot[bot] 46d503405b Merge pull request #886 from splunk/dependabot/pip/ansible-2.10.3 2020-11-09 15:41:35 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
dependabot[bot] 919b7236d8 Bump ansible from 2.10.2 to 2.10.3 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.2...v2.10.3)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:31:19 +00:00
Jose Enrique Hernandez 1819339f4d Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:14:28 -05:00
P4T12ICK 5a34ae63ae Merge branch 'develop' into detection_testing_part_one 2020-11-09 15:56:23 +01:00
dependabot[bot] f053664217 Merge pull request #903 from splunk/dependabot/pip/boto3-1.16.13 2020-11-09 14:38:33 +00:00
dependabot[bot] fc25eb7cb9 Bump boto3 from 1.16.11 to 1.16.13 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.11 to 1.16.13.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.11...1.16.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 14:05:25 +00:00
P4T12ICK 97181a2276 detection review 2020-11-09 14:36:48 +01:00
P4T12ICK cfcaa4c0e8 Merge branch 'develop' into detection_testing_part_one 2020-11-09 14:36:14 +01:00
Detection Testing Service 60dec9ea55 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 12:43:38 +00:00
root 89ede1f1f8 Added detection testing service results inDetect Excessive Account Lockouts From Endpoint 2020-11-09 12:43:35 +00:00
root a99d31c43a Added detection testing service results inDetect Excessive User Account Lockouts 2020-11-09 12:43:26 +00:00
P4T12ICK 53bc5414f9 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 13:25:41 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
root 1e5bbadd2b Added detection testing service results inDeleting Shadow Copies 2020-11-09 09:56:18 +00:00
P4T12ICK ff910fa590 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 10:38:50 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
inspired a9a17dee87 Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:17:58 +01:00
Mikael Bjerkeland fb0398fafb Added test 2020-11-09 10:12:52 +01:00
Detection Testing Service fbccb2412c Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:51:53 +00:00
root ffb6fb5409 Added detection testing service results inCommon Ransomware Notes 2020-11-09 08:51:52 +00:00
Detection Testing Service 69d8c00af3 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:43:18 +00:00
root ede365c015 Added detection testing service results inCommon Ransomware Extensions 2020-11-09 08:43:16 +00:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
P4T12ICK b25ef1a4cb ransomware extension 2020-11-09 09:24:14 +01:00
Rod Soto f8a131528d widowswsecuritysamsearch 2020-11-08 11:30:34 -05:00
Rod Soto e21455a145 fixnamedaddedantispyware 2020-11-08 11:10:49 -05:00
Rod Soto 2fd9f07c75 winconhostryuksearch 2020-11-08 10:57:02 -05:00
Rod Soto 7af33cfd4f ryuktestfilestestfile 2020-11-08 10:27:03 -05:00
Stanislav Miskovic fbb5ee4c7f Reconnaissance - adding detections for AD infrastructure, network connectivity, computers, domains, processes, services, registry, shares, etc. 2020-11-06 18:15:45 -08:00
divious1 026bb228a0 Merge branch 'ryuk-story' of github.com:splunk/security-content into ryuk-story 2020-11-06 19:08:00 -05:00
divious1 2d37dc2e26 fixed validation errors 2020-11-06 19:07:54 -05:00