admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Detection Testing Service 4f5bcacd5a Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 13:08:59 +00:00
root 5d8f3f9ed4 Added detection testing service results inDump LSASS via comsvcs DLL 2020-11-04 13:08:57 +00:00
root c1ee613a59 Added detection testing service results inDetect Path Interception By Creation Of program exe 2020-11-04 13:07:50 +00:00
root 3842a15221 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy 2020-11-04 12:38:04 +00:00
Detection Testing Service a7ba6afe57 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format 2020-11-04 12:12:28 +00:00
root ee9330e03f Added detection testing service results inCreation of Shadow Copy 2020-11-04 12:12:26 +00:00
root df7b7b2230 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy 2020-11-04 12:08:51 +00:00
P4T12ICK b39e0d0967 Merge pull request #869 from splunk/dependabot/pip/pre-commit-2.8.2 
Bump pre-commit from 2.7.1 to 2.8.2
 2020-11-04 12:39:02 +01:00
root f2baa5ca54 Added detection testing service results inCreation of Shadow Copy with wmic and powershell 2020-11-04 11:10:33 +00:00
P4T12ICK cfbc3fee26 Merge branch 'develop' into dependabot/pip/pre-commit-2.8.2 2020-11-04 11:06:51 +01:00
P4T12ICK 30eca709f2 Merge pull request #874 from splunk/dependabot/pip/boto3-1.16.10 
Bump boto3 from 1.16.6 to 1.16.10
 2020-11-04 11:06:36 +01:00
root 64710a93c1 Added detection testing service results inCreate local admin accounts using net exe 2020-11-04 09:16:50 +00:00
P4T12ICK 17509bd038 Merge branch 'develop' into dependabot/pip/boto3-1.16.10 2020-11-04 10:03:13 +01:00
P4T12ICK 5cf4f70611 Merge pull request #873 from splunk/dependabot_auto_merges 
adding dependabot automerge with git workflows
 2020-11-04 10:02:53 +01:00
Stanislav Miskovic 16821b72b8 Applying and setting stolen cresentials - detections via PowerSploit, Mimikatz and DSInternals APIs 2020-11-04 01:02:47 -08:00
P4T12ICK eb21bbc377 Merge branch 'develop' into dependabot_auto_merges 2020-11-04 09:41:34 +01:00
dependabot[bot] 38b2289a57 Bump pre-commit from 2.7.1 to 2.8.2 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.7.1 to 2.8.2.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.7.1...v2.8.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 08:41:06 +00:00
dependabot[bot] 193fc587be Bump boto3 from 1.16.6 to 1.16.10 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.6 to 1.16.10.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.6...1.16.10)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-04 08:40:41 +00:00
P4T12ICK e8b5dc278b Merge pull request #875 from splunk/dependabot/pip/botocore-1.19.10 
Bump botocore from 1.19.6 to 1.19.10
 2020-11-04 09:40:09 +01:00
root 3415b9e414 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe 2020-11-04 08:34:58 +00:00
P4T12ICK 7f76d43d1b Merge branch 'develop' into dependabot_auto_merges 2020-11-04 09:24:00 +01:00
P4T12ICK e71e4b338a Merge branch 'develop' into dependabot/pip/botocore-1.19.10 2020-11-04 09:21:45 +01:00
P4T12ICK 38b65d148e Merge pull request #876 from splunk/dependabot/pip/identify-1.5.7 
Bump identify from 1.5.6 to 1.5.7
 2020-11-04 09:21:28 +01:00
Xiao Lin 7e6f92e6ed Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 00:27:33 +00:00
root 0cee900ae3 Added detection testing service results inAttempt To Add Certificate To Untrusted Store 2020-11-03 16:29:27 +00:00
P4T12ICK 15d866e2fa Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-11-03 17:05:11 +01:00
P4T12ICK 15a3dfed60 detection tests 2020-11-03 17:04:53 +01:00
dependabot[bot] 8bec983392 Bump identify from 1.5.6 to 1.5.7 
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.6 to 1.5.7.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.6...v1.5.7)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-03 14:04:40 +00:00
root 5b70b0ce9d Added detection testing service results inCreate local admin accounts using net exe 2020-11-03 12:30:01 +00:00
P4T12ICK b58799902f Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-11-03 08:58:01 +01:00
P4T12ICK ea57d72261 removed tmp.py 2020-11-03 08:57:40 +01:00
Jose Enrique Hernandez cf690c86b0 Merge branch 'develop' into new_test_file_format 2020-11-02 21:24:50 -05:00
dependabot[bot] b3f451c3c1 Bump botocore from 1.19.6 to 1.19.10 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.6 to 1.19.10.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.6...1.19.10)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-03 02:23:18 +00:00
Jose Enrique Hernandez 101bc9ca05 Merge pull request #872 from splunk/dependabot/pip/pytz-2020.4 
Bump pytz from 2020.1 to 2020.4
 2020-11-02 21:22:20 -05:00
divious1 36f18aa2ca adding dependabot automerge with git workflows 2020-11-02 21:19:19 -05:00
dependabot[bot] 47b44bc4cb Bump pytz from 2020.1 to 2020.4 
Bumps [pytz](https://github.com/stub42/pytz) from 2020.1 to 2020.4.
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](https://github.com/stub42/pytz/compare/release_2020.1...release_2020.4)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-02 14:04:12 +00:00
P4T12ICK 86ff8d1878 Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format 2020-10-30 11:15:27 +01:00
P4T12ICK 94ee8537e4 improved testing 2020-10-30 11:13:48 +01:00
root e698682bdf Added detection testing service results inCreate local admin accounts using net exe 2020-10-30 10:13:19 +00:00
P4T12ICK c952f06956 new format for test files 2020-10-30 09:11:41 +01:00
Jose Enrique Hernandez eb268874bd Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml 2020-10-29 12:09:16 -04:00
P4T12ICK c02686fdad removed community api 2020-10-29 13:23:56 +01:00
Stanislav Miskovic 470c94fc90 Credential Extraction: Changing passing condition to a new syntax 2020-10-29 00:42:19 -07:00
Xiao Lin da26faa9d9 change input field names 2020-10-28 22:57:25 +00:00
Mikael Bjerkeland f9fa28dd18 Doc fix 2020-10-28 23:26:56 +01:00
Mikael Bjerkeland 17502e4722 Added various Network Infrastructure detections based on the MITRE Network Matrix 2020-10-28 23:14:06 +01:00
Ignacio Bermudez Corrales aa7266ffa3 added final report 2020-10-28 13:55:17 -07:00
Mikael Bjerkeland 7e068a5267 Added detection for T1020.001, Traffic Duplication 2020-10-28 21:51:33 +01:00
Xiao Lin 2c46a6d261 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-28 20:45:39 +00:00
Ignacio Bermudez Corrales f127325458 coverage by type SSA, ESCU 2020-10-28 13:45:11 -07:00