admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
bpatel ce63b5b3c8 adding test file for suspicious_cloud_authentication_activities 2020-10-28 13:26:04 -07:00
Mikael Bjerkeland bb626c1466 . 2020-10-28 21:20:36 +01:00
Mikael Bjerkeland d5c6d72361 . 2020-10-28 21:14:40 +01:00
Mikael Bjerkeland eb9b85a381 Merge branch 'develop' of https://github.com/splunk/security-content into mbjerkeland-develop 2020-10-28 21:03:32 +01:00
Stanislav Miskovic b5707c8e22 Credential Extraction: moving test data from SMLE's to AR's S3 bucket and renaming test links 2020-10-28 11:38:08 -07:00
Ignacio Bermudez Corrales a715d3a193 script that shows the coverage for ssa detections 2020-10-28 09:08:13 -07:00
miskoSplunk 2839525e0c Update and rename credential_extraction_ms_debuggers_z_option.test.yml to ssa___credential_extraction_ms_debuggers_z_option.test.yml 2020-10-28 01:30:16 -07:00
miskoSplunk 67be9820f8 Update and rename credential_extraction_ms_debuggers_kernel_peek.test.yml to ssa___credential_extraction_ms_debuggers_kernel_peek.test.yml 2020-10-28 01:29:01 -07:00
miskoSplunk f47a5e18af Update and rename credential_extraction_lazagne_command_options_ssa.test.yml to ssa___credential_extraction_lazagne_command_options.test.yml 2020-10-28 01:28:21 -07:00
miskoSplunk 2cdefdd198 Update and rename credential_extraction_fgdump_cachedump_v_option_ssa.test.yml to ssa___credential_extraction_fgdump_cachedump_v_option.test.yml 2020-10-28 01:27:38 -07:00
miskoSplunk 5f01133544 Update and rename credential_extraction_fgdump_cachedump_s_option_ssa.test.yml to ssa___credential_extraction_fgdump_cachedump_s_option.test.yml 2020-10-28 01:26:40 -07:00
Stanislav Miskovic afa732f7c4 Credential Extraction, renaming the rest of the files to ssa___ 2020-10-28 01:22:59 -07:00
Jose Enrique Hernandez 85c521c80a Merge pull request #847 from splunk/dependabot/add-v2-config-file 
Update Dependabot config file
 2020-10-27 19:29:15 -04:00
bpatel cad99d8dfb add risk scores 2020-10-27 16:19:50 -07:00
dependabot-preview[bot] 11b5336c21 Update Dependabot config file 2020-10-27 23:14:41 +00:00
Bhavin Patel dd69bd2d1b Merge pull request #844 from splunk/pretty-testing 
Improved logging of validate_ssa.py
 2020-10-27 16:07:52 -07:00
Ignacio f8f860bd5d Merge branch 'develop' into pretty-testing 2020-10-27 15:41:15 -07:00
Xiao Lin daea9d4192 change to use SSA input_event 2020-10-27 22:30:00 +00:00
Ignacio Bermudez Corrales b8e213cd2a added logging instead of printing 
argument controls logging info
 2020-10-27 15:30:00 -07:00
Xiao Lin 2ceba2da51 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-27 22:26:30 +00:00
miskoSplunk 3185517716 Update and rename credential_extraction_powersploit_modules_ssa.test.yml to ssa___credential_extraction_powersploit_modules.test.yml 2020-10-27 15:17:41 -07:00
miskoSplunk 575fd73422 Update and rename credential_extraction_mimikatz_modules_ssa.test.yml to ssa___credential_extraction_mimikatz_modules.test.yml 2020-10-27 15:16:05 -07:00
Rod Soto 625fe1c7bc fixnamedetection 2020-10-27 18:08:53 -04:00
Rod Soto be32b7bf01 detectuserencryptings3 2020-10-27 18:01:40 -04:00
Rod Soto a599d1ac21 modifiedmfasearch 2020-10-27 17:46:34 -04:00
Rod Soto 69e5aee23c detecionKMSkeyswMFA 2020-10-27 17:43:58 -04:00
Rod Soto 9d76d8e833 ransomware3story 2020-10-27 17:12:52 -04:00
dependabot-preview[bot] 7b61b36a5d Merge pull request #841 from splunk/dependabot/pip/boto3-1.16.6 2020-10-27 20:31:45 +00:00
dependabot-preview[bot] 3eedcfd10a Bump boto3 from 1.16.4 to 1.16.6 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.4 to 1.16.6.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.4...1.16.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-27 20:01:06 +00:00
dependabot-preview[bot] 8042ff1b5b Merge pull request #840 from splunk/dependabot/pip/botocore-1.19.6 2020-10-27 19:59:44 +00:00
dependabot-preview[bot] 9d79b215cd Bump botocore from 1.19.4 to 1.19.6 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.4 to 1.19.6.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.4...1.19.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-27 19:30:04 +00:00
miskoSplunk 8ec9c06f2e Update and rename credential_extraction_getaddbaccount_from_dump_ssa.test.yml to ssa___credential_extraction_getaddbaccount_from_dump.test.yml 2020-10-27 11:36:01 -07:00
miskoSplunk abf692795d Update and rename credential_extraction_dsinternals_modules_ssa.test.yml to ssa___credential_extraction_dsinternals_modules.test.yml 2020-10-27 11:34:40 -07:00
miskoSplunk 2cd4512d65 Update and rename credential_extraction_dsinternals_conversion_modules_ssa.test.yml to ssa___credential_extraction_dsinternals_conversion_modules.test.yml 2020-10-27 11:32:33 -07:00
miskoSplunk 4ca69a1e0f Rename CredentialExtraction_SSA.ipynb to ssa___CredentialExtraction.ipynb 2020-10-27 11:31:43 -07:00
miskoSplunk 20d1b360b5 Rename credential_extraction_powersploit_modules_ssa.yml to ssa___credential_extraction_powersploit_modules.yml 2020-10-27 11:30:47 -07:00
miskoSplunk f3464264f6 Rename credential_extraction_mimikatz_modules_ssa.yml to ssa___credential_extraction_mimikatz_modules.yml 2020-10-27 11:26:05 -07:00
miskoSplunk c520b284f7 Rename credential_extraction_dsinternals_modules_ssa.yml to ssa___credential_extraction_dsinternals_modules.yml 2020-10-27 11:25:30 -07:00
miskoSplunk 8a96c46ae4 Rename credential_extraction_dsinternals_conversion_modules_ssa.yml to ssa___credential_extraction_dsinternals_conversion_modules.yml 2020-10-27 11:23:15 -07:00
Stanislav Miskovic 922559d436 Credential Extraction: Adding tests, second try to push 2020-10-27 11:04:31 -07:00
Xiao Lin ceca8c6e95 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-27 18:00:21 +00:00
Bhavin Patel caea9b2567 Merge branch 'develop' into mustang_beta 2020-10-27 09:56:04 -07:00
miskoSplunk 663c7df078 Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-10-26 16:26:39 -07:00
Ignacio Bermudez Corrales a19a43c2f9 fixed test and detection 2020-10-26 14:47:50 -07:00
bpatel 94704b0ccc adding missing risk scores 2020-10-26 14:18:38 -07:00
Jose Enrique Hernandez 79d675a88a Merge pull request #813 from splunk/add_gitlab_ci 
First test end to end
 2020-10-26 13:58:01 -04:00
Xiao Lin eaaccff9fd Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-26 17:26:33 +00:00
Ignacio 25b0334c73 Merge branch 'develop' into add_gitlab_ci 2020-10-26 08:41:24 -07:00
dependabot-preview[bot] 8c023e96fc Merge pull request #834 from splunk/dependabot/pip/cryptography-3.2 2020-10-26 02:39:03 +00:00
dependabot-preview[bot] 976e9ad004 Bump cryptography from 3.1.1 to 3.2 
Bumps [cryptography](https://github.com/pyca/cryptography) from 3.1.1 to 3.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/3.1.1...3.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-26 02:35:05 +00:00