Commit Graph

18530 Commits

Author SHA1 Message Date
Ignacio Bermudez Corrales 0e28e78b5f pass_condition to the end of the pipeline 2020-10-22 10:04:28 -07:00
dependabot-preview[bot] 5d1a18f015 Merge pull request #811 from splunk/dependabot/pip/botocore-1.19.2 2020-10-22 16:17:47 +00:00
dependabot-preview[bot] 989496ff18 Bump botocore from 1.19.1 to 1.19.2
Bumps [botocore](https://github.com/boto/botocore) from 1.19.1 to 1.19.2.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.1...1.19.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-22 16:12:26 +00:00
dependabot-preview[bot] 4df02c5957 Merge pull request #812 from splunk/dependabot/pip/boto3-1.16.2 2020-10-22 16:11:14 +00:00
dependabot-preview[bot] 82047dfb97 Bump boto3 from 1.16.1 to 1.16.2
Bumps [boto3](https://github.com/boto/boto3) from 1.16.1 to 1.16.2.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.1...1.16.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-22 16:07:03 +00:00
xlinsplunk 4a9ec6c437 Merge pull request #815 from splunk/tf23
Tf23
2020-10-22 09:05:41 -07:00
Jose Enrique Hernandez fc62a736fa Merge branch 'develop' into add_gitlab_ci 2020-10-22 11:30:42 -04:00
Xiao Lin 022ead83ff update 2020-10-22 11:07:58 +00:00
Xiao Lin 1f51317037 update 2020-10-22 10:22:33 +00:00
Xiao Lin 54d12d03c1 add two lateral movement detections 2020-10-22 09:03:21 +00:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Bhavin Patel 54829289f2 Merge pull request #809 from splunk/develop
update master for v3.0.8
2020-10-21 17:12:05 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
Ignacio Bermudez Corrales 779e9e1555 updated .gitlab-ci 2020-10-21 15:30:21 -07:00
Ignacio Bermudez Corrales 96892d3e4e added more output for debugging
added more output for debugging

more info
2020-10-21 15:30:13 -07:00
Ignacio Bermudez Corrales c05d8c07cc command line parsing 2020-10-21 15:01:18 -07:00
Ignacio Bermudez Corrales 597af60b05 added dependencies that by mistake I removed 2020-10-21 14:48:03 -07:00
Ignacio Bermudez Corrales 9f0ea179aa First test end to end 2020-10-21 14:34:05 -07:00
Xiao Lin 91240efdab Merge branch 'develop' of github.com:splunk/security-content into tf23 2020-10-21 13:09:22 -07:00
research bot 089d08bd84 updating docs and package bits [ci skip] 2020-10-20 22:29:07 +00:00
peter ddf9d107f4 Merge pull request #806 from splunk/misko_category_fixes_cred_extract
Fixing categories & text in Credential Extraction detections
v3.0.8
2020-10-20 15:08:18 -07:00
peter e541880a7f Merge branch 'develop' into misko_category_fixes_cred_extract 2020-10-20 14:55:03 -07:00
dependabot-preview[bot] c62d2f0c6c Merge pull request #808 from splunk/dependabot/pip/botocore-1.19.1 2020-10-20 20:43:44 +00:00
dependabot-preview[bot] 4c03676136 Bump botocore from 1.19.0 to 1.19.1
Bumps [botocore](https://github.com/boto/botocore) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.0...1.19.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 20:39:13 +00:00
dependabot-preview[bot] 434e0e03b1 Merge pull request #807 from splunk/dependabot/pip/boto3-1.16.1 2020-10-20 20:38:04 +00:00
dependabot-preview[bot] a8c65aeffc Bump boto3 from 1.16.0 to 1.16.1
Bumps [boto3](https://github.com/boto/boto3) from 1.16.0 to 1.16.1.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.0...1.16.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 20:34:02 +00:00
Stanislav Miskovic 3984d0e5b4 Fixing detection categories and polishing some descriptions in Credential Extraction detections. 2020-10-20 13:20:25 -07:00
Bhavin Patel d6e268ee86 Merge pull request #631 from splunk/response_phases
[WIP] Response plans and templates
2020-10-20 11:48:24 -07:00
Bhavin Patel 990c4134f8 Merge branch 'develop' into response_phases 2020-10-20 11:42:26 -07:00
bpatel e94b358a88 blank references 2020-10-20 11:39:00 -07:00
bpatel 9000dd4e23 tags and ascii fixes 2020-10-20 11:24:37 -07:00
Bhavin Patel 8fef4fe2fe Merge pull request #775 from splunk/improved_kerberoasting_attack
Automated Detection Testing PR improved_kerberoasting_attack
2020-10-20 11:01:40 -07:00
Bhavin Patel 7a45ca7143 Merge pull request #774 from splunk/pass_the_hash_detection
Automated Detection Testing PR pass_the_hash_detection
2020-10-20 10:55:43 -07:00
Bhavin Patel 8210804332 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-20 10:54:22 -07:00
Bhavin Patel c27c1b9a9c Merge pull request #791 from splunk/misko_cred_extract_ssa
SSA detections for credential extraction
2020-10-20 10:53:52 -07:00
Jose Enrique Hernandez 6838cbc393 Merge branch 'develop' into misko_cred_extract_ssa 2020-10-20 13:21:13 -04:00
Bhavin Patel 836c2a0c3b Merge branch 'develop' into response_phases 2020-10-20 10:20:12 -07:00
dependabot-preview[bot] f78268de5e Merge pull request #805 from splunk/dependabot/pip/pyparsing-2.4.7 2020-10-20 14:18:35 +00:00
dependabot-preview[bot] c0189b0409 Bump pyparsing from 2.4.6 to 2.4.7
Bumps [pyparsing](https://github.com/pyparsing/pyparsing) from 2.4.6 to 2.4.7.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/pyparsing_2.4.6...pyparsing_2.4.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 14:13:35 +00:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg 64e6680aca Fixed a couple typos 2020-10-19 16:23:48 -07:00
peter b3586064f1 Merge pull request #804 from splunk/update_credump_notebooks
Updating credential dumping notebooks
2020-10-19 15:07:20 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
peter ecc99f2455 Merge pull request #734 from splunk/add_gitlab_ci
WIP - SSA CI job
2020-10-19 14:31:50 -07:00
Jose Enrique Hernandez ca119d7cb5 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-19 17:29:03 -04:00
Jose Enrique Hernandez ff2ee69853 Merge branch 'develop' into add_gitlab_ci 2020-10-19 17:27:50 -04:00
Jose Enrique Hernandez 38aecd9114 Merge pull request #770 from splunk/lolbas-fixes
Lolbas SSA fixes
2020-10-19 17:27:34 -04:00
Jose Enrique Hernandez ade78957f1 Merge branch 'develop' into lolbas-fixes 2020-10-19 17:19:18 -04:00
dependabot-preview[bot] ad0b9eb9b0 Merge pull request #803 from splunk/dependabot/pip/boto3-1.16.0 2020-10-19 19:43:04 +00:00
Bhavin Patel ee112491e2 Merge branch 'develop' into mustang_beta 2020-10-19 12:37:10 -07:00