admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,530 Commits 697 Branches 195 Tags
fixDetectionTestingPassFail
Commit Graph

18530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Bareiss ed7b65bfab merged with develop 2020-07-29 10:55:23 +02:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
P4T12ICK f09d5222ef Merge pull request #575 from splunk/TR037-process-execution-via-wmi 
[TR-037] test for process execution via WMI (
 2020-07-29 10:12:23 +02:00
Patrick Bareiss fc0a62a347 updated CI pipeline 2020-07-29 10:06:06 +02:00
P4T12ICK a93c669aac Merge branch 'develop' into TR037-process-execution-via-wmi 2020-07-29 10:03:09 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00
Rod Soto 182b0551aa fixedsearch 2020-07-28 11:52:34 -04:00
P4T12ICK ee69edcd44 Merge pull request #592 from splunk/detection_testing_combined 
Detection testing combined
 2020-07-28 15:55:53 +02:00
Patrick Bareiss 074b782dd0 detection tested 2020-07-28 15:43:57 +02:00
Patrick Bareiss dd0e6caf00 merged multiple test detections 2020-07-28 14:22:53 +02:00
Patrick Bareiss 1619908a32 merged 2020-07-28 14:20:39 +02:00
Patrick Bareiss 004eeb2347 merged 2020-07-28 14:20:14 +02:00
Patrick Bareiss 3e9f00b376 tested detection 2020-07-28 14:17:21 +02:00
Patrick Bareiss 8db3edafe2 tested detection 2020-07-28 14:17:10 +02:00
Rod Soto f53f148f00 seeifitworks 2020-07-28 08:10:19 -04:00
Rod Soto 9b3a81da87 fixedsearches 2020-07-28 07:46:50 -04:00
Patrick Bareiss d2752c13f9 successful tested 2020-07-28 11:14:53 +02:00
Patrick Bareiss f74a0fe273 successful tested 2020-07-28 11:14:34 +02:00
Patrick Bareiss 46fa587782 minor improvement CI job 2020-07-28 09:27:43 +02:00
Rod Soto ba11f8f183 awslm5searches 2020-07-27 20:33:01 -04:00
Rod Soto 1ac5d3fca4 awslm3rd 2020-07-27 19:19:10 -04:00
Rod Soto 9f2c49f532 2searchstsassumerole 2020-07-27 17:57:12 -04:00
Rod Soto 3584bb4a31 newawslmsearches 2020-07-27 17:20:05 -04:00
Bhavin Patel 6372bbd532 Merge pull request #581 from splunk/pretty_printing_search 
Update smb_traffic_spike.yml
 2020-07-24 15:56:58 -07:00
Jose Enrique Hernandez 025a161f7b Update smb_traffic_spike.yml 2020-07-24 12:32:22 -04:00
Patrick Bareiss 4167531536 updated CI 2020-07-24 16:13:20 +02:00
Patrick Bareiss 35ce8cc953 Merge branch 'develop' into TR-33_schtasks_scheduling_job_on_remote_system 2020-07-24 16:12:05 +02:00
Patrick Bareiss a21c34870f test detection 2020-07-24 15:07:56 +02:00
dependabot-preview[bot] 8e61333d8c Merge pull request #579 from splunk/dependabot/pip/virtualenv-20.0.28 2020-07-24 09:04:52 +00:00
dependabot-preview[bot] 97f5fa4e1e Bump virtualenv from 20.0.27 to 20.0.28 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.27 to 20.0.28.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.27...20.0.28)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-24 08:59:29 +00:00
divious1 c625d06123 Merge remote-tracking branch 'fork/develop' into relative_path_and_type_consideration 2020-07-23 14:33:04 -04:00
trogdorsey dbb70b8f54 Merge pull request #577 from splunk/move_ci_us_east-2 
moving job to us-east-2 seperating from our usual work region
 2020-07-23 09:58:42 -05:00
divious1 320a491f61 moving job to us-east-2 seperating from our usual work region 2020-07-23 10:46:18 -04:00
Kyle Fondren c276041a41 Updated Jinja2 Template to accept Type 2020-07-22 15:23:37 -04:00
Kyle Fondren 55a5169200 change to use absolute path - fixed quote style 2020-07-22 14:33:26 -04:00
Kyle Fondren b04e4a01d0 fixed missing '+' in named fields 2020-07-22 14:14:55 -04:00
Kyle Fondren 1d72b16961 Added logic to include type in naming convention 2020-07-22 14:06:50 -04:00
Kyle Fondren 4d30e91f05 updated output_path to use path.join over concat 2020-07-22 13:28:55 -04:00
dependabot-preview[bot] f579091b4a Merge pull request #572 from splunk/dependabot/pip/identify-1.4.25 2020-07-22 16:12:31 +00:00
dependabot-preview[bot] a3f66a086f Bump identify from 1.4.24 to 1.4.25 
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.24 to 1.4.25.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.24...v1.4.25)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-22 16:07:26 +00:00
dependabot-preview[bot] fb90eb2e49 Merge pull request #574 from splunk/dependabot/pip/urllib3-1.25.10 2020-07-22 16:06:08 +00:00
dependabot-preview[bot] 75f0490888 Bump urllib3 from 1.25.9 to 1.25.10 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.9 to 1.25.10.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/1.25.10/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.25.9...1.25.10)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-07-22 16:01:23 +00:00
Jose Enrique Hernandez 255c50131d Merge pull request #573 from splunk/update_sub_techniques 
Update sub techniques
 2020-07-22 11:32:41 -04:00
Joseph Zadeh ce279c60af [TR-037] test for process execution via WMI (no mitre sub-technique for this attack type). 2020-07-22 08:30:02 -07:00
Jose Enrique Hernandez d163dc0158 Merge pull request #571 from splunk/bug_fix_generate 
bug fix generate script
 2020-07-22 10:49:29 -04:00
Patrick Bareiss 219c2a68c7 converted detections to subtechniques 2020-07-22 11:01:06 +02:00
Patrick Bareiss a38b71f11d converted detections to subtechniques 2020-07-22 10:59:55 +02:00
Patrick Bareiss e7966e76b1 converted detections to subtechniques 2020-07-22 10:45:43 +02:00