Commit Graph

18530 Commits

Author SHA1 Message Date
pyth0n1c 22ddcc1c93 Branch was auto-updated. 2022-07-12 12:33:14 -07:00
Bhavin Patel debf5ddda6 Merge pull request #2275 from splunk/fix-join-issue2
fix-join-issue2
2022-07-12 12:32:55 -07:00
pyth0n1c bb37b7db6b Branch was auto-updated. 2022-07-12 12:14:25 -07:00
pyth0n1c 9b5bc176ec Branch was auto-updated. 2022-07-12 12:14:24 -07:00
pyth0n1c 85d8b50be9 Branch was auto-updated. 2022-07-12 12:14:23 -07:00
pyth0n1c afc9a64b62 Branch was auto-updated. 2022-07-12 12:14:22 -07:00
pyth0n1c e0626b55c0 Branch was auto-updated. 2022-07-12 12:14:22 -07:00
pyth0n1c 46d152a0c1 Branch was auto-updated. 2022-07-12 12:14:21 -07:00
pyth0n1c 0a9404d737 Branch was auto-updated. 2022-07-12 12:14:20 -07:00
pyth0n1c 7dbdf53037 Branch was auto-updated. 2022-07-12 12:14:19 -07:00
pyth0n1c 3b8c7835f2 Branch was auto-updated. 2022-07-12 12:14:19 -07:00
pyth0n1c b9cb41d763 Branch was auto-updated. 2022-07-12 12:14:18 -07:00
pyth0n1c b3de7d6403 Branch was auto-updated. 2022-07-12 12:14:17 -07:00
pyth0n1c b5d2c880b2 Branch was auto-updated. 2022-07-12 12:14:16 -07:00
Bhavin Patel 3da5f6c6c8 Merge pull request #2284 from splunk/resolve_local_gha_delta
Resolve local gha delta
2022-07-12 12:13:55 -07:00
mvelazco d7cf60c4c7 Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying 2022-07-12 13:54:34 -04:00
mvelazco f8e28dde20 adding new detection 2022-07-12 13:54:32 -04:00
pyth0n1c f8ac5616a0 Reverting the workflow and all of the detections that were touched to their original versions. 2022-07-12 10:08:07 -07:00
pyth0n1c ae4208c489 Branch was auto-updated. 2022-07-12 10:01:17 -07:00
pyth0n1c 2f5af667bb Branch was auto-updated. 2022-07-12 10:01:16 -07:00
pyth0n1c 1ac5790863 Branch was auto-updated. 2022-07-12 10:01:14 -07:00
pyth0n1c ca82eef693 Branch was auto-updated. 2022-07-12 10:01:13 -07:00
pyth0n1c 025477394a Branch was auto-updated. 2022-07-12 10:01:12 -07:00
pyth0n1c 49401c3c56 Branch was auto-updated. 2022-07-12 10:01:11 -07:00
pyth0n1c e55a97263a Branch was auto-updated. 2022-07-12 10:01:10 -07:00
pyth0n1c e226b9a994 Branch was auto-updated. 2022-07-12 10:01:09 -07:00
pyth0n1c ed5bb40174 Branch was auto-updated. 2022-07-12 10:01:07 -07:00
pyth0n1c 104c03a7b1 Branch was auto-updated. 2022-07-12 10:01:06 -07:00
pyth0n1c 52c0f065c4 Branch was auto-updated. 2022-07-12 10:01:05 -07:00
pyth0n1c 94d7b1ff08 Branch was auto-updated. 2022-07-12 10:01:03 -07:00
P4T12ICK 32c29963ac Merge pull request #2283 from splunk/add_gitpod
Add gitpod config
2022-07-12 19:00:41 +02:00
P4T12ICK ed713c24da Add gitpod config 2022-07-12 16:52:25 +00:00
mvelazco 797455e17f updating filter macro 2022-07-12 11:41:45 -04:00
pyth0n1c bf127dc0c0 Updating authorize.conf to allow us to delete from internal indexes. Reordering how delete works. 2022-07-12 08:39:08 -07:00
mvelazco 743b94d8a9 updating test files 2022-07-12 11:22:38 -04:00
mvelazco 45ee82ff9e fixing macro 2022-07-12 10:26:48 -04:00
pyth0n1c d8458b882e Quick hack to get everything
tested in GHA using this verison
of the CI/CD code.
2022-07-11 14:31:02 -07:00
mvelazco 6e6ea95e3c Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying 2022-07-11 17:29:20 -04:00
mvelazco ba163055eb adding 2 detections 2022-07-11 17:29:18 -04:00
pyth0n1c 71b7c5d45c Forgot to specify the host that data
was being uploaded from.  This means
that delete does not work as expected,
causing a large number of tests to fail
and slower searches.
2022-07-11 14:06:01 -07:00
pyth0n1c ccbe770e21 Modify all tests that fail in gha
but pass in local testing for easier
troubleshooting.
2022-07-11 12:53:51 -07:00
pyth0n1c 1e6f2d79b0 Don't modify the original search variable.
This can cause problems if we need to run
the search again.
2022-07-11 12:48:25 -07:00
tccontre 97a0132af1 Update windows_application_layer_protocol_rms_radmin_tool_namedpipe.yml 2022-07-11 17:15:11 +02:00
tccontre 74ea79b419 Update windows_powershell_import_applocker_policy.yml 2022-07-11 11:55:12 +02:00
tccontre e5d2e9f6f3 Update windows_impair_defense_add_xml_applocker_rules.yml 2022-07-11 11:54:52 +02:00
tccontre c0b848d43c Update windows_remote_access_software_rms_registry.yml 2022-07-11 11:54:20 +02:00
tccontre 86ae42674d Merge branch 'azorult-bomb3' of github.com:splunk/security_content into azorult-bomb3 2022-07-08 11:05:50 +02:00
tccontre cd0207e68f azorult-bomb3 2022-07-08 11:05:34 +02:00
pyth0n1c 13d3a2e891 Branch was auto-updated. 2022-07-07 17:12:32 -07:00
pyth0n1c 012a22b1a2 Branch was auto-updated. 2022-07-07 17:12:31 -07:00