admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,618 Commits 697 Branches 195 Tags
fixing_prohibited_apps_spawning_cmdprompt
Commit Graph

11618 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl f51a472f38 date 2021-11-10 11:13:55 -07:00
mhaag-spl 5c2b930851 🍻 🐟 2021-11-10 11:01:54 -07:00
mhaag-spl 1860d878c8 🍻 2021-11-10 10:58:06 -07:00
mhaag-spl cdabce8248 🍺 2021-11-10 10:53:55 -07:00
Bhavin Patel e3f3cdaf39 Branch was auto-updated. 2021-11-10 09:41:38 -08:00
Bhavin Patel 6ab7d5e143 Merge pull request #1732 from splunk/icedhaag 
IcedHaagID
 2021-11-10 09:41:20 -08:00
d1vious 01897585d8 its drunk 2021-11-10 12:40:04 -05:00
root b2225bf9de Added detection testing service results inWindows Curl Upload to Remote Destination 2021-11-10 16:59:52 +00:00
Bhavin Patel 2e6033cc8b Branch was auto-updated. 2021-11-10 08:38:01 -08:00
Lou Stella a600051865 Merge pull request #1793 from splunk/risk_playbooks 
Risk Playbooks
 2021-11-10 10:37:42 -06:00
research bot c1410c0e95 updating docs and package bits [ci skip] 2021-11-10 16:16:30 +00:00
Lou Stella bc99260dd4 Merge branch 'risk_playbooks' of github.com:splunk/security_content into risk_playbooks 2021-11-10 10:01:54 -06:00
Lou Stella 9c64f1f471 Update generate.py 2021-11-10 10:01:51 -06:00
mhaag-spl 7b82199ce9 Curl to upload 2021-11-10 08:59:59 -07:00
Bhavin Patel c01a2a724c Branch was auto-updated. 2021-11-10 07:54:21 -08:00
Bhavin Patel ab55e7a23f Branch was auto-updated. 2021-11-10 07:54:20 -08:00
Jose Enrique Hernandez b5cb53cd6d Merge pull request #1792 from splunk/SSAPackageGenerationCIFix 
Ssa package generation ci fix
v3.30.1 		2021-11-10 10:53:59 -05:00
Jose Enrique Hernandez 67f77aaf17 won't ever be a splunk app format as we know it, 
removing for now
 2021-11-10 10:30:38 -05:00
Lou Stella a1d597fccb Initial commit 2021-11-10 09:25:44 -06:00
root 89c82dbb7c Added detection testing service results inWinEvent Windows Task Scheduler Event Action Started 2021-11-10 13:12:03 +00:00
mhaag-spl 205f059ed2 updated 2021-11-10 05:53:31 -07:00
pyth0n1c f57185496c Removed comment from if: for run_appinspect CI 
job.  This is in prep for merging it into develop.
It was commented so that it would run on testing.
 2021-11-09 17:18:07 -08:00
pyth0n1c 3bf8de2066 changed [stash] in props.conf for devsecops 
app to [MODIFIED-stash] since the name
[stash] conflicts with a value in 
$SPLUNK_HOME/system/default/props.conf
and appinspect does not like that.  We may be
able to just remove it, but we will keep it for
now until we determine whether it can be 
entirely removed.
 2021-11-09 16:51:22 -08:00
pyth0n1c f31a303bab Fixed app.conf so that we can pass appinspect. 
Added 
[package]
check_for_updates =0 
and simple reload triggers.
 2021-11-09 13:50:48 -08:00
Bhavin Patel 5fa4e50172 Branch was auto-updated. 2021-11-09 13:29:54 -08:00
Michael Haag 9dd2e83196 Merge pull request #1777 from splunk/issue_1774 
issue: 1774 wrong category
 2021-11-09 14:29:31 -07:00
Bhavin Patel 7a31160b63 Branch was auto-updated. 2021-11-09 13:24:01 -08:00
Bhavin Patel 01127694ed Branch was auto-updated. 2021-11-09 13:23:53 -08:00
Michael Haag 02001dc4d5 Merge pull request #1782 from splunk/huskersec_bug 
splunk_usergroups bug - spl update
 2021-11-09 14:23:32 -07:00
pyth0n1c 5fa9c7a9fe Comment typo in 
build-and-validate.yml
$ sign instead of # for comment
 2021-11-09 13:04:53 -08:00
Bhavin Patel 5c6c21844e Branch was auto-updated. 2021-11-09 13:04:31 -08:00
Bhavin Patel 17d39b0802 Branch was auto-updated. 2021-11-09 13:04:24 -08:00
Bhavin Patel 930172ed68 Branch was auto-updated. 2021-11-09 13:04:22 -08:00
Bhavin Patel 2181a3de66 Merge pull request #1788 from splunk/cmdline-not-cmd-shell-docs-edit 
Update cmdline_tool_not_executed_in_cmd_shell.yml
 2021-11-09 13:04:02 -08:00
pyth0n1c 9cb134658d Realized SSA isn't a full app, it's just 
a directory with detections.  Made changes
so that it won't run through slim or appinspect.
Will manually verify by looking at the 
artifacts that it is correct.
 2021-11-09 12:58:13 -08:00
mhaag-spl 24779bc8ef Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:47:05 -07:00
mhaag-spl babbd47d81 Update wineventlog_task_scheduler.yml 2021-11-09 13:42:23 -07:00
pyth0n1c f176eeb109 Fixed generation, checksumming, and 
appinspect of SSA and dev_sec_ops 
packages.
 2021-11-09 12:37:04 -08:00
mhaag-spl 932eb17619 Update windows_curl_download_to_suspicious_path.yml 2021-11-09 13:22:11 -07:00
mhaag-spl 9ef1d009e8 Update winevent_windows_task_scheduler_event_action_started.test.yml 2021-11-09 13:18:00 -07:00
root 8c756bda52 Added detection testing service results inCmdline Tool Not Executed In CMD Shell 2021-11-09 16:33:22 +00:00
mhaag-spl 10d9734d73 Update cmdline_tool_not_executed_in_cmd_shell.yml 2021-11-09 09:11:35 -07:00
Bhavin Patel f8633063e2 Branch was auto-updated. 2021-11-09 06:41:21 -08:00
Bhavin Patel 94dd1489a4 Branch was auto-updated. 2021-11-09 06:41:17 -08:00
Bhavin Patel d085434c60 Branch was auto-updated. 2021-11-09 06:41:16 -08:00
Bhavin Patel 8443ca2e3a Branch was auto-updated. 2021-11-09 06:41:13 -08:00
Jose Enrique Hernandez f5a155853e Merge pull request #1791 from splunk/d1vious-patch-1 
minor_ci_bug
 2021-11-09 09:40:51 -05:00
Jose Enrique Hernandez a18a84a2dc minor_ci_bug 2021-11-09 09:40:21 -05:00
tccontre 825c69caeb Update cmdline_tool_not_executed_in_cmd_shell.yml 2021-11-09 15:06:29 +01:00
Bhavin Patel 1eb6799705 Branch was auto-updated. 2021-11-09 06:03:17 -08:00