admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,231 Commits 697 Branches 195 Tags
gitlab_release_testing_2
Commit Graph

23231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK 08bf8f82ed Add drilldown searches 2023-01-09 12:46:04 +01:00
tccontre 5eca5da349 Update disable_defender_antivirus_registry.yml 2023-01-09 12:19:16 +01:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 00976fe839 bug fix in converter script 2023-01-09 09:20:37 +01:00
pyth0n1c 1750740ea7 adding both tests to detection 2023-01-05 17:32:15 -08:00
pyth0n1c 03b5659913 Upload test artifact/results 
after a scheduled test run.
 2023-01-05 17:06:12 -08:00
pyth0n1c 545a106937 forgot to remove exception raise 
in last commit
 2023-01-05 16:38:14 -08:00
pyth0n1c b333422bca don't throw error, just warn 
when a detection contains
more than one test
 2023-01-05 16:29:10 -08:00
pyth0n1c 87c01a7080 Fixed some tests that 
were failing due to
missing sourcetype and/
or bad source.  Many of
these also had different
test data files - were they
just out of date?
 2023-01-05 15:18:59 -08:00
patel-bhavin 8db65681c9 minorupdate 2023-01-04 16:55:43 -08:00
pyth0n1c 1cd81364e3 Resolve issue with file 
not existing when the
timestamps are updated.
 2023-01-04 15:37:42 -08:00
patel-bhavin 7a4e594ef1 carried over changes 2023-01-04 14:21:58 -08:00
patel-bhavin 608172a95b patches from sanjay 2023-01-04 11:43:16 -08:00
pyth0n1c 6556205305 initial support for pulling tests 
from the detection file instead of
separately. This feature is implemented
as a stopgap as we move to new
tooling.
 2023-01-04 11:28:50 -08:00
P4T12ICK ff7005304a Improve rba deployment for hunting searches 2023-01-04 14:04:15 +01:00
P4T12ICK b352a1418e add new deployment functionality 2023-01-04 13:37:44 +01:00
Michael Haag 8a6bfc4458 Atomic Reference 2023-01-03 10:07:28 -07:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
P4T12ICK bc51452711 created new escu package 2023-01-02 12:07:52 +01:00
P4T12ICK 38eef722ea Added cve tags to detections 2023-01-02 10:03:58 +01:00
dependabot[bot] bd8f823260 Bump pydantic from 1.10.2 to 1.10.4 
Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.2 to 1.10.4.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v1.10.4/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v1.10.2...v1.10.4)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-01 23:00:53 +00:00
dependabot[bot] eff29cbf98 Bump splunk-appinspect from 2.29.0 to 2.30.0 
Bumps [splunk-appinspect](https://splunk.com) from 2.29.0 to 2.30.0.

---
updated-dependencies:
- dependency-name: splunk-appinspect
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-01 23:00:45 +00:00
dependabot[bot] 0801603439 Bump gitpython from 3.1.29 to 3.1.30 
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.29 to 3.1.30.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.29...3.1.30)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-01 23:00:42 +00:00
Michael Haag fa4e480a78 Updated SOH analytics 2022-12-31 14:19:21 -07:00
Michael Haag 3642d36c7f Bespoke Drivers 2022-12-31 14:14:11 -07:00
Michael Haag 5e5a98030a Update windows_disable_windows_event_logging_disable_http_logging.yml 2022-12-31 08:10:32 -07:00
P4T12ICK 524766e532 updated detections 2022-12-22 17:18:19 +01:00
patel-bhavin 2beb040928 add risk index macro 2022-12-21 14:12:18 -08:00
patel-bhavin 09c7a947f3 spl update per git issue 2022-12-21 13:14:38 -08:00
patel-bhavin b9ffe33e01 duplicate PR with updated SPLs 2022-12-21 12:38:29 -08:00
patel-bhavin e4d56e3710 spl update 2022-12-21 12:08:57 -08:00
patel-bhavin d3d9e6a7c5 update to SPL 2022-12-21 11:56:42 -08:00
Michael Haag 69c469639c Fixes 2022-12-21 09:18:23 -07:00
Michael Haag 6774b91d1c fixes 2022-12-21 08:58:59 -07:00
Michael Haag 22f6d4ae92 Fantastic IIS Modules and Where to Find Them 2022-12-21 08:53:03 -07:00
P4T12ICK 1f9615e785 Converted ssa detections 2022-12-19 14:43:15 +01:00
P4T12ICK 483d0d01b1 converted all detections v3 to v4 2022-12-19 14:23:00 +01:00
P4T12ICK 4393135c41 Converted endpoint detections from v3 to v4 2022-12-19 09:34:19 +01:00
tccontre 823df51c82 winpeas_bin 2022-12-14 12:29:53 +01:00
srv-rr-gh-researchbt d5685ce11b Branch was auto-updated. 2022-12-13 15:09:24 -08:00
research bot 388fe34d7b Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag 2022-12-13 23:09:06 +00:00
srv-rr-gh-researchbt ce680b1fad Branch was auto-updated. 2022-12-13 14:42:43 -08:00
Bhavin Patel acfa597630 Merge pull request #2481 from splunk/pres_bug 
minor fix
v3.55.0 		2022-12-13 14:42:24 -08:00
patel-bhavin 3c5c26f243 minor fix 2022-12-13 14:41:48 -08:00
dependabot[bot] 739090842f Merge pull request #2472 from splunk/dependabot/pip/splunk-appinspect-2.29.0 2022-12-13 20:45:57 +00:00
srv-rr-gh-researchbt 6eac8043d2 Branch was auto-updated. 2022-12-13 12:18:13 -08:00
srv-rr-gh-researchbt 098337f186 Branch was auto-updated. 2022-12-13 12:18:12 -08:00
Bhavin Patel 36989a42b3 Merge pull request #2480 from splunk/prestige_winpeas3 
prestige_winpeas3
 2022-12-13 12:17:53 -08:00
srv-rr-gh-researchbt 02c0317906 Branch was auto-updated. 2022-12-13 12:15:35 -08:00
srv-rr-gh-researchbt db71b41524 Branch was auto-updated. 2022-12-13 12:15:32 -08:00