admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,298 Commits 697 Branches 195 Tags
improved_ssa_testing
Commit Graph

423 Commits

Author SHA1 Message Date
github-actions[bot] 9833a15fd3 Branch was auto-updated. 2021-04-02 18:24:52 +00:00
mhaag-spl 5b2c3a2bd5 Possible DSQuery fix 2021-03-31 14:09:38 -06:00
mhaag-spl 1ab256593f Domain Trust Discovery 2021-03-31 13:24:32 -06:00
tcontreras fa58ca006b def_evasion_detections 2021-03-31 15:00:36 +02:00
tcontreras c214e8dc53 def_evasion_detections 2021-03-31 14:42:47 +02:00
Michael Haag 602c51bae9 Merge branch 'develop' into mhaag 2021-03-30 14:58:52 -06:00
mhaag-spl da4bc60750 T1197 BITS Jobs 2021-03-30 14:49:44 -06:00
P4T12ICK ae86d614eb updated test file 2021-03-29 18:23:30 +02:00
P4T12ICK eb5e776fc8 updated test file 2021-03-29 18:14:07 +02:00
P4T12ICK 139bd101d6 new dataset 2021-03-29 17:32:49 +02:00
P4T12ICK c38768e3f5 updated test file 2021-03-29 17:17:58 +02:00
P4T12ICK f12d9a90bb updated test file 2021-03-29 16:49:13 +02:00
P4T12ICK cfca6b19d5 updated test file 2021-03-29 16:30:15 +02:00
P4T12ICK 3cd8b420c6 updated test file 2021-03-29 16:24:40 +02:00
P4T12ICK bf1c11e5b5 test file updated 2021-03-29 16:03:06 +02:00
P4T12ICK 49245226c6 test file updated 2021-03-29 15:52:11 +02:00
P4T12ICK 4ad8b2b6ba Improve ssa detection testing 2021-03-29 11:09:53 +02:00
P4T12ICK d38c53df07 updated test file 2021-03-26 16:29:58 +01:00
P4T12ICK 6934368668 Merge branch 'ssa_detection_testing_three' into ssa_smoketest_nightly 2021-03-26 16:26:37 +01:00
P4T12ICK 1c4908d6a8 merged 2021-03-26 16:26:13 +01:00
P4T12ICK 243121ce04 merged 2021-03-26 16:23:30 +01:00
P4T12ICK da86a0b7cf updated test files 2021-03-26 12:04:51 +01:00
P4T12ICK e2209cb741 updated test files 2021-03-26 10:21:19 +01:00
P4T12ICK 0ae9f1496d updated test files 2021-03-26 08:51:39 +01:00
Stanislav Miskovic 08857c50c8 Misko: Fixed tests with correct datasets and dataset locations 2021-03-25 14:26:23 -07:00
github-actions[bot] a7b63bf17d Branch was auto-updated. 2021-03-25 18:03:14 +00:00
github-actions[bot] 3af7cdbe65 Branch was auto-updated. 2021-03-25 17:34:30 +00:00
github-actions[bot] e6d57ecba1 Branch was auto-updated. 2021-03-25 17:34:18 +00:00
mhaag-spl 1c3d7a3350 Create certutil_with_decode_argument.yml 
CertUtil Decode
 2021-03-25 11:18:36 -06:00
mhaag-spl 5b7aa4ada2 fix 2021-03-24 15:36:19 -06:00
mhaag-spl 52015bd2b5 certutil 2021-03-24 15:32:46 -06:00
mhaag-spl 249fd0a549 Update Certutil 
- Renamed "attempt to add certificate to untrusted store" to "Attempt to add untrusted certificate to certificate store"
New Detections:
- CertUtil Download With URLCache and Split Arguments
- CertUtil Download With VerifyCtl and Split Arguments
 2021-03-24 15:15:47 -06:00
github-actions[bot] 25a1febeb0 Branch was auto-updated. 2021-03-23 16:20:50 +00:00
github-actions[bot] 71c628ac17 Branch was auto-updated. 2021-03-23 16:20:46 +00:00
P4T12ICK 617ec011d6 ssa detection testing 2021-03-23 14:52:10 +01:00
P4T12ICK e08b1ab9a9 testing ssa detections 2021-03-23 13:09:50 +01:00
P4T12ICK e3e4e2b512 bug fixes test files 2021-03-23 11:06:15 +01:00
P4T12ICK f778e43bef Merge branch 'develop' into ssa_detection_testing 2021-03-23 09:00:22 +01:00
github-actions[bot] d7b4d0f818 Branch was auto-updated. 2021-03-23 07:59:39 +00:00
github-actions[bot] 0949eb9272 Branch was auto-updated. 2021-03-23 07:59:33 +00:00
github-actions[bot] 15d90e8725 Branch was auto-updated. 2021-03-22 17:51:53 +00:00
github-actions[bot] 3fa0fbab3b Branch was auto-updated. 2021-03-22 17:51:49 +00:00
github-actions[bot] b4c5d60a8f Branch was auto-updated. 2021-03-22 17:51:48 +00:00
tcontreras 08a0b64eb6 clop_test_file 2021-03-22 11:57:42 +01:00
tcontreras ba33452139 clop_test_file 2021-03-22 11:53:18 +01:00
tcontreras b42ef50322 clop_test_file 2021-03-22 11:45:21 +01:00
P4T12ICK 5fc3209293 SSA detection tests updated 2021-03-22 09:22:44 +01:00
Ignacio Bermudez Corrales 1eb44354e8 renaming back test for ssa detection 2021-03-19 15:54:47 -07:00
Ignacio Bermudez Corrales 0ec2001838 Renaming test .yaml -> .yml | No events should come out of the detection 2021-03-19 13:52:34 -07:00
tcontreras b63e3c8177 detections and test data 2021-03-19 17:03:57 +01:00