2270 Commits

Author SHA1 Message Date
Bhavin Patel fdfcc03651 Merge branch 'develop' into mitrests 2020-08-19 19:20:53 -07:00
Rod Soto 94707e9cfd addedmitretoawssearches 2020-08-19 21:16:13 -04:00
Bhavin Patel 63abcbf343 Merge pull request #613 from splunk/TR-145_bug
converted lookup to collection
2020-08-18 15:34:31 -07:00
Bhavin Patel 32346eef6a Merge branch 'develop' into TR-145_bug 2020-08-18 15:29:06 -07:00
Bhavin Patel 6de58bce6a Update api_call_by_user_baseline.yml
latestCount is needed in detection search
2020-08-18 15:28:54 -07:00
dependabot-preview[bot] 6ab60c1557 Merge pull request #617 from splunk/dependabot/pip/virtualenv-20.0.31 2020-08-17 15:38:51 +00:00
dependabot-preview[bot] 55639a2e56 Bump virtualenv from 20.0.30 to 20.0.31
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.30 to 20.0.31.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.30...20.0.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-17 15:34:42 +00:00
dependabot-preview[bot] 968e73ca98 Merge pull request #616 from splunk/dependabot/pip/identify-1.4.28 2020-08-16 18:46:35 +00:00
dependabot-preview[bot] d6a5c18bac Bump identify from 1.4.27 to 1.4.28
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.27 to 1.4.28.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.27...v1.4.28)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-16 18:41:34 +00:00
dependabot-preview[bot] d10bafadf3 Merge pull request #615 from splunk/dependabot/pip/identify-1.4.27 2020-08-16 00:43:08 +00:00
dependabot-preview[bot] 0aafd593c8 Bump identify from 1.4.25 to 1.4.27
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.25 to 1.4.27.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.25...v1.4.27)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-16 00:39:38 +00:00
divious1 b748b3ee9c converted lookup to collection 2020-08-12 17:29:18 -04:00
Jose Enrique Hernandez 516f009492 Merge pull request #610 from splunk/new_CI_testing_pipeline
new CI pipeline
2020-08-10 15:17:56 -04:00
Patrick Bareiss 7ec2ca7f8b new CI pipeline 2020-08-07 17:08:21 +02:00
research bot acb7856bbc updating docs and package bits [ci skip] 2020-08-04 21:37:21 +00:00
Bhavin Patel 9bff8a38dd Merge pull request #608 from splunk/F5_TMUI
F5 TMUI RCE CVE-2020-5902 - contribution from Shannon ymls and updates
v3.0.5
2020-08-04 14:23:59 -07:00
bpatel 94e5d4dffd adding a response task 2020-08-04 14:15:14 -07:00
bpatel 971c2dc696 adding a response task 2020-08-04 14:14:12 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
Jose Enrique Hernandez 5b586dcb46 Merge pull request #607 from splunk/SIGRed
DNS SIGRed CVE-2020-1350 - Shannon's contribution: porting ymls into a new PR
2020-08-04 17:08:55 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 8617674eed response to new story 2020-08-04 13:23:26 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
Bhavin Patel a1b00860d8 Merge pull request #578 from splunk/relative_path_and_type_consideration
Relative path and type consideration - kfondren7
2020-08-04 12:40:23 -07:00
bpatel 8227b5351f codec error 2020-08-04 12:33:28 -07:00
Jose Enrique Hernandez b3b5d561e6 Merge branch 'develop' into relative_path_and_type_consideration 2020-08-04 15:05:54 -04:00
dependabot-preview[bot] 49ec440a21 Merge pull request #606 from splunk/dependabot/pip/virtualenv-20.0.30 2020-08-04 17:26:57 +00:00
dependabot-preview[bot] 62aca55091 Bump virtualenv from 20.0.29 to 20.0.30
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.29 to 20.0.30.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.29...20.0.30)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-04 17:22:19 +00:00
Bhavin Patel 0e203651c8 Merge pull request #601 from splunk/removing_slack_from_ci
removed slack notifications they break PRs
2020-08-04 10:05:48 -07:00
Bhavin Patel 6e595aa13a Merge pull request #590 from splunk/nocaps
Nocaps
2020-08-04 09:54:56 -07:00
Bhavin Patel 7c5bd96fa8 Merge branch 'develop' into removing_slack_from_ci 2020-08-04 09:48:33 -07:00
dependabot-preview[bot] 3c3d42c375 Merge pull request #602 from splunk/dependabot/pip/cfgv-3.2.0 2020-07-31 18:07:05 +00:00
dependabot-preview[bot] 60bc58adfb Bump cfgv from 3.1.0 to 3.2.0
Bumps [cfgv](https://github.com/asottile/cfgv) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/asottile/cfgv/releases)
- [Commits](https://github.com/asottile/cfgv/compare/v3.1.0...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-31 18:01:40 +00:00
dependabot-preview[bot] f79e2dac3c Merge pull request #603 from splunk/dependabot/pip/virtualenv-20.0.29 2020-07-31 18:00:28 +00:00
dependabot-preview[bot] 3d4f62dfba Bump virtualenv from 20.0.28 to 20.0.29
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.28 to 20.0.29.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.28...20.0.29)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-31 17:54:51 +00:00
Jose Enrique Hernandez 772d7a237f Merge branch 'develop' into removing_slack_from_ci 2020-07-29 23:11:15 -04:00
divious1 f72ec831a2 removed slack notifications they break PRs 2020-07-29 23:08:21 -04:00
Jose Enrique Hernandez d2913cbd50 Merge branch 'develop' into relative_path_and_type_consideration 2020-07-29 15:06:10 -04:00
P4T12ICK 267730094d Merge pull request #593 from splunk/TR038-create-local-admin-accounts-using-net-exe
[TR-038] update mitre id for detection. add test for net exe specific…
2020-07-29 11:09:17 +02:00
Patrick Bareiss bd1c4d8231 merged with develop 2020-07-29 11:03:54 +02:00
Patrick Bareiss b34f553837 updated test files 2020-07-29 11:01:13 +02:00
Patrick Bareiss d0aa56f92c updated test files 2020-07-29 11:00:22 +02:00
Patrick Bareiss ed7b65bfab merged with develop 2020-07-29 10:55:23 +02:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
P4T12ICK f09d5222ef Merge pull request #575 from splunk/TR037-process-execution-via-wmi
[TR-037] test for process execution via WMI (
2020-07-29 10:12:23 +02:00
Patrick Bareiss fc0a62a347 updated CI pipeline 2020-07-29 10:06:06 +02:00
P4T12ICK a93c669aac Merge branch 'develop' into TR037-process-execution-via-wmi 2020-07-29 10:03:09 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00