admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c 40bd17d958 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-13 10:54:22 -07:00
pyth0n1c 4528e9a6fd Was getting the tag the wrong way and it was coming up empty. Fixed. Running again. 2021-08-13 10:54:18 -07:00
research bot c5a3cc35a5 updating docs and package bits [ci skip] 2021-08-13 17:37:57 +00:00
pyth0n1c 3ec453f768 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-13 10:08:01 -07:00
pyth0n1c 94f0b4b329 Fixed the naming of the release artifacts with the proper GitHub Actions Variable. 2021-08-13 10:07:52 -07:00
research bot 2ae9056412 updating docs and package bits [ci skip] 2021-08-13 16:39:00 +00:00
pyth0n1c e6388bd1e5 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-13 09:08:47 -07:00
pyth0n1c ff9ee4c7c9 Fixed appinspect report.tar.gz path. 2021-08-13 09:08:02 -07:00
tccontre b0c7e54173 Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak 2021-08-13 14:05:50 +02:00
tccontre d1158e1af9 conti_leak 2021-08-13 14:05:33 +02:00
research bot 02e8b46f11 updating docs and package bits [ci skip] 2021-08-13 00:24:55 +00:00
pyth0n1c 13e6f885d6 Fixing the path for the appinspect report one last time. 2021-08-12 16:54:23 -07:00
pyth0n1c 6c427d9f7c Wrong path for report.tar.gz 2021-08-12 16:27:43 -07:00
pyth0n1c 9fb490a816 Intentionally ignore one of the pieces of feedback from semgrep (not validating TLS Certificate) because it is a service running locally. 2021-08-12 15:57:02 -07:00
pyth0n1c 7ba36644bf As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed. 2021-08-12 15:31:36 -07:00
pyth0n1c c0107fde5e Fixed other semgrep recommendations - for certain uses of urllib (getting content from a dynamic URI/URL), use the python requests library instead. 2021-08-12 15:07:27 -07:00
pyth0n1c 54bde203c3 Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations. 2021-08-12 14:04:26 -07:00
pyth0n1c 6f938863e7 validate caught a syntax error in one of the python files. 2021-08-12 13:48:32 -07:00
pyth0n1c c1d144e0d5 auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now. 2021-08-12 13:43:54 -07:00
pyth0n1c 88b2a47a4c Converted humvee md5 check to sha256 check for increased integrity in response to semgrep recommendation. 2021-08-12 13:35:18 -07:00
pyth0n1c b6b5f9317f Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results. 2021-08-12 13:26:29 -07:00
mhaag-spl 0728cb8f87 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-08-12 14:07:02 -06:00
mhaag-spl ed971abfac Update detect_sharphound_usage.yml 2021-08-12 14:06:59 -06:00
pyth0n1c 9d32f23bbc Removed a large block of commented out code. 2021-08-12 13:04:16 -07:00
pyth0n1c 6d100dbcc9 Uploading additional release artifacts. Moved away from ghr and to an action designed for attaching github release artifacts. This will only run for tagged releases. 2021-08-12 13:03:15 -07:00
pyth0n1c 1cf0f63d8f Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-12 12:20:08 -07:00
pyth0n1c a875e38d08 Renamed a store_artifacts step 2021-08-12 12:20:02 -07:00
research bot a2bb49f089 updating docs and package bits [ci skip] 2021-08-12 18:43:04 +00:00
github-actions[bot] ecc75732b3 Branch was auto-updated. 2021-08-12 18:15:51 +00:00
github-actions[bot] d8cb7677e0 Branch was auto-updated. 2021-08-12 18:15:39 +00:00
github-actions[bot] d9aec8e5f1 Branch was auto-updated. 2021-08-12 18:15:39 +00:00
github-actions[bot] 1e4fe37d63 Branch was auto-updated. 2021-08-12 18:15:38 +00:00
github-actions[bot] e031738360 Branch was auto-updated. 2021-08-12 18:15:37 +00:00
pyth0n1c 2df1975e5f Merge pull request #1559 from splunk/appinspect_failures 
fixes
v3.26.0 		2021-08-12 11:15:21 -07:00
pyth0n1c 4a94db95c2 Turned off file output from semgrep - current bug prevents anything from being written. it is okay when it is writted to stdout. 2021-08-12 10:18:22 -07:00
mhaag-spl 1e6e1c795e Update suspicious_msbuild_rename.yml 2021-08-12 10:52:48 -06:00
patel-bhavin cd4df7567a fixes 2021-08-12 09:47:40 -07:00
mhaag-spl 86e78db19a Added detection testing service results inDetect Renamed WinRAR 2021-08-12 10:41:19 -06:00
pyth0n1c 3f23ca062b Merge branch 'splunk:develop' into develop 2021-08-12 09:31:19 -07:00
Jose Enrique Hernandez d1d2aa92dc Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_content.yml 2021-08-12 12:26:04 -04:00
mhaag-spl 611c65f1fc Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-08-12 09:53:49 -06:00
mhaag-spl fc58b0fe69 Update detect_renamed_winrar.yml 2021-08-12 09:53:42 -06:00
tccontre 0c46b33693 Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak 2021-08-12 17:49:36 +02:00
tccontre 788c1fb495 conti_leak 2021-08-12 17:49:16 +02:00
mhaag-spl 104e8b3526 Added detection testing service results inDetect Renamed PSExec 2021-08-12 09:43:50 -06:00
mhaag-spl 31b5dc53b3 Update detect_renamed_psexec.yml 2021-08-12 08:55:58 -06:00
mhaag-spl 3576abc8c0 psexec and startw fix 2021-08-12 08:55:39 -06:00
mhaag-spl a49702a9fe Added detection testing service results inDetect microsoft.workflow.compiler.exe usage 2021-08-12 08:23:22 -06:00
mhaag-spl 14e55880cd mwc fix 2021-08-12 07:27:44 -06:00
mhaag-spl 633c3b8f06 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm 2021-08-12 06:41:03 -06:00