admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c fdfcbcb987 Branch was auto-updated. 2022-02-14 12:59:18 -08:00
pyth0n1c 58d3d914a8 Branch was auto-updated. 2022-02-14 12:59:17 -08:00
pyth0n1c 9c5ae030cc Branch was auto-updated. 2022-02-14 12:59:09 -08:00
pyth0n1c 232e00412c Branch was auto-updated. 2022-02-14 12:59:08 -08:00
pyth0n1c d953780c8c Branch was auto-updated. 2022-02-14 12:59:06 -08:00
pyth0n1c af6dabf0e5 Branch was auto-updated. 2022-02-14 12:59:05 -08:00
Bhavin Patel 52ab302315 Merge pull request #2016 from splunk/Multiplicity 
The Haag Witch Project
 2022-02-14 12:58:44 -08:00
d1vious 73cb36c626 adding working detection 2022-02-14 15:54:12 -05:00
d1vious 1cdd6386f3 updating the detection 2022-02-14 13:47:06 -05:00
d1vious 0a2618f686 adding 1 detection 2022-02-14 13:40:24 -05:00
d1vious a1d127126a adding template detection 2022-02-14 11:11:47 -05:00
P4T12ICK f7f0b2712d Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content 2022-02-14 16:48:08 +01:00
P4T12ICK 0b5b4e2388 generate API package working 2022-02-14 16:45:27 +01:00
tccontre d96849c449 linux_lolbin_stage1 2022-02-14 10:17:46 +01:00
d1vious 73ba128590 fixing duplicate lookups bug 2022-02-11 12:11:10 -05:00
dependabot[bot] 48393bb964 Bump attrs from 21.2.0 to 21.4.0 
Bumps [attrs](https://github.com/python-attrs/attrs) from 21.2.0 to 21.4.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/21.2.0...21.4.0)

---
updated-dependencies:
- dependency-name: attrs
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-11 16:59:09 +00:00
pyth0n1c d14b240186 Branch was auto-updated. 2022-02-11 08:59:01 -08:00
pyth0n1c af4da12519 Branch was auto-updated. 2022-02-11 08:59:00 -08:00
pyth0n1c 8ab48aefb2 Branch was auto-updated. 2022-02-11 08:58:58 -08:00
Jose Enrique Hernandez 8e3468002b Merge pull request #2005 from splunk/dependabot/pip/semantic-version-2.9.0 2022-02-11 11:58:35 -05:00
pyth0n1c c284abde06 Branch was auto-updated. 2022-02-11 08:52:57 -08:00
pyth0n1c 363f78e77d Branch was auto-updated. 2022-02-11 08:52:56 -08:00
pyth0n1c c69f075c4b Branch was auto-updated. 2022-02-11 08:52:54 -08:00
pyth0n1c a37dd2c427 Branch was auto-updated. 2022-02-11 08:52:53 -08:00
Jose Enrique Hernandez 9f20073cfd Merge pull request #2008 from splunk/dependabot/pip/urllib3-1.26.8 2022-02-11 11:52:30 -05:00
tccontre 5b11f3daff linux_lolbin_stage1 2022-02-11 13:44:14 +01:00
pyth0n1c 4f0622a5aa Update to latest Splunkbase Windows Sysmon 2022-02-10 16:24:17 -08:00
pyth0n1c 889f27064c Downloaded apps are now cached by default. This can save a huge amount of time on startup, especially for a large number of containers or for slower connections. Otherwise, each container that is set up needs over 600MB of throughput. 2022-02-10 15:50:25 -08:00
mhaag-spl ace7ccbb6d Update windows_schtasks_create_run_as_system.yml 2022-02-10 11:36:02 -07:00
pyth0n1c ec90ee19d5 Now, when one or more detection tests fail in the CI/CD, 
it will cause the workflow to fail. In turn, this would
prevent a PR from being merged. However, this
lets a developer know more easily (without needing
to dive into the GitHub Actions logs) whether or
not their detections passed successfully.  It also
upload an extra file called DetectionFailureManifest
which is a test file for ONLY the failed tests.
You can run this locally on your machine to 
quickly, interactively debug the failures only.
 2022-02-10 09:17:23 -08:00
pyth0n1c 6c9c932c30 Branch was auto-updated. 2022-02-10 09:10:42 -08:00
pyth0n1c 2b113361e3 Branch was auto-updated. 2022-02-10 09:10:41 -08:00
pyth0n1c 98afaaa6b8 Branch was auto-updated. 2022-02-10 09:10:40 -08:00
pyth0n1c afa55c5052 Branch was auto-updated. 2022-02-10 09:10:39 -08:00
pyth0n1c 428785a15f Revert "Now, failing one or more CI/CD Tests causes" 
This reverts commit 55e94c3eab.
 2022-02-10 09:07:02 -08:00
pyth0n1c fe09d6238b Branch was auto-updated. 2022-02-10 09:04:32 -08:00
pyth0n1c b8b8c47ff3 Branch was auto-updated. 2022-02-10 09:04:31 -08:00
pyth0n1c 110a5e8628 Branch was auto-updated. 2022-02-10 09:04:29 -08:00
pyth0n1c 6a93f59340 Branch was auto-updated. 2022-02-10 09:04:28 -08:00
pyth0n1c 55e94c3eab Now, failing one or more CI/CD Tests causes 
the workflow to fail. An additional file is 
also uploaded called "replicate_failures"
which allows the user to easily retest
just the failed tests locally.
 2022-02-10 09:04:04 -08:00
mhaag-spl 40b34450a0 Windows Schtasks Create Run As System 2022-02-10 09:08:52 -07:00
pyth0n1c 58a6071d3d Branch was auto-updated. 2022-02-09 16:53:39 -08:00
pyth0n1c e456278647 Branch was auto-updated. 2022-02-09 16:53:37 -08:00
pyth0n1c 17e2f3c94b Branch was auto-updated. 2022-02-09 16:53:36 -08:00
pyth0n1c a1d17cba1a Branch was auto-updated. 2022-02-09 16:53:35 -08:00
Bhavin Patel ce9493adca Merge pull request #2009 from splunk/TR-1194v2 
Tr 1194v2
 2022-02-09 16:53:14 -08:00
Bhavin Patel baab603657 Update ssa___unusual_volume_download_from_internal_server.yml 2022-02-09 16:45:28 -08:00
Xiao Lin ee2ee98742 remove duplicate 2022-02-09 16:44:17 -08:00
Xiao Lin 4c5f48c507 add detection for unusal volume of data download 2022-02-09 16:40:45 -08:00
Xiao Lin a1e6d3e225 update search string 2022-02-09 16:36:10 -08:00