admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
root 72f7bb0676 Added detection testing service results inLinux Service Started Or Enabled 2022-01-03 10:35:34 +00:00
root 00521f06a5 Added detection testing service results inLinux Setuid Using Setcap Utility 2022-01-03 10:04:59 +00:00
tccontre 780aa81877 Update linux_setuid_using_setcap_utility.yml 2022-01-03 10:40:56 +01:00
dependabot[bot] 733abea5da Bump filelock from 3.4.0 to 3.4.2 
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.4.0 to 3.4.2.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/py-filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.4.0...3.4.2)

---
updated-dependencies:
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-01-01 23:00:54 +00:00
dependabot[bot] d4063a48cf Bump platformdirs from 2.4.0 to 2.4.1 
Bumps [platformdirs](https://github.com/platformdirs/platformdirs) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](https://github.com/platformdirs/platformdirs/compare/2.4.0...2.4.1)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-01-01 23:00:51 +00:00
dependabot[bot] 2c803e1c6f Bump virtualenv from 20.10.0 to 20.12.1 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.10.0 to 20.12.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.10.0...20.12.1)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-01-01 23:00:48 +00:00
Arjun Khunti d7b159aea3 test: fixed a typo 2021-12-29 13:30:10 +05:30
truptilangalia-crest 500986bfb4 Update README.md 2021-12-28 18:00:14 +05:30
truptilangalia-crest 9da1778b53 Update README.md 2021-12-28 17:57:15 +05:30
truptilangalia-crest c13428f57b Update README.md 2021-12-27 17:10:22 +05:30
Detection Testing Service 8f4c7ea68f test: encoded git token 2021-12-27 16:03:28 +05:30
Detection Testing Service a5dcbab86c test: updated code with some minor fixes 2021-12-24 13:31:15 +05:30
P4T12ICK 2723fab278 WIP 2021-12-23 15:30:35 +01:00
tccontre e21247f2d2 linux_persist_priv_batch_2 2021-12-23 12:31:05 +01:00
pyth0n1c eb48e000a8 Updated default app loadout for splunkbase. 
Added splunk_ta_for_nginz,
splunk_security_essentials,
and ta_for_zeek.
 2021-12-22 14:05:55 -08:00
pyth0n1c 2574fb2fea Hardcoding the branch to develop for CI testing. 2021-12-22 13:19:05 -08:00
pyth0n1c dc3fc8296d Added a config file to run tests against latest splunkbase apps. 
Also, added slightly better error output for certain types
of test failures.  Finally updated splunkbase app defaults in
validate_args, but they are commented out for now while we
use the S3 versions.
 2021-12-22 13:02:21 -08:00
truptilangalia-crest f300a6c4a6 Merge branch 'splunk:develop' into test/enrich_detections 2021-12-22 18:42:07 +05:30
Detection Testing Service 77f963cd11 test:updated detection-ta-mapping.yml 2021-12-22 18:30:21 +05:30
Detection Testing Service 0d62a0f22c Merge branch 'linux_persist_priv_batch_1' of https://github.com/splunk/security_content into linux_persist_priv_batch_1 2021-12-22 10:54:27 +00:00
root ae6cca1cf4 Added detection testing service results inLinux Add Files In Known Crontab Directories 2021-12-22 10:54:26 +00:00
tccontre 9b3ecff018 Update linux_possible_append_command_to_at_allow_config_file.test.yml 2021-12-22 11:51:16 +01:00
Detection Testing Service 24431a7891 Merge branch 'linux_persist_priv_batch_1' of https://github.com/splunk/security_content into linux_persist_priv_batch_1 2021-12-22 10:25:23 +00:00
root d708418dd8 Added detection testing service results inLinux At Allow Config File Creation 2021-12-22 10:25:23 +00:00
root 9a6806ce75 Added detection testing service results inLinux At Application Execution 2021-12-22 10:22:07 +00:00
root b38beadde2 Added detection testing service results inLinux Edit Cron Table Parameter 2021-12-22 10:03:26 +00:00
tccontre 3a68d044ef Update linux_possible_append_cronjob_entry_on_existing_cronjob_file.test.yml 2021-12-22 10:46:27 +01:00
tccontre 7549ae7c7b Update ssa___hiding_files_and_directories_with_attrib_exe.yml 2021-12-22 10:22:49 +01:00
root d1c95a44ad Added detection testing service results inLinux Possible Cronjob Modification With Editor 2021-12-22 09:02:46 +00:00
pyth0n1c 05821f4303 Fixed some parts of the CI that don't give a descriptive error message 
in the output files when a search generates certain types of errors.
For example, an error where it cannot reach the Splunk endpoint
server.  These are rare, but good to have.
 2021-12-21 14:46:44 -08:00
pyth0n1c 47e155b747 Changed back to one container per 
GH Action Machine config with the
mock option.  Also, shuffling detections after they are put into a
list to distribute runtime and load as
much as possible.
 2021-12-21 14:22:33 -08:00
Bhavin Patel 94130345ab Branch was auto-updated. 2021-12-21 11:22:20 -08:00
Bhavin Patel 0ff1e78f11 Branch was auto-updated. 2021-12-21 11:22:19 -08:00
Bhavin Patel 5b820c2af9 Branch was auto-updated. 2021-12-21 11:22:17 -08:00
Jose Enrique Hernandez 930a6db140 Merge pull request #1901 from splunk/AD_Privilege_Escalation_CVE-2021-42278 2021-12-21 14:21:54 -05:00
pyth0n1c 04c526ba6d Changed the wrong line to trigger a test of everything. Trying again. 2021-12-21 11:17:09 -08:00
root 9243038c09 Added detection testing service results inSuspicious Ticket Granting Ticket Request 2021-12-21 19:06:04 +00:00
pyth0n1c 5f972f734f Re-push to test everything with 2 containers per GH Actions machine. 2021-12-21 11:00:11 -08:00
pyth0n1c 9ba7abd0e8 Fixed a small error. If you specified a PR number and a branch that did not exist, then it would create a branch and that would be bad. Now, when you specify a branch and a PR number, the branch MUST exist. If not, we fail and bail. 2021-12-21 10:44:50 -08:00
mvelazco bb8ae58f84 adding new detection 2021-12-21 13:44:17 -05:00
tccontre 11dbcdf473 Update ssa___hiding_files_and_directories_with_attrib_exe.yml 2021-12-21 15:13:54 +01:00
tccontre fb087ea8b3 linux_persist_priv_batch_1 2021-12-21 11:02:15 +01:00
root da634d5c25 Added detection testing service results inSuspicious Kerberos Service Ticket Request 2021-12-21 03:57:17 +00:00
mvelazco 4631c84a60 updating logic 2021-12-20 22:38:27 -05:00
root 122d403d6c Added detection testing service results inSuspicious Kerberos Service Ticket Request 2021-12-21 03:34:17 +00:00
mvelazco d5d7e0ce1a Update suspicious_computer_account_name_change.yml 2021-12-20 22:11:09 -05:00
mvelazco 6fa0f9b30b adding new detection 2021-12-20 22:08:19 -05:00
root 653a7755e8 Added detection testing service results inSuspicious Computer Account Name Change 2021-12-20 22:50:20 +00:00
pyth0n1c 63555bc531 Added some more robust error handling to the high level test runner. It looks like we were getting errors pulling the image from docker hub - was it down... 2021-12-20 14:45:01 -08:00
pyth0n1c d4aae32b3d Removed Python 2 which was previously used for splunk packaging toolkit. Replaced with python3 2021-12-20 14:26:57 -08:00