admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,636 Commits 697 Branches 195 Tags
temp_remove_attack_data
Commit Graph

14636 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pyth0n1c a93687e353 Merge pull request #1843 from splunk/issue_1839 
Issue 1839 - tested and passed
 2021-11-30 16:18:49 -08:00
pyth0n1c fee83d2cfd Check for splunkbase_username and splunkbase_password immediately if Splunkbase apps are to be installed and fail with a descriptive error if they are not provided. 2021-11-30 14:22:34 -08:00
pyth0n1c 9700571e0c Set required version of jsonschema. Added an --interactive_failure command line option. Fixed a typo and removed non required jsonschema library 2021-11-30 13:43:25 -08:00
Bhavin Patel 4d2221de73 Branch was auto-updated. 2021-11-30 12:02:10 -08:00
Bhavin Patel 698356d345 Branch was auto-updated. 2021-11-30 12:02:08 -08:00
Bhavin Patel 991d5ab905 Branch was auto-updated. 2021-11-30 12:02:06 -08:00
Bhavin Patel 78fec6e11e Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel 3bdbba50e0 Branch was auto-updated. 2021-11-30 12:02:05 -08:00
Bhavin Patel 78c5f10942 Branch was auto-updated. 2021-11-30 12:02:04 -08:00
Bhavin Patel c5554e4dc8 Merge pull request #1850 from splunk/double-fix 
Update detect_html_help_renamed.yml
 2021-11-30 12:01:40 -08:00
pyth0n1c f1a10f0d65 Upload the updated test file so we can replicate the test in the future. 2021-11-30 10:36:12 -08:00
mvelazco 918b680350 update experimental detection names 2021-11-30 13:20:42 -05:00
pyth0n1c e759f01e0c Better command line summary of pass and fail for summarize_json.py 2021-11-30 10:16:05 -08:00
pyth0n1c eb6378e805 Made some changes to properly supporting testing changed test file. Had some trouble before locating the appropriate detection file. Also throw an error if we try to test a file that was changed and is in the experimental path. Set up to run a test of the DetectionBaselineFixes branch to test these changes in GitHub Actions. 2021-11-30 09:52:36 -08:00
mvelazco 5fa8ad9210 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 2021-11-30 12:51:46 -05:00
mvelazco b5783ab849 adding 2 experimental detections 2021-11-30 12:51:43 -05:00
pyth0n1c 97c83a1864 Created Experimental folder in tests, 
as well as cloud, endpoint, and network 
subfolders, and moved some tests into it.
This corresponds with the experimental 
folder in detections.
 2021-11-30 09:47:01 -08:00
root e1947f155a Added detection testing service results inDetect RClone Command-Line Usage 2021-11-30 12:56:06 +00:00
Michael Haag b87061f794 rookie mistake 2021-11-30 05:34:29 -07:00
P4T12ICK 6843ccadc5 refactoring 2021-11-30 08:25:55 +01:00
pyth0n1c 868c98082b Small change to test changes on a specific branch instead of develop. 2021-11-29 16:49:06 -08:00
pyth0n1c 84e54e26d6 Changing to the correct baseline paths after restructuring repo 2021-11-29 16:44:40 -08:00
Michael Haag bae2e35b1c fix 2021-11-29 16:19:21 -07:00
mhaag-spl 81e952185e Rclone Haagrid 2021-11-29 15:55:38 -07:00
pyth0n1c 180785c7d4 Certain types of error would have missing fields in the results json, causing the summarization code to crash. Fixed that. Also sorted the output of the summarization to made it easier to look at a glance. Errors and failures will be at the top and the rest will be sorted alphabetically. 2021-11-29 14:40:17 -08:00
root 7ea845c9d5 Added detection testing service results inPossible Lateral Movement PowerShell Spawn 2021-11-29 22:12:37 +00:00
mvelazco 0254c60a28 adding detection 2021-11-29 16:50:39 -05:00
mhaag-spl fe7817f28a Update detect_html_help_renamed.yml 
Fixing issue #1849
 2021-11-29 13:43:41 -07:00
pyth0n1c 2b3fd66bb3 Run a test on everything, saving the intermediate files to help debugging. 2021-11-29 11:54:26 -08:00
pyth0n1c fff797358c Run a handlful of tests on push to produce output artifacts. 2021-11-29 11:34:59 -08:00
pyth0n1c 95e7169e05 fix quote 2021-11-29 10:53:29 -08:00
pyth0n1c e8fb9578ea Change types of quotes around schedule 2021-11-29 10:51:44 -08:00
pyth0n1c 38ad36c296 Run at 55th minute each hour for testing. 2021-11-29 10:49:54 -08:00
Bhavin Patel 024a0be7ff Branch was auto-updated. 2021-11-25 05:31:55 -08:00
Bhavin Patel bac32282a4 Branch was auto-updated. 2021-11-25 05:31:54 -08:00
Bhavin Patel 73ddbbfd27 Branch was auto-updated. 2021-11-25 05:31:53 -08:00
Bhavin Patel 699dfa0f5c Branch was auto-updated. 2021-11-25 05:31:52 -08:00
P4T12ICK 49170484ea Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip 
Ssa anomalous usage of archive tool
 2021-11-25 14:31:31 +01:00
Bhavin Patel 19d0ead8c5 Branch was auto-updated. 2021-11-25 05:07:27 -08:00
Bhavin Patel 80ba7482e4 Branch was auto-updated. 2021-11-25 05:07:25 -08:00
Bhavin Patel 0bd09d6126 Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel c778a2e35c Branch was auto-updated. 2021-11-25 05:07:24 -08:00
Bhavin Patel b25f7b80c3 Branch was auto-updated. 2021-11-25 05:07:23 -08:00
tccontre 2451defe2a Merge pull request #1848 from splunk/remcos_evasion 
remcos_evasion
 2021-11-25 14:07:03 +01:00
Detection Testing Service 6d8151d915 Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:13:52 +00:00
root 1b28033819 Added detection testing service results inPowershell Windows Defender Exclusion Commands 2021-11-25 12:13:51 +00:00
Detection Testing Service 724101f8ed Merge branch 'remcos_evasion' of https://github.com/splunk/security_content into remcos_evasion 2021-11-25 12:00:54 +00:00
root 4ed89e21a2 Added detection testing service results inWindows Defender Exclusion Registry Entry 2021-11-25 12:00:54 +00:00
root b6bb18d20c Added detection testing service results inAdd or Set Windows Defender Exclusion 2021-11-25 11:55:39 +00:00
tccontre dfd210cf29 remcos_evasion 2021-11-25 12:27:39 +01:00