 Bhavin Patel
|
49e82e39ff
|
Branch was auto-updated.
|
2021-11-25 01:25:30 -08:00 |
|
|
Bhavin Patel
|
6d291d2600
|
Branch was auto-updated.
|
2021-11-25 01:25:29 -08:00 |
|
|
Bhavin Patel
|
469f9ab43f
|
Branch was auto-updated.
|
2021-11-25 01:25:28 -08:00 |
|
|
Bhavin Patel
|
5addbd5188
|
Branch was auto-updated.
|
2021-11-25 01:25:27 -08:00 |
|
|
Bhavin Patel
|
00755bf36b
|
Branch was auto-updated.
|
2021-11-25 01:25:26 -08:00 |
|
|
tccontre
|
06b65d7163
|
Merge pull request #1841 from splunk/more_ioc_detections
more_ioc_detections
|
2021-11-25 10:25:05 +01:00 |
|
|
Bhavin Patel
|
bb2a01499a
|
Branch was auto-updated.
|
2021-11-25 01:04:18 -08:00 |
|
|
Bhavin Patel
|
67bbcd8d30
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
|
Bhavin Patel
|
0a01fb8181
|
Branch was auto-updated.
|
2021-11-25 01:04:17 -08:00 |
|
|
Bhavin Patel
|
c681fb48b4
|
Branch was auto-updated.
|
2021-11-25 01:04:16 -08:00 |
|
|
Bhavin Patel
|
c753fb67c3
|
Branch was auto-updated.
|
2021-11-25 01:04:15 -08:00 |
|
|
Bhavin Patel
|
8b9637b86f
|
Branch was auto-updated.
|
2021-11-25 01:04:14 -08:00 |
|
|
P4T12ICK
|
a14e50ac10
|
Merge pull request #1847 from splunk/improvements
Improvements
|
2021-11-25 10:03:58 +01:00 |
|
|
tccontre
|
295acf12f0
|
Update ssa___delete_a_net_user.test.yml
|
2021-11-25 09:30:44 +01:00 |
|
|
P4T12ICK
|
e1844e0333
|
removed devsecops
|
2021-11-25 08:55:22 +01:00 |
|
|
P4T12ICK
|
2993c66134
|
Merge branch 'ssa_anomalous_usage_of_7zip' of github.com:splunk/security_content into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:37:12 +01:00 |
|
|
P4T12ICK
|
40a80473a2
|
Merge branch 'develop' into ssa_anomalous_usage_of_7zip
|
2021-11-25 08:36:33 +01:00 |
|
|
Bhavin Patel
|
28ad164d89
|
Branch was auto-updated.
|
2021-11-24 23:36:30 -08:00 |
|
|
Bhavin Patel
|
a619c9829e
|
Branch was auto-updated.
|
2021-11-24 23:36:29 -08:00 |
|
|
Bhavin Patel
|
d9525ef7e3
|
Branch was auto-updated.
|
2021-11-24 23:36:28 -08:00 |
|
|
Bhavin Patel
|
86fd20b169
|
Branch was auto-updated.
|
2021-11-24 23:36:28 -08:00 |
|
|
Bhavin Patel
|
3e22487ffc
|
Branch was auto-updated.
|
2021-11-24 23:36:27 -08:00 |
|
|
Bhavin Patel
|
9697382643
|
Branch was auto-updated.
|
2021-11-24 23:36:23 -08:00 |
|
|
P4T12ICK
|
2eda496ddd
|
Merge pull request #1845 from splunk/ssa_test_ci_cd_pipeline
Ssa test ci cd pipeline
|
2021-11-25 08:36:00 +01:00 |
|
|
pyth0n1c
|
afb07b6714
|
Run it on push too for an immediate test
|
2021-11-24 17:14:33 -08:00 |
|
|
pyth0n1c
|
b94ef641ec
|
Changed the detection testing to run on all, develop instead of changes to a different branch. This will collect some data for us over the next few days.
|
2021-11-24 17:13:41 -08:00 |
|
|
pyth0n1c
|
827cc97cdc
|
Better support for arg validation and command line arguments. Print out the password for the container, if the flag exists to print it out, to enable interactive testing. A few other format updates.
|
2021-11-24 17:06:07 -08:00 |
|
|
pyth0n1c
|
abd568f7d7
|
Small update to summarize_json.py to set show_splunk_app_password to True when generatingf the detection_failure_manifest.json file. This way, you can run that file directly as the configuration without making any other changes or passing command line values and get right into debugging everything
|
2021-11-24 15:57:13 -08:00 |
|
|
pyth0n1c
|
eb01127d03
|
Fixed key error in summarize.json. Had called detection_list detections_list, so it was failing jsonschema validation.
|
2021-11-24 15:25:24 -08:00 |
|
|
pyth0n1c
|
ae3e8f1b75
|
slim failed to install, causing escu app install to fail.
|
2021-11-24 14:56:38 -08:00 |
|
|
pyth0n1c
|
aa985d5077
|
Made some small changes to printed strings. Fixed summarize_json missing python library error by sourcing virtualenv set up in previous step.
|
2021-11-24 14:42:18 -08:00 |
|
|
pyth0n1c
|
9517171204
|
Small change to the output format of the test-config file that is generated at runtime to accurately describe the current test. Also added install of requirements.txt to final summary step.
|
2021-11-24 14:20:46 -08:00 |
|
|
pyth0n1c
|
88977a9fb8
|
Changes to template and summary to support passing a commit_hash parameter, not just a branch parameter, so that even old tests can be replicated.
|
2021-11-24 13:58:32 -08:00 |
|
|
d1vious
|
bda64cb7d4
|
added logic to include test file in the detections, also renamed the files to have prefixed ssa____ on name
|
2021-11-24 16:26:17 -05:00 |
|
|
pyth0n1c
|
4f6be10581
|
Testing with the proper mode for a specific branch.
|
2021-11-24 12:00:02 -08:00 |
|
|
pyth0n1c
|
f32f1bed2a
|
More verbose debug messages in summarize_json.
|
2021-11-24 11:45:52 -08:00 |
|
|
pyth0n1c
|
ccc29005fa
|
Still diagnosing path issues for summarize.
|
2021-11-24 11:12:19 -08:00 |
|
|
pyth0n1c
|
54a34608fe
|
Fixed results paths once more for summary.
|
2021-11-24 10:36:33 -08:00 |
|
|
pyth0n1c
|
5012b0f766
|
Another run to check and see if the summarization works and confirm the directory structure of the artifacts.
|
2021-11-24 10:10:27 -08:00 |
|
|
pyth0n1c
|
3cd3ca6692
|
Another CI change to list directory structure during summarize step.
|
2021-11-24 09:54:27 -08:00 |
|
|
Bhavin Patel
|
ef126c979d
|
Branch was auto-updated.
|
2021-11-24 09:13:43 -08:00 |
|
|
Bhavin Patel
|
9392c15f40
|
Branch was auto-updated.
|
2021-11-24 09:13:38 -08:00 |
|
|
Bhavin Patel
|
9fd5ba2d7b
|
Branch was auto-updated.
|
2021-11-24 09:13:37 -08:00 |
|
|
Bhavin Patel
|
945377a3cc
|
Branch was auto-updated.
|
2021-11-24 09:13:36 -08:00 |
|
|
Bhavin Patel
|
c57f06c3a9
|
Branch was auto-updated.
|
2021-11-24 09:13:35 -08:00 |
|
|
Bhavin Patel
|
61b717f51d
|
Branch was auto-updated.
|
2021-11-24 09:13:34 -08:00 |
|
|
Bhavin Patel
|
fd77109f22
|
Branch was auto-updated.
|
2021-11-24 09:13:34 -08:00 |
|
|
Michael Haag
|
694e5ef724
|
Merge pull request #1844 from splunk/TR-1085_LateralMovement_3
Lateral Movement Content Update #3
|
2021-11-24 10:13:14 -07:00 |
|
|
Michael Haag
|
144b6971d2
|
Update wsmprovhost_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:08:13 -07:00 |
|
|
Michael Haag
|
097683ffbb
|
Update wmiprsve_exe_lolbas_execution_process_spawn.yml
|
2021-11-24 10:07:35 -07:00 |
|