 root
|
ba111107f8
|
Added detection testing service results inWindows Service Created Within Public Path
|
2021-11-24 15:24:21 +00:00 |
|
|
root
|
9f122d542c
|
Added detection testing service results inSvchost.exe LOLBAS Execution Process Spawn
|
2021-11-24 14:58:42 +00:00 |
|
|
mvelazco
|
42913444c4
|
update dataset location
|
2021-11-24 09:37:47 -05:00 |
|
|
P4T12ICK
|
1fa6e25756
|
ssa test ci cd
|
2021-11-24 15:14:31 +01:00 |
|
|
P4T12ICK
|
704e469362
|
ssa test ci cd
|
2021-11-24 14:38:08 +01:00 |
|
|
P4T12ICK
|
ebbc82c8c3
|
ssa test ci cd
|
2021-11-24 14:09:39 +01:00 |
|
|
P4T12ICK
|
7baeb01691
|
ssa test ci cd
|
2021-11-24 13:28:56 +01:00 |
|
|
P4T12ICK
|
e7a55b8d29
|
ssa test ci cd
|
2021-11-24 13:15:50 +01:00 |
|
|
P4T12ICK
|
b02e05a11c
|
ssa test ci cd
|
2021-11-24 13:12:39 +01:00 |
|
|
P4T12ICK
|
312209bea7
|
ssa test ci cd
|
2021-11-24 13:10:56 +01:00 |
|
|
P4T12ICK
|
395ef2c546
|
ssa test ci cd
|
2021-11-24 12:46:18 +01:00 |
|
|
P4T12ICK
|
2eea8708ed
|
ssa test ci cd
|
2021-11-24 12:34:55 +01:00 |
|
|
P4T12ICK
|
59b3520084
|
ssa test ci cd
|
2021-11-24 11:50:45 +01:00 |
|
|
P4T12ICK
|
b4e4c1385f
|
ssa test ci cd
|
2021-11-24 11:33:10 +01:00 |
|
|
P4T12ICK
|
9310c27941
|
ssa test ci cd
|
2021-11-24 09:17:42 +01:00 |
|
|
P4T12ICK
|
421aebbf68
|
ssa test ci cd
|
2021-11-24 08:28:45 +01:00 |
|
|
mvelazco
|
46aa673605
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 21:04:10 -05:00 |
|
|
mvelazco
|
33e9597304
|
updating logic and adding datasets
|
2021-11-23 21:04:04 -05:00 |
|
|
root
|
9e165574c0
|
Added detection testing service results inWsmprovhost.exe LOLBAS Execution Process Spawn
|
2021-11-24 01:53:58 +00:00 |
|
|
mvelazco
|
eba7f33aa9
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 20:33:28 -05:00 |
|
|
mvelazco
|
ad273d4ca1
|
update datasets
|
2021-11-23 20:33:27 -05:00 |
|
|
pyth0n1c
|
6b292ba2c1
|
upload artifacts even if summarize fails.
|
2021-11-23 17:13:44 -08:00 |
|
|
pyth0n1c
|
a302d952b4
|
tiny ci change to test everything overnight
|
2021-11-23 17:12:25 -08:00 |
|
|
pyth0n1c
|
ae7fb14085
|
Updated summarize_json.py to provide a total success/failure field and also return a nonzero return code if at least one test fails.
|
2021-11-23 16:38:22 -08:00 |
|
|
Detection Testing Service
|
25a60dfdc7
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-24 00:03:26 +00:00 |
|
|
root
|
6c45a549e3
|
Added detection testing service results inWmiprsve.exe LOLBAS Execution Process Spawn
|
2021-11-24 00:03:25 +00:00 |
|
|
pyth0n1c
|
1a39321be6
|
Small typo in artifact filename.
|
2021-11-23 15:54:12 -08:00 |
|
|
Detection Testing Service
|
2c6ae766cc
|
Merge branch 'TR-1085_LateralMovement_3' of https://github.com/splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 23:52:09 +00:00 |
|
|
root
|
e7ad40a54b
|
Added detection testing service results inMmc.exe LOLBAS Execution Process Spawn
|
2021-11-23 23:52:08 +00:00 |
|
|
mvelazco
|
2e86ded458
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 18:42:50 -05:00 |
|
|
mvelazco
|
c13de25f73
|
update dataset metadata
|
2021-11-23 18:42:48 -05:00 |
|
|
pyth0n1c
|
1afbaa3a1d
|
Fixed bad value substitution into the schema coming from command line arguments.
|
2021-11-23 15:35:05 -08:00 |
|
|
pyth0n1c
|
451d2500db
|
Fixed overwriting mode with null if nothing is passed on the command line.
|
2021-11-23 15:22:11 -08:00 |
|
|
pyth0n1c
|
b0e7c33c4d
|
Changing mode for CI PR test from selected to changes.
|
2021-11-23 15:14:49 -08:00 |
|
|
pyth0n1c
|
1015abc30a
|
Finally ready to try the full integration test after modifying the docker-detection-testing.yml with new names, paths, and arguments. Fingers crossed...
|
2021-11-23 15:10:28 -08:00 |
|
|
pyth0n1c
|
fab525a682
|
Added support for more command line arguments for number containers and mode and branch.
|
2021-11-23 14:48:37 -08:00 |
|
|
root
|
37f4a32647
|
Added detection testing service results inServices.exe LOLBAS Execution Process Spawn
|
2021-11-23 22:39:17 +00:00 |
|
|
pyth0n1c
|
dab746bb0c
|
Save out a json file showing the config, to include the command line arguments with credentials removed, whenever a test is actually run. This makes it trivial to reproduce the test run on another machine or again on the same machine.
|
2021-11-23 14:30:54 -08:00 |
|
|
mvelazco
|
c2fd0a4b29
|
adding dataset fields
|
2021-11-23 17:15:06 -05:00 |
|
|
mvelazco
|
190c0cba21
|
Merge branch 'TR-1085_LateralMovement_3' of github.com:splunk/security_content into TR-1085_LateralMovement_3
|
2021-11-23 16:00:06 -05:00 |
|
|
mvelazco
|
5211a97f11
|
update detections
|
2021-11-23 16:00:04 -05:00 |
|
|
pyth0n1c
|
914f49d6f7
|
Delete intermediate testing artifacts/container config files in CI. Better job packaging all local apps, not just escu, into the same folder for --mock.
|
2021-11-23 11:59:01 -08:00 |
|
|
root
|
c8c731e449
|
Added detection testing service results inWindows Service Created With Suspicious Service Path
|
2021-11-23 19:20:48 +00:00 |
|
|
mvelazco
|
4c696f9ad8
|
updating detections
|
2021-11-23 14:01:28 -05:00 |
|
|
mvelazco
|
9b944b67a2
|
adding 4 new detections
|
2021-11-23 10:13:07 -05:00 |
|
|
P4T12ICK
|
8cf8efb30f
|
SSA anommalous usage of archive tools
|
2021-11-23 13:05:00 +01:00 |
|
|
P4T12ICK
|
4d6e83bd25
|
SSA anommalous usage of archive tools
|
2021-11-23 12:46:02 +01:00 |
|
|
tccontre
|
83576ecb74
|
more_ioc_detections
|
2021-11-23 11:56:00 +01:00 |
|
|
P4T12ICK
|
e48bf8c257
|
SSA anommalous usage of archive tools
|
2021-11-23 10:14:50 +01:00 |
|
|
pyth0n1c
|
3cd1e42ada
|
Huge refactor is almost complete. Able to launch and run multiple containers now as intended
|
2021-11-22 16:36:21 -08:00 |
|