Commit Graph

14636 Commits

Author SHA1 Message Date
Bhavin Patel 1ed9d2d649 Branch was auto-updated. 2021-11-03 15:11:18 -07:00
Bhavin Patel ed91698f04 Merge pull request #1776 from splunk/ssa_fix
Update ssa___modify_acls_permission_of_files_or_folders.yml
2021-11-03 15:10:58 -07:00
root 8c160f9bca Added detection testing service results inWindows AdFind Exe 2021-11-03 22:10:48 +00:00
Lou Stella df4623a652 Update ssa___modify_acls_permission_of_files_or_folders.yml 2021-11-03 17:04:39 -05:00
patel-bhavin 1f66d94667 author updates 2021-11-03 14:38:40 -07:00
patel-bhavin 0096350774 quotes 2021-11-03 14:32:17 -07:00
patel-bhavin 4b4f616bf5 date 2021-11-03 13:41:39 -07:00
patel-bhavin da9d9ae021 updates 2021-11-03 13:40:22 -07:00
pyth0n1c 72b1fb7df4 Added datamodels to most of the ssa___ detections.
Still needs some more attention - there are likely 
some missing datamodels and some that are incorrect.
2021-11-03 12:01:00 -07:00
Bhavin Patel c6a98285e9 Branch was auto-updated. 2021-11-03 10:43:53 -07:00
Bhavin Patel fc4cc81ad6 Branch was auto-updated. 2021-11-03 10:43:52 -07:00
Bhavin Patel 1329ff2998 Branch was auto-updated. 2021-11-03 10:43:48 -07:00
Bhavin Patel 50a730bebf Branch was auto-updated. 2021-11-03 10:43:47 -07:00
Bhavin Patel cf50083094 Merge pull request #1736 from splunk/expgsuite
prforbhavingsuiteexperimentalsearches
2021-11-03 10:43:28 -07:00
patel-bhavin 0dfff97830 yml errors 2021-11-02 18:11:32 -07:00
patel-bhavin 767461b47d remove wrong lookup 2021-11-02 18:04:52 -07:00
patel-bhavin 1c1d17df17 Merge branch 'expgsuite' of github.com:splunk/security_content into expgsuite 2021-11-02 18:03:33 -07:00
patel-bhavin 0a9c396e08 search update 2021-11-02 18:03:21 -07:00
pyth0n1c dbc1e604b8 Changed datamodel from Endpoint to Endpoint_Process
for a number of the ssa___ detection files.
2021-11-02 17:40:19 -07:00
pyth0n1c 244fad2f7e Removed Endpoint, it should be Endpoint_Process
for relevant detections.
2021-11-02 17:34:47 -07:00
pyth0n1c 80db3a4e86 Added Endpoint to ba_detections.spec.json 2021-11-02 17:29:55 -07:00
pyth0n1c 2009a6541c more fixes to getting ssa detections 2021-11-02 17:22:03 -07:00
pyth0n1c 26af696757 fixed checking of the ssa filename, I think 2021-11-02 17:15:02 -07:00
pyth0n1c 3d84051d80 some print statements during
validation to help with debugging
2021-11-02 17:05:49 -07:00
pyth0n1c ac4bbd06a6 Just ba_detections to make parsing easier. 2021-11-02 16:57:47 -07:00
pyth0n1c f0f7092884 Removed one line from json schema.
This should fail, removal and check for
failure checks that we fixed the underlying
issue.
2021-11-02 16:51:11 -07:00
pyth0n1c 5117990730 Added a ba_detections.spec.json file for
validation of the BA detections.  Updated
validate_schema to use a different shcema
for BA detections vs non BA detections.
2021-11-02 16:30:49 -07:00
Bhavin Patel 581ace9401 Branch was auto-updated. 2021-11-02 11:56:15 -07:00
Bhavin Patel bb1b3ed291 Branch was auto-updated. 2021-11-02 11:56:14 -07:00
Bhavin Patel 9cc5671f48 Branch was auto-updated. 2021-11-02 11:56:12 -07:00
Bhavin Patel fcf073e01f Branch was auto-updated. 2021-11-02 11:56:08 -07:00
Bhavin Patel b0a44e4d2f Branch was auto-updated. 2021-11-02 11:56:07 -07:00
Bhavin Patel 5e300eafa3 Merge pull request #1772 from splunk/TR-880_generate_ssa_package
Honey, I shrunk the YAMLs!
2021-11-02 11:55:48 -07:00
Bhavin Patel b0c0d89368 Branch was auto-updated. 2021-11-02 09:57:02 -07:00
Bhavin Patel 571276f9f5 Branch was auto-updated. 2021-11-02 09:57:01 -07:00
Bhavin Patel db8142e1e8 Branch was auto-updated. 2021-11-02 09:56:56 -07:00
Bhavin Patel 5459d17d29 Branch was auto-updated. 2021-11-02 09:56:55 -07:00
Bhavin Patel fd953d2dbe Branch was auto-updated. 2021-11-02 09:56:52 -07:00
Bhavin Patel 7181933d48 Branch was auto-updated. 2021-11-02 09:56:51 -07:00
Bhavin Patel 2407813a61 Branch was auto-updated. 2021-11-02 09:56:49 -07:00
tccontre a0411fd063 Merge pull request #1731 from splunk/iceid_ttps
iceid_ttps
2021-11-02 17:56:25 +01:00
Danny Leung 280f6f4a10 PEX-33: fix repo path duplication issue 2021-11-02 00:11:24 -07:00
Danny Leung ade0bf3bf6 PEX-33: remove chalice import 2021-11-01 22:56:37 -07:00
Danny Leung 500dcf256e PEX-33: test running build on current branch instead of develop. 2021-11-01 22:42:44 -07:00
Danny Leung 7737249d92 Revert "PEX-33: manual revert to develop"
This reverts commit bb2050269f.
2021-11-01 22:16:43 -07:00
pyth0n1c 79833fccd0 Fixed how OrderedDict is imported to hopefully fix CSV output format. 2021-11-01 18:10:25 -07:00
Bhavin Patel 8d7ed3105b Update attempted_credential_dump_from_registry_via_reg_exe.yml 2021-11-01 17:44:38 -07:00
patel-bhavin 3ecdae1e84 minor 2021-11-01 17:43:37 -07:00
pyth0n1c aadb588fff Changes to generate JSON artifacts as well as CSV and upload them after a test run on GH Actions. 2021-11-01 17:23:22 -07:00
d1vious 19a159802c updating with no savedsearches_annotations 2021-11-01 20:01:33 -04:00