admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,082 Commits 697 Branches 195 Tags
testing_detection_path_interception
Commit Graph

2082 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot-preview[bot] c48cda88f7 Merge pull request #359 from splunk/dependabot/pip/virtualenv-20.0.1 2020-02-10 16:02:28 +00:00
dependabot-preview[bot] 34fa48811d Bump virtualenv from 20.0.0 to 20.0.1 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.0 to 20.0.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/20.0.1/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.0...20.0.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-10 15:56:05 +00:00
dependabot-preview[bot] b254fafdda Merge pull request #358 from splunk/dependabot/pip/virtualenv-20.0.0 2020-02-10 09:54:51 +00:00
dependabot-preview[bot] 33f21a5b45 Bump virtualenv from 16.7.9 to 20.0.0 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 16.7.9 to 20.0.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/16.7.9...20.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-10 09:49:02 +00:00
dependabot-preview[bot] 1da9232ca3 Merge pull request #357 from splunk/dependabot/pip/zipp-2.2.0 2020-02-07 22:38:18 +00:00
dependabot-preview[bot] f531e0d297 Bump zipp from 2.1.0 to 2.2.0 
Bumps [zipp](https://github.com/jaraco/zipp) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/master/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v2.1.0...v2.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-07 22:33:42 +00:00
Bhavin Patel eccde1d1b4 Merge pull request #356 from splunk/develop 
v1.0.50 Release
 2020-02-07 12:16:09 -08:00
research bot f2dbaf3661 updating docs and package bits [ci skip] 2020-02-07 19:21:58 +00:00
divious1 bdedd41b34 removing bad reference, dead link v1.0.50 2020-02-07 14:15:32 -05:00
rvaldez617 456f68131d Merge pull request #355 from splunk/jwindley-splunk/T1164 
corrected a few bugs with the detection spec for jwindley-splunk/T1164
 2020-02-07 12:07:25 -07:00
divious1 6caea176a6 corrected a few bugs with the spec 2020-02-07 13:51:31 -05:00
Bhavin Patel 096234f417 Merge pull request #354 from splunk/fix_convert_bug_issue_343 
fixes issue 343
 2020-02-07 10:38:14 -08:00
Bhavin Patel 6b2c9e4172 Merge pull request #327 from splunk/supicious_email_updates 
updating boiler plate, detection not working out of box against T1193…
 2020-02-07 10:35:35 -08:00
Bhavin Patel 556efc4a78 Merge pull request #325 from splunk/dns_query_updates 
Update version info and macros
 2020-02-07 10:33:05 -08:00
divious1 3336663726 fixes issue 343 2020-02-07 13:32:56 -05:00
bpatel ff7a6fef59 update mod dates of stories: 2020-02-07 10:30:32 -08:00
Bhavin Patel 77ca56ce19 Merge pull request #347 from splunk/CRL-1725_Processes.parent_process.Correction 
Crl 1725 processes.parent process.correction
 2020-02-07 10:28:07 -08:00
bpatel 6896cf9b58 removing incorrect mitre id 2020-02-07 10:27:21 -08:00
Bhavin Patel f682a22461 Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction 2020-02-07 10:18:17 -08:00
bpatel 1c97742fed macros node 2020-02-07 10:17:14 -08:00
Bhavin Patel 98195728fc Merge pull request #324 from splunk/first_time_seen_cmd_updates 
update version info, add macros for first time seen cmd line detection
 2020-02-07 10:07:18 -08:00
Bhavin Patel 0432161688 Merge pull request #326 from splunk/smb_detection_updates 
update smb related content.
 2020-02-07 10:05:44 -08:00
Bhavin Patel 44761d1106 Merge pull request #348 from splunk/CRL-1723 
CRL-1723 : corrected field name in SPL Filesystem.filepath [which doe…
 2020-02-07 10:04:22 -08:00
Bhavin Patel 7d61248099 Merge branch 'develop' into CRL-1725_Processes.parent_process.Correction 2020-02-07 10:03:49 -08:00
Jose Enrique Hernandez 382d0d719d Merge pull request #351 from splunk/issue_336 
updating mod dates and version
 2020-02-07 13:02:48 -05:00
Bhavin Patel 9849b76aff Merge branch 'develop' into first_time_seen_cmd_updates 2020-02-07 10:02:26 -08:00
bpatel f307274f95 story mod updates 2020-02-07 10:00:28 -08:00
Bhavin Patel 11e67aefb4 Merge pull request #352 from splunk/fixing_external_pr_ci 
fixing issue with seans PR
 2020-02-07 09:54:05 -08:00
Jose Enrique Hernandez 08d7ba3900 Merge pull request #346 from splunk/CRL-1726_lookups_csv_ci 
CRL-1726 adding logic to copy over lookups
 2020-02-06 23:49:33 -05:00
research bot 345858c83b updating docs and package bits [ci skip] 2020-02-06 22:47:39 +00:00
Rico Valdez 537f51434e Merge branch 'develop' of github.com:splunk/security-content into develop 
local merge of develop prior to push
 2020-02-05 16:28:45 -07:00
Rico Valdez ac7bd7cfee changed the file name of the .csv file and updated the associated yml file 2020-02-05 16:27:57 -07:00
rvaldez617 7d33b5c36c Merge pull request #350 from splunk/issue_323 
CRL-1721 - updating files as per Dons/Andrew Lee's feedback
 2020-02-05 16:06:17 -07:00
Jose Enrique Hernandez 2fb2d880f0 Merge pull request #344 from smalloy2/develop 
Making color contrast changes for 508 compliance
 2020-02-04 17:07:13 -05:00
divious1 caa5437fad fixing issue with seans PR 2020-02-04 16:31:56 -05:00
bpatel dbbc58fb43 renaming lookup file in package/lookup 2020-02-04 09:46:22 -08:00
bpatel 8b0f74c34d updating mod dates and version 2020-02-04 09:21:52 -08:00
bpatel 92768472e0 updating files as per Dons feedback 2020-02-04 09:15:39 -08:00
dependabot-preview[bot] e134fb24c8 Merge pull request #349 from splunk/dependabot/pip/nodeenv-1.3.5 2020-02-04 08:35:32 +00:00
dependabot-preview[bot] 6ac73bb183 Bump nodeenv from 1.3.4 to 1.3.5 
Bumps [nodeenv](https://github.com/ekalinin/nodeenv) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/ekalinin/nodeenv/releases)
- [Changelog](https://github.com/ekalinin/nodeenv/blob/master/CHANGES)
- [Commits](https://github.com/ekalinin/nodeenv/compare/1.3.4...1.3.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-02-04 08:31:13 +00:00
Jason Brewer e18a1402f4 CRL-1723 : corrected field name in SPL Filesystem.filepath [which does not exist] to Filesystem.file_path. 2020-02-03 21:00:55 -08:00
Jason Brewer c06702a7f4 CRL-1725 - Added update to detections.spec.json to accomodate a new output entity parent_process_name. 2020-02-03 15:32:12 -08:00
Jason Brewer 346709b58f CRL-1725 - Changed prohibited_apps_spawning_cmdprompt.yml to use parent_process_name as entity. Changed supress field to add user. Bumped detection version number and story version numbers on stories/suspicious_cmd_line_executions.yml and stories/suspicious_mshta_activities.yml. 2020-02-03 15:24:49 -08:00
Jose Enrique Hernandez 667ac3ffa3 Merge pull request #345 from splunk/CRL-1727_detection_bug_issue_343 
fixing issue #343
 2020-02-03 17:36:49 -05:00
divious1 6730dbefd8 adding logic to copy over lookups 2020-02-03 17:35:06 -05:00
divious1 2b6db17c99 fixing issue #343 2020-02-03 17:10:15 -05:00
seanmalloy 6a3c1d4988 Making color contrast changes for 508 compliance 2020-02-03 10:31:13 -08:00
dependabot-preview[bot] 70a3aa3841 Merge pull request #342 from splunk/dependabot/pip/jinja2-2.11.1 2020-01-30 18:28:52 +00:00
dependabot-preview[bot] a696b13961 Bump jinja2 from 2.11.0 to 2.11.1 
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/master/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/2.11.0...2.11.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-01-30 18:23:29 +00:00
dependabot-preview[bot] 5e88f84ba5 Merge pull request #341 from splunk/dependabot/pip/pre-commit-2.0.1 2020-01-30 02:14:17 +00:00