Commit Graph

2257 Commits

Author SHA1 Message Date
divious1 0022aff02f WIP to add scores to the parent technique 2020-08-12 17:16:05 -04:00
research bot acb7856bbc updating docs and package bits [ci skip] 2020-08-04 21:37:21 +00:00
Bhavin Patel 9bff8a38dd Merge pull request #608 from splunk/F5_TMUI
F5 TMUI RCE CVE-2020-5902 - contribution from Shannon ymls and updates
v3.0.5
2020-08-04 14:23:59 -07:00
bpatel 94e5d4dffd adding a response task 2020-08-04 14:15:14 -07:00
bpatel 971c2dc696 adding a response task 2020-08-04 14:14:12 -07:00
Jose Enrique Hernandez 32e5fc5331 Merge branch 'develop' into F5_TMUI 2020-08-04 17:09:39 -04:00
Jose Enrique Hernandez 5b586dcb46 Merge pull request #607 from splunk/SIGRed
DNS SIGRed CVE-2020-1350 - Shannon's contribution: porting ymls into a new PR
2020-08-04 17:08:55 -04:00
bpatel 58f47148b9 ymls and updates 2020-08-04 14:04:38 -07:00
bpatel 8617674eed response to new story 2020-08-04 13:23:26 -07:00
bpatel 63f266629e porting ymls into a newe PR 2020-08-04 12:55:12 -07:00
Bhavin Patel a1b00860d8 Merge pull request #578 from splunk/relative_path_and_type_consideration
Relative path and type consideration - kfondren7
2020-08-04 12:40:23 -07:00
bpatel 8227b5351f codec error 2020-08-04 12:33:28 -07:00
Jose Enrique Hernandez b3b5d561e6 Merge branch 'develop' into relative_path_and_type_consideration 2020-08-04 15:05:54 -04:00
dependabot-preview[bot] 49ec440a21 Merge pull request #606 from splunk/dependabot/pip/virtualenv-20.0.30 2020-08-04 17:26:57 +00:00
dependabot-preview[bot] 62aca55091 Bump virtualenv from 20.0.29 to 20.0.30
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.29 to 20.0.30.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.29...20.0.30)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-04 17:22:19 +00:00
Bhavin Patel 0e203651c8 Merge pull request #601 from splunk/removing_slack_from_ci
removed slack notifications they break PRs
2020-08-04 10:05:48 -07:00
Bhavin Patel 6e595aa13a Merge pull request #590 from splunk/nocaps
Nocaps
2020-08-04 09:54:56 -07:00
Bhavin Patel 7c5bd96fa8 Merge branch 'develop' into removing_slack_from_ci 2020-08-04 09:48:33 -07:00
dependabot-preview[bot] 3c3d42c375 Merge pull request #602 from splunk/dependabot/pip/cfgv-3.2.0 2020-07-31 18:07:05 +00:00
dependabot-preview[bot] 60bc58adfb Bump cfgv from 3.1.0 to 3.2.0
Bumps [cfgv](https://github.com/asottile/cfgv) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/asottile/cfgv/releases)
- [Commits](https://github.com/asottile/cfgv/compare/v3.1.0...v3.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-31 18:01:40 +00:00
dependabot-preview[bot] f79e2dac3c Merge pull request #603 from splunk/dependabot/pip/virtualenv-20.0.29 2020-07-31 18:00:28 +00:00
dependabot-preview[bot] 3d4f62dfba Bump virtualenv from 20.0.28 to 20.0.29
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.28 to 20.0.29.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.28...20.0.29)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-31 17:54:51 +00:00
Jose Enrique Hernandez 772d7a237f Merge branch 'develop' into removing_slack_from_ci 2020-07-29 23:11:15 -04:00
divious1 f72ec831a2 removed slack notifications they break PRs 2020-07-29 23:08:21 -04:00
Jose Enrique Hernandez d2913cbd50 Merge branch 'develop' into relative_path_and_type_consideration 2020-07-29 15:06:10 -04:00
P4T12ICK 267730094d Merge pull request #593 from splunk/TR038-create-local-admin-accounts-using-net-exe
[TR-038] update mitre id for detection. add test for net exe specific…
2020-07-29 11:09:17 +02:00
Patrick Bareiss bd1c4d8231 merged with develop 2020-07-29 11:03:54 +02:00
Patrick Bareiss b34f553837 updated test files 2020-07-29 11:01:13 +02:00
Patrick Bareiss d0aa56f92c updated test files 2020-07-29 11:00:22 +02:00
Patrick Bareiss ed7b65bfab merged with develop 2020-07-29 10:55:23 +02:00
Patrick Bareiss 9d7a8c2e3e Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe 2020-07-29 10:55:02 +02:00
P4T12ICK f09d5222ef Merge pull request #575 from splunk/TR037-process-execution-via-wmi
[TR-037] test for process execution via WMI (
2020-07-29 10:12:23 +02:00
Patrick Bareiss fc0a62a347 updated CI pipeline 2020-07-29 10:06:06 +02:00
P4T12ICK a93c669aac Merge branch 'develop' into TR037-process-execution-via-wmi 2020-07-29 10:03:09 +02:00
Joseph Zadeh 3f93f64bfd [TR-038] update mitre id for detection. add test for net exe specific behavior 2020-07-28 11:47:58 -07:00
Rod Soto a4e1a402ca anothererrorfixed 2020-07-28 12:03:21 -04:00
Rod Soto d597c6f64c Merge branch 'develop' into nocaps 2020-07-28 11:53:17 -04:00
Rod Soto 182b0551aa fixedsearch 2020-07-28 11:52:34 -04:00
P4T12ICK ee69edcd44 Merge pull request #592 from splunk/detection_testing_combined
Detection testing combined
2020-07-28 15:55:53 +02:00
Patrick Bareiss 074b782dd0 detection tested 2020-07-28 15:43:57 +02:00
Patrick Bareiss dd0e6caf00 merged multiple test detections 2020-07-28 14:22:53 +02:00
Patrick Bareiss 1619908a32 merged 2020-07-28 14:20:39 +02:00
Patrick Bareiss 004eeb2347 merged 2020-07-28 14:20:14 +02:00
Patrick Bareiss 3e9f00b376 tested detection 2020-07-28 14:17:21 +02:00
Patrick Bareiss 8db3edafe2 tested detection 2020-07-28 14:17:10 +02:00
Rod Soto f53f148f00 seeifitworks 2020-07-28 08:10:19 -04:00
Rod Soto 9b3a81da87 fixedsearches 2020-07-28 07:46:50 -04:00
Patrick Bareiss d2752c13f9 successful tested 2020-07-28 11:14:53 +02:00
Patrick Bareiss f74a0fe273 successful tested 2020-07-28 11:14:34 +02:00
Patrick Bareiss 46fa587782 minor improvement CI job 2020-07-28 09:27:43 +02:00