Commit Graph

2257 Commits

Author SHA1 Message Date
Rod Soto ba11f8f183 awslm5searches 2020-07-27 20:33:01 -04:00
Rod Soto 1ac5d3fca4 awslm3rd 2020-07-27 19:19:10 -04:00
Rod Soto 9f2c49f532 2searchstsassumerole 2020-07-27 17:57:12 -04:00
Rod Soto 3584bb4a31 newawslmsearches 2020-07-27 17:20:05 -04:00
Bhavin Patel 6372bbd532 Merge pull request #581 from splunk/pretty_printing_search
Update smb_traffic_spike.yml
2020-07-24 15:56:58 -07:00
Jose Enrique Hernandez 025a161f7b Update smb_traffic_spike.yml 2020-07-24 12:32:22 -04:00
Patrick Bareiss 4167531536 updated CI 2020-07-24 16:13:20 +02:00
Patrick Bareiss 35ce8cc953 Merge branch 'develop' into TR-33_schtasks_scheduling_job_on_remote_system 2020-07-24 16:12:05 +02:00
Patrick Bareiss a21c34870f test detection 2020-07-24 15:07:56 +02:00
dependabot-preview[bot] 8e61333d8c Merge pull request #579 from splunk/dependabot/pip/virtualenv-20.0.28 2020-07-24 09:04:52 +00:00
dependabot-preview[bot] 97f5fa4e1e Bump virtualenv from 20.0.27 to 20.0.28
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.27 to 20.0.28.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/master/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.27...20.0.28)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-24 08:59:29 +00:00
divious1 c625d06123 Merge remote-tracking branch 'fork/develop' into relative_path_and_type_consideration 2020-07-23 14:33:04 -04:00
trogdorsey dbb70b8f54 Merge pull request #577 from splunk/move_ci_us_east-2
moving job to us-east-2 seperating from our usual work region
2020-07-23 09:58:42 -05:00
divious1 320a491f61 moving job to us-east-2 seperating from our usual work region 2020-07-23 10:46:18 -04:00
Kyle Fondren c276041a41 Updated Jinja2 Template to accept Type 2020-07-22 15:23:37 -04:00
Kyle Fondren 55a5169200 change to use absolute path - fixed quote style 2020-07-22 14:33:26 -04:00
Kyle Fondren b04e4a01d0 fixed missing '+' in named fields 2020-07-22 14:14:55 -04:00
Kyle Fondren 1d72b16961 Added logic to include type in naming convention 2020-07-22 14:06:50 -04:00
Kyle Fondren 4d30e91f05 updated output_path to use path.join over concat 2020-07-22 13:28:55 -04:00
dependabot-preview[bot] f579091b4a Merge pull request #572 from splunk/dependabot/pip/identify-1.4.25 2020-07-22 16:12:31 +00:00
dependabot-preview[bot] a3f66a086f Bump identify from 1.4.24 to 1.4.25
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.24 to 1.4.25.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.24...v1.4.25)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-22 16:07:26 +00:00
dependabot-preview[bot] fb90eb2e49 Merge pull request #574 from splunk/dependabot/pip/urllib3-1.25.10 2020-07-22 16:06:08 +00:00
dependabot-preview[bot] 75f0490888 Bump urllib3 from 1.25.9 to 1.25.10
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.9 to 1.25.10.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/1.25.10/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.25.9...1.25.10)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-22 16:01:23 +00:00
Jose Enrique Hernandez 255c50131d Merge pull request #573 from splunk/update_sub_techniques
Update sub techniques
2020-07-22 11:32:41 -04:00
Joseph Zadeh ce279c60af [TR-037] test for process execution via WMI (no mitre sub-technique for this attack type). 2020-07-22 08:30:02 -07:00
Jose Enrique Hernandez d163dc0158 Merge pull request #571 from splunk/bug_fix_generate
bug fix generate script
2020-07-22 10:49:29 -04:00
Patrick Bareiss 219c2a68c7 converted detections to subtechniques 2020-07-22 11:01:06 +02:00
Patrick Bareiss a38b71f11d converted detections to subtechniques 2020-07-22 10:59:55 +02:00
Patrick Bareiss e7966e76b1 converted detections to subtechniques 2020-07-22 10:45:43 +02:00
Patrick Bareiss bd0e7ca2ba converted detections to subtechniques 2020-07-22 10:34:54 +02:00
Patrick Bareiss 5ceef308a7 bug fix generate script 2020-07-21 10:12:58 +02:00
Bhavin Patel 1822b485d7 Merge pull request #568 from splunk/newgcpk8podsearch
newgcpk8podsearch
2020-07-20 11:14:56 -07:00
Bhavin Patel 2d9eaf695f Merge branch 'develop' into newgcpk8podsearch 2020-07-20 10:47:42 -07:00
Bhavin Patel bb906c721a Update gcp_kubernetes_cluster_pod_scan_detection.yml
corrected how to implement
2020-07-20 10:47:18 -07:00
dependabot-preview[bot] 24c0354c3f Merge pull request #569 from splunk/dependabot/pip/identify-1.4.24 2020-07-19 18:37:19 +00:00
dependabot-preview[bot] 86e7b4f3b9 Bump identify from 1.4.23 to 1.4.24
Bumps [identify](https://github.com/chriskuehl/identify) from 1.4.23 to 1.4.24.
- [Release notes](https://github.com/chriskuehl/identify/releases)
- [Commits](https://github.com/chriskuehl/identify/compare/v1.4.23...v1.4.24)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-19 18:32:06 +00:00
Rod Soto ef98461e89 newgcpk8podsearch 2020-07-17 22:11:19 -04:00
dependabot-preview[bot] 7f95b60210 Merge pull request #566 from splunk/dependabot/pip/taxii2-client-2.2.1 2020-07-17 19:44:08 +00:00
dependabot-preview[bot] c767fe1cd8 Bump taxii2-client from 2.2.0 to 2.2.1
Bumps [taxii2-client](https://github.com/oasis-open/cti-taxii-client) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/oasis-open/cti-taxii-client/releases)
- [Changelog](https://github.com/oasis-open/cti-taxii-client/blob/master/CHANGES.txt)
- [Commits](https://github.com/oasis-open/cti-taxii-client/compare/v2.2.0...v2.2.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-17 19:37:50 +00:00
dependabot-preview[bot] cd86c0ccc7 Merge pull request #564 from splunk/dependabot/pip/simplejson-3.17.2 2020-07-16 18:51:40 +00:00
dependabot-preview[bot] 28b5150604 Bump simplejson from 3.17.0 to 3.17.2
Bumps [simplejson](https://github.com/simplejson/simplejson) from 3.17.0 to 3.17.2.
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](https://github.com/simplejson/simplejson/compare/v3.17.0...v3.17.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-07-16 18:46:24 +00:00
research bot 23cf6ae542 updating docs and package bits [ci skip] 2020-07-15 21:14:02 +00:00
Bhavin Patel a079a093b8 Merge pull request #563 from splunk/yet_another_map_bug
forgot to get rid of tdqm
v3.0.4
2020-07-15 13:59:40 -07:00
divious1 440fcfb3ae fixed print msg 2020-07-15 16:53:49 -04:00
divious1 217aabfe72 forgot to get rid of tdqm 2020-07-15 16:46:37 -04:00
Bhavin Patel 8ef987da5d Merge pull request #562 from splunk/mitre_map_bug
minor arg bug
2020-07-15 13:26:14 -07:00
divious1 a250cceed2 minor arg bug 2020-07-15 16:19:40 -04:00
dependabot-preview[bot] 9b08ad29c1 Merge pull request #560 from splunk/dependabot/pip/virtualenv-20.0.27 2020-07-15 18:56:17 +00:00
Jose Enrique Hernandez 6cd1b26d36 Merge branch 'develop' into dependabot/pip/virtualenv-20.0.27 2020-07-15 14:51:44 -04:00
Jose Enrique Hernandez 9c23451998 Merge pull request #561 from splunk/TR-49
updating spl and FP
2020-07-15 14:51:21 -04:00