Commit Graph

2921 Commits

Author SHA1 Message Date
Ignacio 2f8ea360f4 Merge branch 'develop' into TR162 2020-11-06 08:59:31 -08:00
Ignacio 52898f78aa Merge pull request #895 from splunk/TR-281
Selecting only necessary fields to avoid serialization problem on DSP
2020-11-06 08:46:17 -08:00
Ignacio 049d9da7a3 Merge branch 'develop' into TR-281 2020-11-05 19:22:36 -08:00
Ignacio Bermudez Corrales 10917d4c8d Selecting only necessary fields to avoid serialization problem on DSP 2020-11-05 19:19:50 -08:00
dependabot[bot] ef2c32d06a Merge pull request #887 from splunk/dependabot/pip/botocore-1.19.11 2020-11-06 02:32:40 +00:00
Jose Enrique Hernandez 44b5080384 Merge branch 'develop' into dependabot/pip/botocore-1.19.11 2020-11-05 19:06:48 -05:00
Jose Enrique Hernandez 10bdaa537e Merge pull request #888 from splunk/dependabot/pip/boto3-1.16.11
Bump boto3 from 1.16.10 to 1.16.11
2020-11-05 19:05:34 -05:00
Jose Enrique Hernandez dd0704e323 Merge pull request #889 from splunk/dependabot/pip/attrs-20.3.0
Bump attrs from 20.2.0 to 20.3.0
2020-11-05 19:05:07 -05:00
Jose Enrique Hernandez 4fe445695e Merge branch 'develop' into dependabot/pip/attrs-20.3.0 2020-11-05 17:52:46 -05:00
Ignacio cf3bce9ca7 Merge pull request #891 from splunk/TR-254-new
using artifactory api to retrieve latest humvee jar
2020-11-05 12:32:40 -08:00
Ignacio Bermudez Corrales c57016f99d using artifactory api to retrieve latest humvee jar 2020-11-05 11:46:46 -08:00
Xiao Lin 811ba865fa change test files to use ssa prefix 2020-11-05 17:36:30 +00:00
Xiao Lin fa2ca47546 test yml 2020-11-05 17:03:54 +00:00
Xiao Lin 4f581f419d add 3 underscore 2020-11-05 17:01:20 +00:00
Xiao Lin 640cadef7c use ssa as prefix 2020-11-05 16:59:13 +00:00
dependabot[bot] 17c2951b92 Bump attrs from 20.2.0 to 20.3.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.2.0 to 20.3.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.2.0...20.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:58 +00:00
dependabot[bot] cbc0fd5aa3 Bump boto3 from 1.16.10 to 1.16.11
Bumps [boto3](https://github.com/boto/boto3) from 1.16.10 to 1.16.11.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.10...1.16.11)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:57 +00:00
dependabot[bot] 7234237741 Bump botocore from 1.19.10 to 1.19.11
Bumps [botocore](https://github.com/boto/botocore) from 1.19.10 to 1.19.11.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.10...1.19.11)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:55 +00:00
Xiao Lin 04f8db150a Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 22:40:23 +00:00
Bhavin Patel 11bef0bbc6 Merge pull request #823 from splunk/adding_api_checks
adding smoke test for master api
2020-11-04 14:16:58 -08:00
Bhavin Patel 8e317c3c00 Merge branch 'develop' into adding_api_checks 2020-11-04 14:09:15 -08:00
Jose Enrique Hernandez 74e25172e4 Merge pull request #854 from splunk/ssa-coverage
script that shows the coverage for ssa detections
2020-11-04 16:51:26 -05:00
jzsplunk 24292ea2c8 Merge pull request #877 from splunk/misko_apply_set_stolen_credentials
Applying and setting stolen credentials - detections via …
2020-11-04 12:47:25 -08:00
Ignacio a348cf6f0b Merge branch 'develop' into ssa-coverage 2020-11-04 11:48:41 -08:00
Jose Enrique Hernandez db0e7bd862 Merge branch 'develop' into misko_apply_set_stolen_credentials 2020-11-04 14:40:49 -05:00
Jose Enrique Hernandez f4f86b2aa1 Merge pull request #881 from splunk/TR-275
Changed cicd image to use cached repository
2020-11-04 14:30:36 -05:00
Jose Enrique Hernandez b925f68f2f Merge branch 'develop' into TR-275 2020-11-04 14:22:37 -05:00
Ignacio Bermudez Corrales 6f74b00b43 Changed cicd image to use cached repository
Tested locally with gitlab-runner behind VPN.
2020-11-04 11:19:17 -08:00
Jose Enrique Hernandez 907cca4ff8 Merge branch 'develop' into ssa-coverage 2020-11-04 14:06:46 -05:00
Jose Enrique Hernandez c7b8e7166f Merge pull request #816 from splunk/misko_cred_extract_APIs_and_Filenames
Credential Extraction detected via common exploit modules ...
2020-11-04 14:03:02 -05:00
Jose Enrique Hernandez 546ddff4c7 Merge branch 'develop' into ssa-coverage 2020-11-04 13:59:26 -05:00
Jose Enrique Hernandez 3a0bd10c23 Merge pull request #864 from splunk/new_test_file_format
New test file format
2020-11-04 13:58:14 -05:00
Jose Enrique Hernandez 7391a565d2 Merge pull request #856 from splunk/remove_commuunity_branch
removed community api
2020-11-04 13:57:40 -05:00
jzsplunk cfadee1d7a Merge branch 'develop' into misko_apply_set_stolen_credentials 2020-11-04 10:15:19 -08:00
Jose Enrique Hernandez 7281215fc3 Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-11-04 13:14:03 -05:00
Bhavin Patel bea2c6292e Merge pull request #862 from splunk/kubernetes_gcp_detect_most_active_service_accounts_by_pod-minor-bug-fix
Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml
2020-11-04 10:12:10 -08:00
jzsplunk 7434975199 Merge branch 'develop' into misko_apply_set_stolen_credentials 2020-11-04 10:03:17 -08:00
Stanislav Miskovic b46acc0d4f Fix SPL in the Mimikatz module detection 2020-11-04 09:28:38 -08:00
Jose Enrique Hernandez c25465c174 Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-11-04 12:26:48 -05:00
P4T12ICK c0b6899745 Merge branch 'develop' into remove_commuunity_branch 2020-11-04 17:58:44 +01:00
P4T12ICK ac27485034 Merge branch 'develop' into new_test_file_format 2020-11-04 17:58:26 +01:00
Jose Enrique Hernandez 5d6054f743 Merge pull request #838 from splunk/TR-251
fixed test and detection - unusual location
2020-11-04 11:56:55 -05:00
Jose Enrique Hernandez 6ac43cd591 Merge branch 'develop' into TR-251 2020-11-04 11:34:57 -05:00
jzsplunk 18c66b9959 Merge branch 'develop' into misko_apply_set_stolen_credentials 2020-11-04 08:29:58 -08:00
Jose Enrique Hernandez 6e32a81527 Merge branch 'develop' into remove_commuunity_branch 2020-11-04 11:15:11 -05:00
Jose Enrique Hernandez e5daa666d9 Merge pull request #852 from splunk/dependabot/pip/cryptography-3.2.1
Bump cryptography from 3.2 to 3.2.1
2020-11-04 11:14:53 -05:00
dependabot[bot] 0993dbbb8c Bump cryptography from 3.2 to 3.2.1
Bumps [cryptography](https://github.com/pyca/cryptography) from 3.2 to 3.2.1.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/3.2...3.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-04 16:14:47 +00:00
Jose Enrique Hernandez 85cb5103f6 Merge pull request #857 from splunk/dependabot/pip/pytest-6.1.2
Bump pytest from 6.1.1 to 6.1.2
2020-11-04 11:14:32 -05:00
Jose Enrique Hernandez f64b8c1f6c Merge branch 'develop' into dependabot/pip/pytest-6.1.2 2020-11-04 11:14:25 -05:00
Jose Enrique Hernandez 1a37ae49fa Merge pull request #860 from splunk/dependabot/pip/importlib-resources-3.3.0
Bump importlib-resources from 3.2.0 to 3.3.0
2020-11-04 11:14:12 -05:00