Commit Graph

6349 Commits

Author SHA1 Message Date
tcontreras 3d390bc1d6 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach 2021-04-19 16:41:30 +02:00
tcontreras 8f80520df7 spear 2021-04-19 16:40:53 +02:00
github-actions[bot] 31f285a4b0 Branch was auto-updated. 2021-04-15 19:10:11 +00:00
Jose Enrique Hernandez 85220f56bf Merge pull request #1335 from splunk/saaws_appinspect
remove configs that are not needed by saaws
2021-04-15 15:09:53 -04:00
bpatel cc3d3cd7e2 remove configs that are not needed by saaws 2021-04-15 12:00:29 -07:00
tcontreras 07e5528918 Merge branch 'sphear_attach' of github.com:splunk/security_content into sphear_attach 2021-04-15 19:40:46 +02:00
tcontreras 7a0d9be5a5 spear_update 2021-04-15 19:39:21 +02:00
root 8cd49a3f7a Added detection testing service results inOffice Document Executing Macro Code 2021-04-15 08:25:53 +00:00
tccontre 0fa575ad4a Delete office_application_spawned_cmd_shell.test.yml 2021-04-15 09:46:20 +02:00
tccontre e85860be6c Delete office_application_spawned_cmd_shell.yml 2021-04-15 09:46:00 +02:00
github-actions[bot] 995bae1d0e Branch was auto-updated. 2021-04-15 07:31:06 +00:00
P4T12ICK 274e5f1b43 Merge pull request #1334 from splunk/fix_malicious_ps_as_service
Added various ways to execute powershell, ...
2021-04-15 09:30:41 +02:00
root a0914ddcdd Added detection testing service results inMalicious Powershell Executed As A Service 2021-04-15 07:23:08 +00:00
Stanislav Miskovic 62ed90ccbd Added various ways to execute powershell, made match of the powershell executable mandatory, added that execution must be followed by one of the hidding or no-exit options. 2021-04-14 22:46:38 -07:00
github-actions[bot] beb49969cf Branch was auto-updated. 2021-04-14 19:27:09 +00:00
Bhavin Patel 65b9300449 Merge pull request #1325 from splunk/fixing_deployments
Fixing deployments bug
2021-04-14 12:26:51 -07:00
bpatel 3d2a90f694 merge with develop 2021-04-14 12:18:36 -07:00
bpatel fa72657d67 conflicts 2021-04-14 11:13:40 -07:00
root 55885cf24b Added detection testing service results inOffice Document Creating Schedule Task 2021-04-14 17:05:09 +00:00
root ac1b96681e Added detection testing service results inOffice Application Spawned CMD Shell 2021-04-14 16:35:28 +00:00
root b8092f7981 Added detection testing service results inOffice Application Spawn rundll32 process 2021-04-14 16:12:49 +00:00
tcontreras 71b663937e spear_detections 2021-04-14 16:00:16 +02:00
P4T12ICK 4abef2023b Merge pull request #1328 from splunk/aws_iam_detections
New AWS detection
2021-04-14 13:30:19 +02:00
root 884fb57647 Added detection testing service results inAWS Excessive Security Scanning 2021-04-14 11:25:51 +00:00
github-actions[bot] d59baf9915 Branch was auto-updated. 2021-04-14 11:06:20 +00:00
P4T12ICK a67d72e419 Merge pull request #1326 from splunk/test_batch_fork
detection service: update to package  folder
2021-04-14 13:05:51 +02:00
P4T12ICK f2515576aa Merge branch 'test_batch_fork' of github.com:splunk/security-content into test_batch_fork 2021-04-14 13:00:31 +02:00
P4T12ICK f0ae0ed41f small improvements 2021-04-14 13:00:14 +02:00
root 04152c8ef3 Added detection testing service results inMalicious Powershell Executed As A Service 2021-04-14 10:55:27 +00:00
bpatel c6803f1a88 remove print 2021-04-13 14:40:44 -07:00
github-actions[bot] 396e5fa928 Branch was auto-updated. 2021-04-13 17:34:15 +00:00
github-actions[bot] 291406676d Branch was auto-updated. 2021-04-13 17:34:06 +00:00
github-actions[bot] c96368308c Branch was auto-updated. 2021-04-13 17:34:04 +00:00
mvelazco 624437c575 Merge pull request #1324 from splunk/remove_ui_saaws
remove ui and app is not visible
2021-04-13 10:33:43 -07:00
bpatel 0e50d0379f testing 2021-04-13 10:23:35 -07:00
bpatel 52312f2b47 Merge branch 'test_batch_fork' of github.com:splunk/security_content into test_batch_fork 2021-04-13 09:52:00 -07:00
bpatel 990d9b263d adding product flag 2021-04-13 09:51:47 -07:00
P4T12ICK 1ab072c735 New AWS detection 2021-04-13 16:29:09 +02:00
github-actions[bot] 4a0ca54c9f Branch was auto-updated. 2021-04-13 09:19:23 +00:00
github-actions[bot] f3e78bc8c6 Branch was auto-updated. 2021-04-13 09:19:22 +00:00
github-actions[bot] a3ef19de4f Branch was auto-updated. 2021-04-13 09:19:17 +00:00
P4T12ICK ed4fc5864f Merge pull request #1327 from splunk/ssa_improved_testing
Ssa improved testing
2021-04-13 11:18:58 +02:00
P4T12ICK 33638d3b94 bug fixes 2021-04-13 10:20:29 +02:00
P4T12ICK 4235b117cd bug fixes 2021-04-13 10:05:14 +02:00
P4T12ICK c5d9250091 bug fixes 2021-04-13 10:00:31 +02:00
P4T12ICK b597a6f226 bug fixes 2021-04-13 09:08:34 +02:00
bpatel 5c70cf31e6 update to package folder 2021-04-12 15:49:49 -07:00
divious1 4f71b64d2b fixing merge conflicts 2021-04-12 18:06:42 -04:00
divious1 3450f5a6b0 fixing bug with deployment where escu package has notables off by default 2021-04-12 18:00:59 -04:00
bpatel 8461aef53b update build package name 2021-04-12 14:37:25 -07:00