 pyth0n1c
|
5d6ca3264c
|
Branch was auto-updated.
|
2022-03-15 09:57:06 -07:00 |
|
|
P4T12ICK
|
994e8b51d6
|
Updated detection testing
|
2022-03-15 17:45:33 +01:00 |
|
|
P4T12ICK
|
d169636e7f
|
Updated detection testing
|
2022-03-15 17:34:48 +01:00 |
|
|
P4T12ICK
|
459e2d3fd2
|
Updated detection testing
|
2022-03-15 15:46:51 +01:00 |
|
|
pyth0n1c
|
ddd3f7a9a7
|
Branch was auto-updated.
|
2022-03-14 14:16:15 -07:00 |
|
|
P4T12ICK
|
5dd13ea167
|
fix broken detections
|
2022-03-14 15:51:05 +01:00 |
|
|
P4T12ICK
|
ae00b4c948
|
Add pytest as separate CI workflow
|
2022-03-14 13:24:29 +01:00 |
|
|
P4T12ICK
|
eb5609fb3b
|
Add pytest as separate CI workflow
|
2022-03-14 13:07:01 +01:00 |
|
|
P4T12ICK
|
e6c8254ede
|
Added automaticc generation of finding report
|
2022-03-14 12:12:48 +01:00 |
|
|
P4T12ICK
|
10c25b2014
|
Refactored security content
|
2022-03-10 10:27:29 +01:00 |
|
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
|
pyth0n1c
|
adb636bc8d
|
Branch was auto-updated.
|
2022-03-04 12:21:27 -08:00 |
|
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
|
pyth0n1c
|
524d329bd9
|
Branch was auto-updated.
|
2022-03-04 09:34:02 -08:00 |
|
|
P4T12ICK
|
3131db9d8c
|
merged with develop
|
2022-03-03 14:18:47 +01:00 |
|
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
|
pyth0n1c
|
778323b03d
|
By default, if SSA detections have test files and not detection files or vice versa, they will print out an error but not generate an exception. For non-SSA detections, these will generate an error.
|
2022-03-02 13:04:29 -08:00 |
|
|
pyth0n1c
|
e4360db1a9
|
Adding code to find when test files have been orphaned. If a test file exists and does not have an associated detection file, it will be printed out and an error will be thrown. We already have support for the reverse direction - when a detection file exists and a test file does not. This will help keep the repo cleaner.
|
2022-03-01 16:47:34 -08:00 |
|
|
P4T12ICK
|
ded483ddf0
|
added validation
|
2022-02-28 14:50:31 +01:00 |
|
|
P4T12ICK
|
5b581bc959
|
added validation
|
2022-02-28 14:16:23 +01:00 |
|
|
P4T12ICK
|
3946110a92
|
added specs
|
2022-02-28 12:47:14 +01:00 |
|
|
P4T12ICK
|
3cd94faaf9
|
updated ci
|
2022-02-25 16:21:08 +01:00 |
|
|
P4T12ICK
|
26f835751a
|
integrated reporting
|
2022-02-25 15:21:25 +01:00 |
|
|
P4T12ICK
|
8cf8fc40ac
|
reporting integrated
|
2022-02-24 16:18:56 +01:00 |
|
|
P4T12ICK
|
8b32ec772f
|
new_content integrated
|
2022-02-24 12:35:20 +01:00 |
|
|
P4T12ICK
|
743701d542
|
docgen ready
|
2022-02-23 14:46:39 +01:00 |
|
|
P4T12ICK
|
bda23e1631
|
Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content
|
2022-02-22 18:40:52 +01:00 |
|
|
P4T12ICK
|
2cda47990b
|
doc_gen ready
|
2022-02-22 18:40:36 +01:00 |
|
|
pyth0n1c
|
f906d579d9
|
Branch was auto-updated.
|
2022-02-18 14:38:58 -08:00 |
|
|
pyth0n1c
|
46e0bb0a01
|
Added a timeout to the CVESSEARCH_API enrichment in doc_gen. Sometimes, this was causing doc_gen to freeze. Now, when the API is not working or is extremely slow and a request takes longer than 10 seconds, a descriptive error will be thrown and the process will exit with 1
|
2022-02-18 14:19:57 -08:00 |
|
|
pyth0n1c
|
09c54931af
|
Memoizing/caching a call to CVESSEARCH_API_URL. Gives a SIGNIFICANT speedup in docgen.
|
2022-02-18 13:36:09 -08:00 |
|
|
pyth0n1c
|
9fc009a44d
|
Removed:
SPLUNK_SECURITY_ESSENTIALS
SPLUNK_APP_FOR_AWS
from default app baseline.
They are not required
for testing as they just
provide some dashboards.
|
2022-02-18 11:17:21 -08:00 |
|
|
patel-bhavin
|
382c107298
|
adding response section to analytic stories conf
|
2022-02-17 16:02:43 -08:00 |
|
|
pyth0n1c
|
ba05264c80
|
Branch was auto-updated.
|
2022-02-17 11:42:02 -08:00 |
|
|
pyth0n1c
|
622b5af48b
|
Branch was auto-updated.
|
2022-02-17 11:00:56 -08:00 |
|
|
pyth0n1c
|
b36fbaea7b
|
Branch was auto-updated.
|
2022-02-17 11:00:54 -08:00 |
|
|
P4T12ICK
|
1ffb4bbc0a
|
wip doc_gen
|
2022-02-17 15:20:25 +01:00 |
|
|
P4T12ICK
|
14464f17a4
|
wip doc_gen
|
2022-02-16 17:01:48 +01:00 |
|
|
P4T12ICK
|
0c89faadd7
|
Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content
|
2022-02-16 16:08:16 +01:00 |
|
|
P4T12ICK
|
60ae79dde6
|
wip doc_gen
|
2022-02-16 15:34:59 +01:00 |
|
|
pyth0n1c
|
05898d1c72
|
Updated the test config used for github actions and the workflow to remove the use of the splunkbase username and password secrets. After this is merged, we can remove them from the repository. We will simply use the versions that we update in S3.
|
2022-02-15 15:43:36 -08:00 |
|
|
pyth0n1c
|
580dba242f
|
Added ability to Ctrl-C/SIGINT the testing process and have it gracefully finish. This stops the containers and writes out partial progress to the output file.
|
2022-02-15 15:37:17 -08:00 |
|
|
patel-bhavin
|
1c5961c4c5
|
condition for tactic and jinja field for risk
|
2022-02-15 13:45:08 -08:00 |
|
|
Lou Stella
|
95d060e135
|
Character sets are difficult
|
2022-02-15 13:52:01 -06:00 |
|
|
P4T12ICK
|
ceabbaad1f
|
updated github action
|
2022-02-15 10:03:48 +01:00 |
|
|
P4T12ICK
|
f47930004b
|
updated github action
|
2022-02-15 09:06:42 +01:00 |
|
|
P4T12ICK
|
f7f0b2712d
|
Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content
|
2022-02-14 16:48:08 +01:00 |
|
|
P4T12ICK
|
0b5b4e2388
|
generate API package working
|
2022-02-14 16:45:27 +01:00 |
|
|
d1vious
|
73ba128590
|
fixing duplicate lookups bug
|
2022-02-11 12:11:10 -05:00 |
|
|
pyth0n1c
|
4f0622a5aa
|
Update to latest Splunkbase Windows Sysmon
|
2022-02-10 16:24:17 -08:00 |
|