6c4516730d
Updated tests to remove
...
update_timestamp and modified
testing code to always update
timestamp. This will cause some issues
as not all sourcetypes are supported, yet.
We will work to support them all before
merging these changes to develop.
2022-04-07 15:44:24 -07:00
48cb17f56d
Merge pull request #2153 from splunk/springshowers
...
Spring for Shells
2022-04-06 14:47:14 -07:00
2c8fa42b98
minor updates and gitignore
2022-04-06 14:03:06 -07:00
f457ffed90
Update java_writing_jsp_file.yml
2022-04-06 13:47:38 -06:00
9f370036f5
Update web_spring4shell_http_request_class_module.yml
2022-04-06 10:26:23 -06:00
8649a7c990
Web Spring4Shell HTTP Request Class Module
2022-04-06 09:58:24 -06:00
ebb920f47d
rename
2022-04-06 08:39:34 -06:00
bdfa26a0ed
Branch was auto-updated.
2022-04-05 14:52:17 -07:00
c5528e72ea
Merge pull request #2113 from splunk/InDirectToVideo
...
LOLBin
2022-04-05 14:51:59 -07:00
bc2ab62ee8
typo
2022-04-05 15:41:35 -06:00
a03b6719de
function and CVE-2022-22965 fixes
2022-04-05 15:36:38 -06:00
082d15ac3d
Updating paths to dataset for testing
2022-04-05 14:14:42 -07:00
39c8ab5e12
Branch was auto-updated.
2022-04-05 13:56:48 -07:00
1b5deca353
Merge pull request #2150 from splunk/hermeticwipertag
...
Hermeticwipertag
2022-04-05 13:56:21 -07:00
fd5a14cae3
Reverting changes that we made to the
...
macros file.
2022-04-05 13:37:51 -07:00
9638205131
Fixed paths to attack data sets
...
and updated required_fields
format to matrch the rest of the
detections in the repo.
2022-04-05 13:36:36 -07:00
ec2c1bff73
Branch was auto-updated.
2022-04-05 13:12:38 -07:00
4503340635
Branch was auto-updated.
2022-04-05 13:12:33 -07:00
0f0bac3789
Merge pull request #2151 from splunk/FixDetectionTestingWorkflowTypo
...
Fix Detection Testing YML
2022-04-05 13:12:05 -07:00
0da666fc10
nix write jsp
2022-04-05 12:38:53 -06:00
6ebca18614
Spring4Shell
2022-04-05 11:53:23 -06:00
c7e1a04873
Update windows_indirect_command_execution_via_forfiles.yml
...
Updated dataset. Need to update again after dataset is merged from branch into main of attack_data
2022-04-05 10:21:42 -07:00
30ff35bcd8
Update windows_indirect_command_execution_via_pcalua.yml
...
Updated dataset link - need to update again after the dataset is merged from branch into main of attack_data
2022-04-05 10:20:58 -07:00
b385ef2ead
Update windows_indirect_command_execution_via_pcalua.yml
...
Adding second reference for pcalua.exe
2022-04-05 10:15:26 -07:00
0cde033ac1
Update windows_indirect_command_execution_via_pcalua.yml
...
Added UUID
2022-04-05 10:13:20 -07:00
71fe3edea7
Update windows_indirect_command_execution_via_forfiles.yml
...
Added UUID
2022-04-05 10:12:45 -07:00
90424b7e0c
Update windows_indirect_command_execution_via_forfiles.yml
...
Updated description info on forfiles detection yaml
2022-04-05 10:08:49 -07:00
2d2fdb6be0
Update windows_indirect_command_execution_via_pcalua.yml
...
Updated description in YML
2022-04-05 10:05:21 -07:00
90abd35b92
Previously had uses and run keys in the
...
same step. That caused all jobs
to fail at parsing the workflow yml.
2022-04-05 09:40:41 -07:00
901a73aa5f
secondbatchwinprivesctaghermeticwiper
2022-04-05 08:02:47 -07:00
b3cd632c29
hermeticwipertagswindowsprivesc
2022-04-05 07:55:03 -07:00
9e79d31e66
Merge pull request #2131 from splunk/mac_os_detections
...
plutil mac os detection
2022-04-05 15:37:48 +02:00
eb0cbac38e
Branch was auto-updated.
2022-04-04 16:57:13 -07:00
16175e510f
Merge pull request #2149 from splunk/NightlyDetectionTestingS3Artifacts
...
Nightly detection testing s3 artifacts
2022-04-04 19:56:56 -04:00
eafc7f7867
Branch was auto-updated.
2022-04-04 16:39:04 -07:00
3e2136f784
Branch was auto-updated.
2022-04-04 16:38:59 -07:00
273367a2e0
Merge pull request #2148 from splunk/IncreasePostWidth
...
Increased the width of research.splunk.com posts
2022-04-04 19:38:41 -04:00
93176ca83b
Updated S3 upload code to proper bucket path
2022-04-04 15:52:49 -07:00
8abf0592fc
Converting string to fstring
2022-04-04 15:32:09 -07:00
0209621f81
Code to generate and upload
...
pass rate badge after completion
of a scheduled run. Also uploads
the summary_test_results.json file
for use on research.splunk.com
2022-04-04 15:29:28 -07:00
a01e3c8734
Increased the width of the posts
...
for all of the content. This reduces
the extremely large whitespace
columns on the sides of all the
content and is a more efficient
use of space.
2022-04-04 13:38:50 -07:00
2287e6597f
Branch was auto-updated.
2022-04-04 12:41:37 -07:00
2a054936cc
Merge pull request #2074 from splunk/TR_1550_Kerberos_Coverage_2
...
Active Directory Kerberos Attacks - Part 2
2022-04-04 12:41:17 -07:00
665c25a728
Update kerberos_tgt_request_using_rc4_encryption.yml
2022-04-04 12:04:55 -07:00
5caec4b36b
updating docs and package bits [ci skip]
2022-04-04 18:15:20 +00:00
067efc3485
Branch was auto-updated.
2022-04-04 09:25:57 -07:00
6046907270
Branch was auto-updated.
2022-04-04 09:25:55 -07:00
f6f5db9ade
Merge pull request #2147 from splunk/descp_fix
...
descp_fix
2022-04-04 18:25:34 +02:00
3ca03bc7fa
descp_fix
2022-04-04 17:11:12 +02:00
ea9969a6f1
Branch was auto-updated.
2022-04-04 05:07:04 -07:00
pyth0n1c