Commit Graph

8347 Commits

Author SHA1 Message Date
P4T12ICK e52c5627be test files changed 2020-11-16 14:41:38 +01:00
research bot 4873864495 updating docs and package bits [ci skip] 2020-11-13 20:27:19 +00:00
Ignacio Bermudez Corrales 869eea1924 Added required fields for all SSA detections 2020-11-13 10:27:29 -08:00
Ignacio Bermudez Corrales 9cc734c38d Find problems with declared SSA fields in detection file
Look for required_fields in tags
2020-11-13 09:32:19 -08:00
dependabot[bot] c5916e5e39 Merge pull request #924 from splunk/dependabot/pip/botocore-1.19.17 2020-11-13 14:16:27 +00:00
dependabot[bot] 87063ab3f4 Bump botocore from 1.19.16 to 1.19.17
Bumps [botocore](https://github.com/boto/botocore) from 1.19.16 to 1.19.17.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.16...1.19.17)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:12:39 +00:00
dependabot[bot] 09a53ac858 Merge pull request #925 from splunk/dependabot/pip/urllib3-1.26.2 2020-11-13 14:11:50 +00:00
dependabot[bot] c4d56ca596 Bump urllib3 from 1.26.1 to 1.26.2
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.1 to 1.26.2.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/master/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.1...1.26.2)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:07:53 +00:00
dependabot[bot] 48f4e53bab Merge pull request #923 from splunk/dependabot/pip/boto3-1.16.17 2020-11-13 14:07:18 +00:00
dependabot[bot] 3a8e95e49e Bump boto3 from 1.16.16 to 1.16.17
Bumps [boto3](https://github.com/boto/boto3) from 1.16.16 to 1.16.17.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.16...1.16.17)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-13 14:03:13 +00:00
Ignacio cbd3706b69 Merge pull request #922 from splunk/TR-293
Fixes for SSA 11/12/20
2020-11-12 15:37:00 -08:00
Ignacio Bermudez Corrales 3d88fe1b15 Fixes for SSA 11/12/20 v3.8.1 v3.9.0 2020-11-12 15:03:29 -08:00
bpatel 52d456fa33 detection update and scheduling 2020-11-12 13:51:55 -08:00
Bhavin Patel 398ee5f947 Merge pull request #843 from splunk/ransomwares3
Ransomwares3
2020-11-12 11:51:39 -08:00
Bhavin Patel 757941e42e Merge branch 'develop' into minor_mispelling 2020-11-12 11:49:40 -08:00
jzsplunk 85f6925d9b Merge pull request #920 from splunk/TR-290
Dowloads Humvee fat jar only if local checksum doesnt match repository latest
2020-11-12 11:46:05 -08:00
Ignacio Bermudez Corrales c79a1b06c6 Dowloads Humvee fat jar only if local checksum doesnt match repository latest 2020-11-12 11:29:47 -08:00
Jose Enrique Hernandez 042b0c97e6 Merge pull request #918 from splunk/dependabot/pip/requests-2.25.0
Bump requests from 2.24.0 to 2.25.0
2020-11-12 13:55:28 -05:00
Jose Enrique Hernandez 78840e6d0a Merge branch 'develop' into dependabot/pip/requests-2.25.0 2020-11-12 13:55:21 -05:00
Jose Enrique Hernandez 8c4dfdaac7 Merge pull request #855 from inspired/mbjerkeland-develop
Detections for the new MITRE Network Matrix
2020-11-12 11:08:23 -05:00
Jose Enrique Hernandez 70586e7916 Merge branch 'develop' into mbjerkeland-develop 2020-11-12 10:51:37 -05:00
Jose Enrique Hernandez 899df941e4 Merge branch 'develop' into detection_testing_part_one 2020-11-12 10:51:21 -05:00
dependabot[bot] 2c36edb66f Bump requests from 2.24.0 to 2.25.0
Bumps [requests](https://github.com/psf/requests) from 2.24.0 to 2.25.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/master/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.24.0...v2.25.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-12 15:18:24 +00:00
dependabot[bot] 4c45add964 Merge pull request #917 from splunk/dependabot/pip/botocore-1.19.16 2020-11-12 15:17:35 +00:00
Jose Enrique Hernandez a874999185 Merge branch 'develop' into detection_testing_part_one 2020-11-12 10:16:47 -05:00
P4T12ICK ae843bc38c Merge branch 'develop' into mbjerkeland-develop 2020-11-12 16:15:07 +01:00
dependabot[bot] 908350584a Bump botocore from 1.19.15 to 1.19.16
Bumps [botocore](https://github.com/boto/botocore) from 1.19.15 to 1.19.16.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.15...1.19.16)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-12 15:01:28 +00:00
dependabot[bot] 2d30b68407 Merge pull request #916 from splunk/dependabot/pip/boto3-1.16.16 2020-11-12 15:00:19 +00:00
P4T12ICK 0bcafe29bc Merge branch 'develop' into mbjerkeland-develop 2020-11-12 15:35:38 +01:00
dependabot[bot] 7ba9a7d3d4 Bump boto3 from 1.16.15 to 1.16.16
Bumps [boto3](https://github.com/boto/boto3) from 1.16.15 to 1.16.16.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.15...1.16.16)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-12 14:33:55 +00:00
dependabot[bot] f07c3f9147 Merge pull request #919 from splunk/dependabot/pip/urllib3-1.26.1 2020-11-12 14:33:01 +00:00
dependabot[bot] 4d12fae7c0 Bump urllib3 from 1.26.0 to 1.26.1
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.0 to 1.26.1.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/master/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.0...1.26.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-12 14:02:33 +00:00
P4T12ICK 3e1b445765 Update detect_traffic_mirroring.yml 2020-11-12 11:58:04 +01:00
P4T12ICK 077de7769a Update detect_ipv6_network_infrastructure_threats.yml 2020-11-12 11:50:34 +01:00
Jose Enrique Hernandez 3e9513f4b8 Merge branch 'develop' into develop 2020-11-11 22:04:16 -05:00
Jose Enrique Hernandez 4acc8c3efb Merge branch 'develop' into mbjerkeland-develop 2020-11-11 22:03:44 -05:00
Jose Enrique Hernandez 5b06532f3e Merge pull request #892 from splunk/TR-249
SSA validate test timeout
2020-11-11 21:58:54 -05:00
Jose Enrique Hernandez c26ba95347 Merge branch 'develop' into TR-249 2020-11-11 21:58:44 -05:00
Jose Enrique Hernandez ffae539c00 Merge pull request #817 from splunk/TR162
Tr162
2020-11-11 20:39:02 -05:00
Jose Enrique Hernandez 2a23b6e764 Merge branch 'develop' into TR-249 2020-11-11 20:35:00 -05:00
bpatel 3650ca926d Merge branch 'ransomwares3' of https://github.com/splunk/security-content into ransomwares3 2020-11-11 16:45:57 -08:00
bpatel 46143f262d updating text 2020-11-11 16:45:41 -08:00
Bhavin Patel e185ca89ba Merge branch 'develop' into ransomwares3 2020-11-11 16:36:34 -08:00
bpatel 8112beb887 asset type update 2020-11-11 16:34:55 -08:00
bpatel 9685be48a3 final detection 2020-11-11 16:33:20 -08:00
Bhavin Patel 86ed420e3a Merge branch 'develop' into minor_mispelling 2020-11-11 15:44:57 -08:00
Xiao Lin e7e659e882 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-11 23:25:18 +00:00
Bhavin Patel 5a590068f8 Merge pull request #882 from splunk/issue_#850
issue_#850
2020-11-11 12:54:34 -08:00
divious1 def37e1249 removed the converter since we do not use it anymore and updated reqs to avoid errors 2020-11-11 15:32:53 -05:00
Jose Enrique Hernandez cdb274547f Merge pull request #900 from splunk/ssa-coverage
SSA min coverage for CI
2020-11-11 15:03:18 -05:00