admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
P4T12ICK ff910fa590 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 10:38:50 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
inspired a9a17dee87 Merge branch 'develop' into mbjerkeland-develop 2020-11-09 10:17:58 +01:00
Mikael Bjerkeland fb0398fafb Added test 2020-11-09 10:12:52 +01:00
Detection Testing Service fbccb2412c Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:51:53 +00:00
root ffb6fb5409 Added detection testing service results inCommon Ransomware Notes 2020-11-09 08:51:52 +00:00
Detection Testing Service 69d8c00af3 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:43:18 +00:00
root ede365c015 Added detection testing service results inCommon Ransomware Extensions 2020-11-09 08:43:16 +00:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
P4T12ICK b25ef1a4cb ransomware extension 2020-11-09 09:24:14 +01:00
Rod Soto f8a131528d widowswsecuritysamsearch 2020-11-08 11:30:34 -05:00
Rod Soto e21455a145 fixnamedaddedantispyware 2020-11-08 11:10:49 -05:00
Rod Soto 2fd9f07c75 winconhostryuksearch 2020-11-08 10:57:02 -05:00
Rod Soto 7af33cfd4f ryuktestfilestestfile 2020-11-08 10:27:03 -05:00
Stanislav Miskovic fbb5ee4c7f Reconnaissance - adding detections for AD infrastructure, network connectivity, computers, domains, processes, services, registry, shares, etc. 2020-11-06 18:15:45 -08:00
divious1 026bb228a0 Merge branch 'ryuk-story' of github.com:splunk/security-content into ryuk-story 2020-11-06 19:08:00 -05:00
divious1 2d37dc2e26 fixed validation errors 2020-11-06 19:07:54 -05:00
divious1 2ecead4232 added additional checks to validate 2020-11-06 18:32:56 -05:00
Jose Enrique Hernandez b6fe73df7d Merge branch 'develop' into ryuk-story 2020-11-06 18:03:20 -05:00
Stanislav Miskovic 6eadeb857b Fix: Slip in renaming of tests 2020-11-06 15:01:54 -08:00
divious1 301c13f7fa new detections 2020-11-06 17:34:40 -05:00
bpatel f786d10f41 fixes 2020-11-06 13:50:51 -08:00
Ignacio c1c3923941 Merge branch 'develop' into issue_#850 2020-11-06 13:06:59 -08:00
Ignacio Bermudez Corrales c1f56e36f1 Showing number of passed tests in info, since it was confusing 2020-11-06 12:48:46 -08:00
Ignacio Bermudez Corrales ebd7e678a1 Adding min coverage 100% for SSA detections 2020-11-06 12:19:19 -08:00
Stanislav Miskovic 391bb12781 Fix: File names of recon and use detections 2020-11-06 11:48:29 -08:00
Ignacio Bermudez Corrales 26d787daa2 support for types, and min-coverage testing with throwing error code for CI 2020-11-06 11:38:57 -08:00
miskoSplunk 3ef46f17f7 Merge branch 'develop' into misko_recon_use_cases 2020-11-06 11:09:18 -08:00
Jose Enrique Hernandez 884372729c Merge branch 'develop' into dependabot/pip/botocore-1.19.12 2020-11-06 14:02:48 -05:00
Jose Enrique Hernandez 05eef5af56 Merge pull request #894 from splunk/dependabot_auto_merges 
specific token that requires github repo access otherwise auto merges…
 2020-11-06 14:02:36 -05:00
Jose Enrique Hernandez d14703fa3c Merge branch 'develop' into dependabot_auto_merges 2020-11-06 13:57:58 -05:00
Ignacio Bermudez Corrales afe64bdb3e detection/experimental folder for untested detections 2020-11-06 10:37:11 -08:00
Jose Enrique Hernandez 15bcf0bde3 Merge branch 'develop' into ryuk-story 2020-11-06 12:36:01 -05:00
divious1 77af8684bc ryuk story and detections 2020-11-06 12:32:48 -05:00
Ignacio 2f8ea360f4 Merge branch 'develop' into TR162 2020-11-06 08:59:31 -08:00
Ignacio 6459b1f637 Merge branch 'develop' into issue_#850 2020-11-06 08:58:51 -08:00
Ignacio 9c3cbf193b Merge branch 'develop' into detection_testing_part_one 2020-11-06 08:58:12 -08:00
Ignacio c3398357d7 Merge branch 'develop' into misko_recon_use_cases 2020-11-06 08:54:25 -08:00
Ignacio 52898f78aa Merge pull request #895 from splunk/TR-281 
Selecting only necessary fields to avoid serialization problem on DSP
 2020-11-06 08:46:17 -08:00
dependabot[bot] ac7d92eda1 Bump botocore from 1.19.11 to 1.19.12 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.11 to 1.19.12.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.11...1.19.12)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-06 14:03:33 +00:00
root 39c6a6c1e8 Added detection testing service results inBatch File Write to System32 2020-11-06 12:58:46 +00:00
Detection Testing Service afc2ee1777 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-06 12:44:39 +00:00
root 3420a755d0 Added detection testing service results inAttempt To Stop Security Service 2020-11-06 12:44:38 +00:00
P4T12ICK 85f349668c new detection testing file 2020-11-06 13:43:49 +01:00
P4T12ICK ee59a8150b new test file 2020-11-06 13:26:45 +01:00
Stanislav Miskovic b988641071 Reconnaissance and access to accounts groups and policies via Mimikatz and PowerSploit modules 2020-11-05 23:10:53 -08:00
Ignacio 049d9da7a3 Merge branch 'develop' into TR-281 2020-11-05 19:22:36 -08:00
Ignacio Bermudez Corrales 10917d4c8d Selecting only necessary fields to avoid serialization problem on DSP 2020-11-05 19:19:50 -08:00
Stanislav Miskovic 9b5ccc2f93 Adding Reconnaissance of Credential Stores and Services via Mimikatz modules 2020-11-05 19:12:04 -08:00