Commit Graph

8347 Commits

Author SHA1 Message Date
Jose Enrique Hernandez 94e73720b4 Merge branch 'develop' into dependabot_auto_merges 2020-11-05 21:43:23 -05:00
divious1 71abe0338c specific token that requires github repo access otherwise auto merges fail 2020-11-05 21:42:10 -05:00
dependabot[bot] ef2c32d06a Merge pull request #887 from splunk/dependabot/pip/botocore-1.19.11 2020-11-06 02:32:40 +00:00
Shannon Davis 098aa9019a mods 2020-11-06 11:08:38 +11:00
Jose Enrique Hernandez 44b5080384 Merge branch 'develop' into dependabot/pip/botocore-1.19.11 2020-11-05 19:06:48 -05:00
Jose Enrique Hernandez 10bdaa537e Merge pull request #888 from splunk/dependabot/pip/boto3-1.16.11
Bump boto3 from 1.16.10 to 1.16.11
2020-11-05 19:05:34 -05:00
Jose Enrique Hernandez dd0704e323 Merge pull request #889 from splunk/dependabot/pip/attrs-20.3.0
Bump attrs from 20.2.0 to 20.3.0
2020-11-05 19:05:07 -05:00
bpatel 4d87173809 detection updates 2020-11-05 16:04:50 -08:00
miskoSplunk 229391234d Merge branch 'develop' into misko_credential_probing 2020-11-05 16:00:56 -08:00
Shannon Davis 1ab400a565 mods 2020-11-06 10:57:35 +11:00
davisshannon 329c2e59e2 Merge pull request #6 from splunk/develop
update
2020-11-06 10:53:29 +11:00
Ignacio Bermudez Corrales ee80e0c09d added timeout 2020-11-05 15:31:59 -08:00
Jose Enrique Hernandez 4fe445695e Merge branch 'develop' into dependabot/pip/attrs-20.3.0 2020-11-05 17:52:46 -05:00
Bhavin Patel f6566e39dc Merge branch 'develop' into ransomwares3 2020-11-05 13:04:35 -08:00
Ignacio cf3bce9ca7 Merge pull request #891 from splunk/TR-254-new
using artifactory api to retrieve latest humvee jar
2020-11-05 12:32:40 -08:00
Ignacio Bermudez Corrales c57016f99d using artifactory api to retrieve latest humvee jar 2020-11-05 11:46:46 -08:00
root de839bc3b8 Added detection testing service results inDetect New Local Admin account 2020-11-05 18:15:30 +00:00
P4T12ICK 608af0ae98 bug fix 2020-11-05 18:58:28 +01:00
Stanislav Miskovic 5e845f4b3d Probing access and credential strength with stolen credentials 2020-11-05 09:46:23 -08:00
Xiao Lin 811ba865fa change test files to use ssa prefix 2020-11-05 17:36:30 +00:00
Xiao Lin fa2ca47546 test yml 2020-11-05 17:03:54 +00:00
Xiao Lin 4f581f419d add 3 underscore 2020-11-05 17:01:20 +00:00
Xiao Lin 640cadef7c use ssa as prefix 2020-11-05 16:59:13 +00:00
P4T12ICK 0bb7df59f5 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-05 17:40:48 +01:00
P4T12ICK e46b37300f bug fix in detection 2020-11-05 17:40:31 +01:00
dependabot[bot] 17c2951b92 Bump attrs from 20.2.0 to 20.3.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 20.2.0 to 20.3.0.
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-attrs/attrs/compare/20.2.0...20.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:58 +00:00
dependabot[bot] cbc0fd5aa3 Bump boto3 from 1.16.10 to 1.16.11
Bumps [boto3](https://github.com/boto/boto3) from 1.16.10 to 1.16.11.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.10...1.16.11)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:57 +00:00
dependabot[bot] 7234237741 Bump botocore from 1.19.10 to 1.19.11
Bumps [botocore](https://github.com/boto/botocore) from 1.19.10 to 1.19.11.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.10...1.19.11)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-05 14:03:55 +00:00
Detection Testing Service 3de3e6c8ab Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-05 13:20:33 +00:00
root c396e43995 Added detection testing service results inKerberoasting spn request with RC4 encryption 2020-11-05 13:20:32 +00:00
root a81ae920af Added detection testing service results inDetect Activity Related to Pass the Hash Attacks 2020-11-05 13:09:41 +00:00
Mikael Bjerkeland 7d0ddb28e9 Reduce FP 2020-11-05 12:40:19 +01:00
Detection Testing Service 59c9b9bcb9 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-05 10:20:59 +00:00
root e29ebc6d92 Added detection testing service results inDetect Credential Dumping through LSASS access 2020-11-05 10:20:58 +00:00
root 6af70e41b7 Added detection testing service results inCreate Remote Thread into LSASS 2020-11-05 10:11:51 +00:00
P4T12ICK 0930c6e7ae Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-05 10:42:12 +01:00
P4T12ICK 25672136fd improvements detection testing service 2020-11-05 10:41:42 +01:00
root 054fa8ca3b Added detection testing service results inAccess LSASS Memory for Dump Creation 2020-11-05 08:46:55 +00:00
P4T12ICK 8a66f8e175 changed macro 2020-11-05 09:18:37 +01:00
jzsplunk 76fc296d43 Merge branch 'develop' into mbjerkeland-develop 2020-11-04 17:45:22 -08:00
jzsplunk 1bfa0dfc6b Merge branch 'develop' into ransomwares3 2020-11-04 17:44:34 -08:00
jzsplunk f845dc331e Merge branch 'develop' into issue_#850 2020-11-04 17:43:59 -08:00
Xiao Lin 04f8db150a Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-11-04 22:40:23 +00:00
Bhavin Patel 11bef0bbc6 Merge pull request #823 from splunk/adding_api_checks
adding smoke test for master api
2020-11-04 14:16:58 -08:00
Bhavin Patel 8e317c3c00 Merge branch 'develop' into adding_api_checks 2020-11-04 14:09:15 -08:00
jzsplunk c2d56f2e57 Merge branch 'develop' into issue_#850 2020-11-04 14:07:06 -08:00
Jose Enrique Hernandez 74e25172e4 Merge pull request #854 from splunk/ssa-coverage
script that shows the coverage for ssa detections
2020-11-04 16:51:26 -05:00
davisshannon a30cf8bb5d Merge pull request #1 from splunk/develop
updates
2020-11-05 08:33:59 +11:00
bpatel 8b93ff2097 minor 2020-11-04 13:32:06 -08:00
jzsplunk be1c42f895 Merge branch 'develop' into mbjerkeland-develop 2020-11-04 13:05:28 -08:00