admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Xiao Lin 9ef42f5c43 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-22 22:13:48 +00:00
dependabot-preview[bot] 26d3d3e00d Bump boto3 from 1.16.2 to 1.16.3 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.2 to 1.16.3.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.2...1.16.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-22 22:00:11 +00:00
dependabot-preview[bot] b113f4b1e7 Merge pull request #821 from splunk/dependabot/pip/importlib-resources-3.1.0 2020-10-22 21:58:54 +00:00
dependabot-preview[bot] 65875af20d Bump importlib-resources from 3.0.0 to 3.1.0 
Bumps [importlib-resources](http://importlib-resources.readthedocs.io/) from 3.0.0 to 3.1.0.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-22 21:34:21 +00:00
Ignacio Bermudez Corrales 9d139764bf fixed tests 2020-10-22 14:30:14 -07:00
Xiao Lin 45f67bc365 add test data 2020-10-22 21:09:27 +00:00
Xiao Lin 4b933ff9ef add test notebooks 2020-10-22 20:54:31 +00:00
Ignacio Bermudez Corrales bd76baace0 Final report of passed and failed 2020-10-22 13:51:28 -07:00
Xiao Lin 68c3830a88 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-22 20:49:45 +00:00
Ignacio Bermudez Corrales 67b13d7ca3 skip-errors option added to run all tests without stop 2020-10-22 13:31:19 -07:00
dependabot-preview[bot] fe11f93dd2 Merge pull request #819 from splunk/dependabot/pip/botocore-1.19.3 2020-10-22 19:54:47 +00:00
bpatel cf117d78fb minor fix 2020-10-22 12:48:51 -07:00
Ignacio Bermudez Corrales 51c8df5f21 multiple tests supported + output validation 2020-10-22 12:47:15 -07:00
Xiao Lin 4cabe9af56 remove mitre id from filename 2020-10-22 19:43:06 +00:00
Xiao Lin 112bf977c2 remove mitre id from filename 2020-10-22 19:41:56 +00:00
Xiao Lin 593a39f523 Merge branch 'develop' of github.com:splunk/security-content into TR162 2020-10-22 19:37:17 +00:00
dependabot-preview[bot] 84a7fa98e9 Bump botocore from 1.19.2 to 1.19.3 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.2 to 1.19.3.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.2...1.19.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-22 19:30:44 +00:00
Jose Enrique Hernandez f84dd4ad4a Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames 2020-10-22 14:13:07 -04:00
Ignacio Bermudez Corrales 0e28e78b5f pass_condition to the end of the pipeline 2020-10-22 10:04:28 -07:00
dependabot-preview[bot] 5d1a18f015 Merge pull request #811 from splunk/dependabot/pip/botocore-1.19.2 2020-10-22 16:17:47 +00:00
dependabot-preview[bot] 989496ff18 Bump botocore from 1.19.1 to 1.19.2 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.1 to 1.19.2.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.1...1.19.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-22 16:12:26 +00:00
dependabot-preview[bot] 4df02c5957 Merge pull request #812 from splunk/dependabot/pip/boto3-1.16.2 2020-10-22 16:11:14 +00:00
dependabot-preview[bot] 82047dfb97 Bump boto3 from 1.16.1 to 1.16.2 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.1 to 1.16.2.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.1...1.16.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-22 16:07:03 +00:00
xlinsplunk 4a9ec6c437 Merge pull request #815 from splunk/tf23 
Tf23
 2020-10-22 09:05:41 -07:00
Jose Enrique Hernandez fc62a736fa Merge branch 'develop' into add_gitlab_ci 2020-10-22 11:30:42 -04:00
Xiao Lin 022ead83ff update 2020-10-22 11:07:58 +00:00
Xiao Lin 1f51317037 update 2020-10-22 10:22:33 +00:00
Xiao Lin 54d12d03c1 add two lateral movement detections 2020-10-22 09:03:21 +00:00
Xiao Lin edd0dcfc70 update test notebook 2020-10-21 17:30:46 -07:00
Stanislav Miskovic 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals 2020-10-21 16:41:54 -07:00
Ignacio Bermudez Corrales 779e9e1555 updated .gitlab-ci 2020-10-21 15:30:21 -07:00
Ignacio Bermudez Corrales 96892d3e4e added more output for debugging 
added more output for debugging

more info
 2020-10-21 15:30:13 -07:00
Ignacio Bermudez Corrales c05d8c07cc command line parsing 2020-10-21 15:01:18 -07:00
Ignacio Bermudez Corrales 597af60b05 added dependencies that by mistake I removed 2020-10-21 14:48:03 -07:00
Ignacio Bermudez Corrales 9f0ea179aa First test end to end 2020-10-21 14:34:05 -07:00
Xiao Lin 91240efdab Merge branch 'develop' of github.com:splunk/security-content into tf23 2020-10-21 13:09:22 -07:00
research bot 089d08bd84 updating docs and package bits [ci skip] 2020-10-20 22:29:07 +00:00
peter ddf9d107f4 Merge pull request #806 from splunk/misko_category_fixes_cred_extract 
Fixing categories & text in Credential Extraction detections
v3.0.8 		2020-10-20 15:08:18 -07:00
peter e541880a7f Merge branch 'develop' into misko_category_fixes_cred_extract 2020-10-20 14:55:03 -07:00
dependabot-preview[bot] c62d2f0c6c Merge pull request #808 from splunk/dependabot/pip/botocore-1.19.1 2020-10-20 20:43:44 +00:00
dependabot-preview[bot] 4c03676136 Bump botocore from 1.19.0 to 1.19.1 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.0...1.19.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-20 20:39:13 +00:00
dependabot-preview[bot] 434e0e03b1 Merge pull request #807 from splunk/dependabot/pip/boto3-1.16.1 2020-10-20 20:38:04 +00:00
dependabot-preview[bot] a8c65aeffc Bump boto3 from 1.16.0 to 1.16.1 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.0 to 1.16.1.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.0...1.16.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2020-10-20 20:34:02 +00:00
Stanislav Miskovic 3984d0e5b4 Fixing detection categories and polishing some descriptions in Credential Extraction detections. 2020-10-20 13:20:25 -07:00
Bhavin Patel d6e268ee86 Merge pull request #631 from splunk/response_phases 
[WIP] Response plans and templates
 2020-10-20 11:48:24 -07:00
Bhavin Patel 990c4134f8 Merge branch 'develop' into response_phases 2020-10-20 11:42:26 -07:00
bpatel e94b358a88 blank references 2020-10-20 11:39:00 -07:00
bpatel 9000dd4e23 tags and ascii fixes 2020-10-20 11:24:37 -07:00
Bhavin Patel 8fef4fe2fe Merge pull request #775 from splunk/improved_kerberoasting_attack 
Automated Detection Testing PR improved_kerberoasting_attack
 2020-10-20 11:01:40 -07:00
Bhavin Patel 7a45ca7143 Merge pull request #774 from splunk/pass_the_hash_detection 
Automated Detection Testing PR pass_the_hash_detection
 2020-10-20 10:55:43 -07:00