8210804332
Merge branch 'develop' into improved_kerberoasting_attack
2020-10-20 10:54:22 -07:00
c27c1b9a9c
Merge pull request #791 from splunk/misko_cred_extract_ssa
...
SSA detections for credential extraction
2020-10-20 10:53:52 -07:00
6838cbc393
Merge branch 'develop' into misko_cred_extract_ssa
2020-10-20 13:21:13 -04:00
836c2a0c3b
Merge branch 'develop' into response_phases
2020-10-20 10:20:12 -07:00
f78268de5e
Merge pull request #805 from splunk/dependabot/pip/pyparsing-2.4.7
2020-10-20 14:18:35 +00:00
c0189b0409
Bump pyparsing from 2.4.6 to 2.4.7
...
Bumps [pyparsing](https://github.com/pyparsing/pyparsing ) from 2.4.6 to 2.4.7.
- [Release notes](https://github.com/pyparsing/pyparsing/releases )
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES )
- [Commits](https://github.com/pyparsing/pyparsing/compare/pyparsing_2.4.6...pyparsing_2.4.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-20 14:13:35 +00:00
822d26dceb
Merge branch 'develop' into misko_cred_extract_ssa
2020-10-19 16:24:52 -07:00
64e6680aca
Fixed a couple typos
2020-10-19 16:23:48 -07:00
b3586064f1
Merge pull request #804 from splunk/update_credump_notebooks
...
Updating credential dumping notebooks
2020-10-19 15:07:20 -07:00
dba3722795
Updating credential dumping notebooks
2020-10-19 15:01:20 -07:00
ecc99f2455
Merge pull request #734 from splunk/add_gitlab_ci
...
WIP - SSA CI job
2020-10-19 14:31:50 -07:00
ca119d7cb5
Merge branch 'develop' into improved_kerberoasting_attack
2020-10-19 17:29:03 -04:00
ff2ee69853
Merge branch 'develop' into add_gitlab_ci
2020-10-19 17:27:50 -04:00
38aecd9114
Merge pull request #770 from splunk/lolbas-fixes
...
Lolbas SSA fixes
2020-10-19 17:27:34 -04:00
ade78957f1
Merge branch 'develop' into lolbas-fixes
2020-10-19 17:19:18 -04:00
ad0b9eb9b0
Merge pull request #803 from splunk/dependabot/pip/boto3-1.16.0
2020-10-19 19:43:04 +00:00
ee112491e2
Merge branch 'develop' into mustang_beta
2020-10-19 12:37:10 -07:00
2fd0c55f4c
Bump boto3 from 1.15.18 to 1.16.0
...
Bumps [boto3](https://github.com/boto/boto3 ) from 1.15.18 to 1.16.0.
- [Release notes](https://github.com/boto/boto3/releases )
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/boto3/compare/1.15.18...1.16.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 19:37:04 +00:00
064a4dc1d5
Merge pull request #802 from splunk/dependabot/pip/botocore-1.19.0
2020-10-19 19:35:48 +00:00
45f1b31891
Bump botocore from 1.18.18 to 1.19.0
...
Bumps [botocore](https://github.com/boto/botocore ) from 1.18.18 to 1.19.0.
- [Release notes](https://github.com/boto/botocore/releases )
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/botocore/compare/1.18.18...1.19.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 19:31:16 +00:00
7ccbf4b171
deleting old files
2020-10-19 11:42:59 -07:00
0cce001a42
merge with develop
2020-10-19 11:19:41 -07:00
ec881ec61d
Merge pull request #801 from splunk/dependabot/pip/virtualenv-20.0.35
2020-10-19 18:08:41 +00:00
56b06d2246
Bump virtualenv from 20.0.33 to 20.0.35
...
Bumps [virtualenv](https://github.com/pypa/virtualenv ) from 20.0.33 to 20.0.35.
- [Release notes](https://github.com/pypa/virtualenv/releases )
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst )
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.33...20.0.35 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 18:04:13 +00:00
4f417cb867
Merge pull request #732 from splunk/gcploit
...
Gcploit
2020-10-19 10:34:46 -07:00
988d123704
reorg dir
2020-10-19 10:10:09 -07:00
029f0afff3
Merge branch 'develop' into gcploit
2020-10-19 10:08:21 -07:00
3a65129f5c
Removed non-alphanumeric characters from detection names
2020-10-19 09:47:34 -07:00
5b2710e684
Merge pull request #796 from splunk/dependabot/pip/ansible-2.10.1
2020-10-19 15:09:25 +00:00
7eb89f7e83
Bump ansible from 2.9.2 to 2.10.1
...
Bumps [ansible](https://github.com/ansible/ansible ) from 2.9.2 to 2.10.1.
- [Release notes](https://github.com/ansible/ansible/releases )
- [Commits](https://github.com/ansible/ansible/compare/v2.9.2...v2.10.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 15:03:39 +00:00
53748d2da0
Merge pull request #799 from splunk/dependabot/pip/jmespath-0.10.0
2020-10-19 15:02:14 +00:00
f74eac4531
Bump jmespath from 0.9.4 to 0.10.0
...
Bumps [jmespath](https://github.com/jmespath/jmespath.py ) from 0.9.4 to 0.10.0.
- [Release notes](https://github.com/jmespath/jmespath.py/releases )
- [Changelog](https://github.com/jmespath/jmespath.py/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/jmespath/jmespath.py/compare/0.9.4...0.10.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:57:23 +00:00
df33414571
Merge pull request #800 from splunk/dependabot/pip/urllib3-1.25.11
2020-10-19 14:56:05 +00:00
fa3f0c2b99
Bump urllib3 from 1.25.10 to 1.25.11
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 1.25.10 to 1.25.11.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/master/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/1.25.10...1.25.11 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:51:52 +00:00
f3dad40e97
Merge pull request #793 from splunk/dependabot/pip/packaging-20.4
2020-10-19 14:50:31 +00:00
f8151f705f
Bump packaging from 19.2 to 20.4
...
Bumps [packaging](https://github.com/pypa/packaging ) from 19.2 to 20.4.
- [Release notes](https://github.com/pypa/packaging/releases )
- [Changelog](https://github.com/pypa/packaging/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/pypa/packaging/compare/19.2...20.4 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:46:21 +00:00
26cc474dfb
Merge pull request #797 from splunk/dependabot/pip/tabulate-0.8.7
2020-10-19 14:45:03 +00:00
1f83645b6b
Bump tabulate from 0.8.6 to 0.8.7
...
Bumps [tabulate](https://github.com/astanin/python-tabulate ) from 0.8.6 to 0.8.7.
- [Release notes](https://github.com/astanin/python-tabulate/releases )
- [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG )
- [Commits](https://github.com/astanin/python-tabulate/compare/v0.8.6...v0.8.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:40:37 +00:00
643247cba3
Merge pull request #790 from splunk/dependabot/pip/mysql-connector-python-8.0.22
2020-10-19 14:39:18 +00:00
815ef33688
Bump mysql-connector-python from 8.0.21 to 8.0.22
...
Bumps [mysql-connector-python](http://dev.mysql.com/doc/connector-python/en/index.html ) from 8.0.21 to 8.0.22.
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:35:03 +00:00
bf387e1219
Merge pull request #794 from splunk/dependabot/pip/cffi-1.14.3
2020-10-19 14:33:39 +00:00
3a42601426
Bump cffi from 1.13.2 to 1.14.3
...
Bumps [cffi](https://github.com/python-cffi/release-doc ) from 1.13.2 to 1.14.3.
- [Release notes](https://github.com/python-cffi/release-doc/releases )
- [Commits](https://github.com/python-cffi/release-doc/commits )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:29:22 +00:00
470eed170a
Merge pull request #792 from splunk/dependabot/pip/pexpect-4.8.0
2020-10-19 14:28:03 +00:00
734a24a595
Bump pexpect from 4.7.0 to 4.8.0
...
Bumps [pexpect](https://github.com/pexpect/pexpect ) from 4.7.0 to 4.8.0.
- [Release notes](https://github.com/pexpect/pexpect/releases )
- [Commits](https://github.com/pexpect/pexpect/compare/4.7.0...4.8.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:23:57 +00:00
d65fdedb5b
Merge pull request #798 from splunk/dependabot/pip/splunk-sdk-1.6.14
2020-10-19 14:22:41 +00:00
246fefb4b8
Bump splunk-sdk from 1.6.12 to 1.6.14
...
Bumps [splunk-sdk](https://github.com/splunk/splunk-sdk-python ) from 1.6.12 to 1.6.14.
- [Release notes](https://github.com/splunk/splunk-sdk-python/releases )
- [Changelog](https://github.com/splunk/splunk-sdk-python/blob/master/CHANGELOG.md )
- [Commits](https://github.com/splunk/splunk-sdk-python/compare/1.6.12...1.6.14 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:18:54 +00:00
d007b60456
Merge pull request #795 from splunk/dependabot/pip/cryptography-3.1.1
2020-10-19 14:17:36 +00:00
1daaefe1a3
Bump cryptography from 2.8 to 3.1.1
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 2.8 to 3.1.1.
- [Release notes](https://github.com/pyca/cryptography/releases )
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/2.8...3.1.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
2020-10-19 14:14:08 +00:00
8aa5392c50
Adding SSA detections for credential extraction from dumped secure stores or live Windows systems.
2020-10-19 01:42:14 -07:00
6d76a4d268
Fix:
...
1) Adding both long and short name registry section names for Security, SAM and System
2) Adding a condition that command line marameter is not null (faster exit in case customer is not logging command lines)
2020-10-18 22:46:39 -07:00
Bhavin Patel