Commit Graph

8347 Commits

Author SHA1 Message Date
github-actions[bot] b4dbaee9f8 Branch was auto-updated. 2021-02-04 16:36:14 +00:00
github-actions[bot] a62ad21de7 Branch was auto-updated. 2021-02-04 16:36:13 +00:00
github-actions[bot] 774ce3dfe7 Branch was auto-updated. 2021-02-04 16:36:11 +00:00
github-actions[bot] d905041aff Branch was auto-updated. 2021-02-04 16:36:10 +00:00
github-actions[bot] 8c430fd32a Branch was auto-updated. 2021-02-04 16:36:08 +00:00
Bhavin Patel 91931235d8 Merge pull request #1136 from splunk/sh_test
Automated Detection Testing PR: Security Hub searches
2021-02-04 08:35:43 -08:00
divious1 a390051bdd fixing but I hit in generate 2021-02-04 11:22:34 -05:00
divious1 8a772c721f adding product tags and type to baselines 2021-02-04 10:59:44 -05:00
divious1 7c0a849eda updated stories with product tags 2021-02-04 10:54:26 -05:00
divious1 e14fade976 adding product tag to all detections 2021-02-03 21:42:46 -05:00
github-actions[bot] f5517c95a0 Branch was auto-updated. 2021-02-04 01:21:08 +00:00
github-actions[bot] d9935188e4 Branch was auto-updated. 2021-02-04 01:21:07 +00:00
github-actions[bot] fea7aa641d Branch was auto-updated. 2021-02-04 01:21:06 +00:00
github-actions[bot] d800353df3 Branch was auto-updated. 2021-02-04 01:21:04 +00:00
github-actions[bot] 33e9892f93 Branch was auto-updated. 2021-02-04 01:21:02 +00:00
github-actions[bot] 4b40451171 Branch was auto-updated. 2021-02-04 01:21:01 +00:00
github-actions[bot] 147624dc32 Branch was auto-updated. 2021-02-04 01:21:00 +00:00
Bhavin Patel 50e4a1d24a Merge pull request #1164 from splunk/TR-406
Fixed SSA with cmd line norm
2021-02-03 17:20:40 -08:00
Bhavin Patel 18ab3d672a Merge branch 'develop' into TR-406 2021-02-03 16:28:10 -08:00
mhaag-spl a376f6da27 Merge branch 'develop' into 02rel1 2021-02-03 15:37:32 -07:00
mhaag-spl fc8ee105c4 Update creation_of_lsass_dump_with_taskmgr.yml 2021-02-03 15:37:08 -07:00
Bhavin Patel 3aa6adebd6 Merge branch 'develop' into sh_test 2021-02-03 14:24:50 -08:00
root 1890a84406 Added detection testing service results inCreation of lsass dump with taskmgr 2021-02-03 22:20:35 +00:00
Bhavin Patel 2d35c607ea Merge branch 'develop' into dependabot/pip/botocore-1.20.0 2021-02-03 14:11:35 -08:00
Bhavin Patel 85b01e872f Merge pull request #1170 from splunk/dependabot/pip/azure-mgmt-compute-18.2.0
Bump azure-mgmt-compute from 18.1.0 to 18.2.0
2021-02-03 14:11:17 -08:00
bpatel df2cd41959 remove security hub for user test file since there is not data yet 2021-02-03 14:10:14 -08:00
mhaag-spl dd6286bd04 Creation of lsass dump with taskmgr 2021-02-03 14:57:59 -07:00
root be729ae9bb Added detection testing service results inDump lsass via procdump rename 2021-02-03 17:29:33 +00:00
mhaag-spl d138f4ea8c procdump rename
renamed procdump query using sysmon
2021-02-03 09:58:51 -07:00
github-actions[bot] 504f96395a Branch was auto-updated. 2021-02-03 16:35:52 +00:00
github-actions[bot] b6b333d756 Branch was auto-updated. 2021-02-03 16:35:51 +00:00
github-actions[bot] 4a7b13a20c Branch was auto-updated. 2021-02-03 16:35:49 +00:00
github-actions[bot] b96f6c6227 Branch was auto-updated. 2021-02-03 16:35:48 +00:00
github-actions[bot] 15c742eb46 Branch was auto-updated. 2021-02-03 16:35:46 +00:00
github-actions[bot] 37b447a0fb Branch was auto-updated. 2021-02-03 16:35:44 +00:00
github-actions[bot] c7cfa25b48 Branch was auto-updated. 2021-02-03 16:35:43 +00:00
github-actions[bot] 71ce6a8cc5 Branch was auto-updated. 2021-02-03 16:35:42 +00:00
P4T12ICK fa3e36363f Merge pull request #1171 from splunk/Tr-408_bug_fix
bug fix detection First Time Seen Running Windows Service
2021-02-03 17:35:22 +01:00
P4T12ICK 623c8fee33 moved to experimental 2021-02-03 17:03:19 +01:00
P4T12ICK 7f8652b85b bug fix 2021-02-03 15:44:56 +01:00
dependabot[bot] 9712b4b0d0 Bump azure-mgmt-compute from 18.1.0 to 18.2.0
Bumps [azure-mgmt-compute](https://github.com/Azure/azure-sdk-for-python) from 18.1.0 to 18.2.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-mgmt-compute_18.1.0...azure-mgmt-compute_18.2.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-03 14:03:03 +00:00
dependabot[bot] bab348c1c3 Bump botocore from 1.19.63 to 1.20.0
Bumps [botocore](https://github.com/boto/botocore) from 1.19.63 to 1.20.0.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.63...1.20.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-03 14:02:57 +00:00
Ignacio Bermudez Corrales 5ae82a2490 added comments to regexes 2021-02-02 22:15:43 -08:00
Ignacio Bermudez Corrales 497714f09b added more test corner cases 2021-02-02 22:13:05 -08:00
Ignacio Bermudez Corrales 61615abcc6 regex to handle path corner case 2021-02-02 17:50:38 -08:00
Ignacio Bermudez Corrales dcee4c5615 handling GUIDS 2021-02-02 16:07:04 -08:00
Ignacio Bermudez Corrales 63ec24ad56 Improved regex to handle paths
- changed regex for paths
- updated unit test & data
2021-02-02 15:02:36 -08:00
divious1 8b5aef2b1b fixing templates to use the ESCU name prefix 2021-02-02 17:58:48 -05:00
divious1 782f762059 fixed up generate to use type batch 2021-02-02 17:23:32 -05:00
divious1 83382be5f6 updating spec doc 2021-02-02 17:13:39 -05:00