admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 2705da964e Merge pull request #1161 from splunk/dependabot/pip/jinja2-2.11.3 2021-02-01 14:09:29 +00:00
dependabot[bot] 1494124904 Bump virtualenv from 20.4.0 to 20.4.2 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.4.0 to 20.4.2.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.4.0...20.4.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-01 14:02:28 +00:00
dependabot[bot] 4f9384d2d3 Bump pytz from 2020.5 to 2021.1 
Bumps [pytz](https://github.com/stub42/pytz) from 2020.5 to 2021.1.
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](https://github.com/stub42/pytz/compare/release_2020.5...release_2021.1)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-01 14:02:26 +00:00
dependabot[bot] 3f6cf9e5b1 Bump jinja2 from 2.11.2 to 2.11.3 
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/master/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/2.11.2...2.11.3)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-01 14:02:23 +00:00
dependabot[bot] e9c542140b Bump packaging from 20.8 to 20.9 
Bumps [packaging](https://github.com/pypa/packaging) from 20.8 to 20.9.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/20.8...20.9)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-01 14:02:22 +00:00
dependabot[bot] 90dea207e5 Bump botocore from 1.19.62 to 1.19.63 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.62 to 1.19.63.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.62...1.19.63)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-01 14:02:22 +00:00
mhaag-spl ef829b6f9a Regsvr32 rename fix 
Fixes
 2021-01-29 14:57:05 -07:00
mhaag-spl b8953ddd1b Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-01-29 14:23:04 -07:00
mhaag-spl a0c2a1bcd6 Update suspicious_mshta_activity.yml 2021-01-29 14:23:02 -07:00
root 3def2593d4 Added detection testing service results inDetect regsvr32 Registering DLLs from non-standard paths 2021-01-29 20:55:42 +00:00
mhaag-spl 781572a7d6 Update suspicious_regsvr32_register_suspicious_path.test.yml 2021-01-29 13:34:40 -07:00
mhaag-spl 22b9693e82 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-01-29 11:48:21 -07:00
mhaag-spl 3551039f09 register suspicious path rename 2021-01-29 11:48:19 -07:00
root b6bb7f86a8 Added detection testing service results inDetect regsvr32 Application Control Bypass 2021-01-29 18:38:54 +00:00
mhaag-spl 4fc95b6dd2 regsvr32 2021-01-29 11:15:35 -07:00
mhaag-spl 26e9acd0b8 Update suspicious_regsvr32_activity.yml 2021-01-29 11:07:33 -07:00
mhaag-spl 921bd3aec6 Update suspicious_regsvr32_activity.yml 2021-01-29 11:03:01 -07:00
mhaag-spl 3d5d188dd7 Regsvr32 Story and Analytics 
First batch of Regsvr32
 2021-01-29 10:58:53 -07:00
github-actions[bot] 3cebf242b8 Branch was auto-updated. 2021-01-29 14:16:44 +00:00
github-actions[bot] 56ed1f75f2 Branch was auto-updated. 2021-01-29 14:16:43 +00:00
github-actions[bot] c986b15bb8 Branch was auto-updated. 2021-01-29 14:16:42 +00:00
github-actions[bot] 086b3c053b Branch was auto-updated. 2021-01-29 14:16:40 +00:00
github-actions[bot] d70d3e0688 Branch was auto-updated. 2021-01-29 14:16:39 +00:00
dependabot[bot] d909c8140a Merge pull request #1156 from splunk/dependabot/pip/botocore-1.19.62 2021-01-29 14:16:14 +00:00
github-actions[bot] 584d0124c3 Branch was auto-updated. 2021-01-29 14:09:59 +00:00
github-actions[bot] 427838b5e1 Branch was auto-updated. 2021-01-29 14:09:57 +00:00
github-actions[bot] 428db6878a Branch was auto-updated. 2021-01-29 14:09:56 +00:00
github-actions[bot] 4dd83c68f9 Branch was auto-updated. 2021-01-29 14:09:53 +00:00
github-actions[bot] 29e2bd7efc Branch was auto-updated. 2021-01-29 14:09:52 +00:00
github-actions[bot] 97ce8a18b8 Branch was auto-updated. 2021-01-29 14:09:50 +00:00
github-actions[bot] 7cbe552889 Branch was auto-updated. 2021-01-29 14:09:49 +00:00
dependabot[bot] a0cb47c470 Merge pull request #1154 from splunk/dependabot/pip/splunk-sdk-1.6.15 2021-01-29 14:09:23 +00:00
dependabot[bot] f82672bd4e Bump path from 15.0.1 to 15.1.0 
Bumps [path](https://github.com/jaraco/path) from 15.0.1 to 15.1.0.
- [Release notes](https://github.com/jaraco/path/releases)
- [Changelog](https://github.com/jaraco/path/blob/main/CHANGES.rst)
- [Commits](https://github.com/jaraco/path/compare/v15.0.1...v15.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-29 14:03:08 +00:00
dependabot[bot] 40def026cf Bump botocore from 1.19.61 to 1.19.62 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.61 to 1.19.62.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.61...1.19.62)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-29 14:03:07 +00:00
dependabot[bot] cd066c55dd Bump boto3 from 1.16.61 to 1.16.62 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.61 to 1.16.62.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.61...1.16.62)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-29 14:03:05 +00:00
dependabot[bot] 942b3990f2 Bump splunk-sdk from 1.6.14 to 1.6.15 
Bumps [splunk-sdk](https://github.com/splunk/splunk-sdk-python) from 1.6.14 to 1.6.15.
- [Release notes](https://github.com/splunk/splunk-sdk-python/releases)
- [Changelog](https://github.com/splunk/splunk-sdk-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/splunk/splunk-sdk-python/compare/1.6.14...1.6.15)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-29 14:03:05 +00:00
bpatel 4fb0488ac6 duplicating files and experimental 2021-01-28 17:35:25 -08:00
bpatel 1aa02ceb6f update ymls to remove validation errors 2021-01-28 15:10:37 -08:00
Detection Testing Service 851c2a4b02 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-01-28 22:07:25 +00:00
root c445ef14b9 Added detection testing service results inNTdsutil to export ntds dit from Directory Services 2021-01-28 22:07:24 +00:00
github-actions[bot] a6085b2dca Branch was auto-updated. 2021-01-28 21:53:02 +00:00
github-actions[bot] 0c9ce7270b Branch was auto-updated. 2021-01-28 21:53:00 +00:00
github-actions[bot] 2f660012b6 Branch was auto-updated. 2021-01-28 21:52:58 +00:00
Ignacio a8133f1664 Merge pull request #1151 from splunk/TR-384 
mid fix for rare parent-child
 2021-01-28 13:52:38 -08:00
mhaag-spl eaf1e8eb07 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-01-28 14:43:42 -07:00
mhaag-spl 4576b9f72b Update ntdsutil_export_ntds.yml 2021-01-28 14:43:33 -07:00
Michael Haag cd56808350 Merge branch 'develop' into 02rel1 2021-01-28 14:38:55 -07:00
mhaag-spl 177dc4eb96 ntdsutil export NTDS.dit 
Broke out ntdsutil.exe from creation_of_shadow_copy to allow for better filtering and specific monitoring/alerting.
 2021-01-28 14:36:52 -07:00
Ignacio 46a1923c8e Merge branch 'develop' into TR-384 2021-01-28 13:31:37 -08:00
Ignacio Bermudez Corrales cbe4f56c95 mid fix for rare parent-child 2021-01-28 12:22:58 -08:00