admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] e87ac5d63b Branch was auto-updated. 2021-01-18 14:49:17 +00:00
github-actions[bot] ab37770fb8 Branch was auto-updated. 2021-01-18 14:49:15 +00:00
dependabot[bot] a419f0994a Merge pull request #1114 from splunk/dependabot/pip/identify-1.5.13 2021-01-18 14:48:53 +00:00
P4T12ICK 98175156b7 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-18 15:47:15 +01:00
P4T12ICK 477221da99 detection testing 2021-01-18 15:46:53 +01:00
dependabot[bot] f7b8edd6cf Bump boto3 from 1.16.55 to 1.16.56 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.55 to 1.16.56.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.55...1.16.56)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:43:25 +00:00
dependabot[bot] 180f8696cb Bump pyjwt from 2.0.0 to 2.0.1 
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.0.0...2.0.1)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:43:25 +00:00
dependabot[bot] 7c07c7b11a Bump mysql-connector-python from 8.0.22 to 8.0.23 
Bumps [mysql-connector-python](http://dev.mysql.com/doc/connector-python/en/index.html) from 8.0.22 to 8.0.23.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:43:24 +00:00
dependabot[bot] be08008e6e Bump deprecated from 1.2.10 to 1.2.11 
Bumps [deprecated](https://github.com/tantale/deprecated) from 1.2.10 to 1.2.11.
- [Release notes](https://github.com/tantale/deprecated/releases)
- [Changelog](https://github.com/tantale/deprecated/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tantale/deprecated/compare/v1.2.10...v1.2.11)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:43:17 +00:00
dependabot[bot] 1255a7799a Bump identify from 1.5.12 to 1.5.13 
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.12 to 1.5.13.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.12...v1.5.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:42:59 +00:00
github-actions[bot] 4ab3a4a90b Branch was auto-updated. 2021-01-18 14:42:42 +00:00
dependabot[bot] 0bc70a4ae4 Merge pull request #1109 from splunk/dependabot/pip/botocore-1.19.56 2021-01-18 14:42:22 +00:00
root a88d8291fe Added detection testing service results inDNS Query Length With High Standard Deviation 2021-01-18 14:41:53 +00:00
P4T12ICK 44bf41a678 new test file 2021-01-18 15:22:05 +01:00
dependabot[bot] 48530732a2 Bump botocore from 1.19.55 to 1.19.56 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.55 to 1.19.56.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.55...1.19.56)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-18 14:03:52 +00:00
P4T12ICK 27b27a5b59 detection testing branch 2021-01-18 14:10:47 +01:00
mhaag-spl c964e5274c Msbuild Story name and analytics fix 2021-01-17 20:21:25 -07:00
mhaag-spl 7d6017aa2b Update trusted_developer_utilities_proxy_execution_msbuild.yml 2021-01-17 20:16:42 -07:00
mhaag-spl dbf7e128af MSBuild Story 2021-01-17 20:09:52 -07:00
mhaag-spl 28827c7fdb MSHTA 
Modified inlne mshta execution with the `about` protocol handler.
Added new mshta.exe child process analytic
 2021-01-17 20:02:56 -07:00
mhaag-spl bcf56faa51 Update suspicious_msbuild_netconn.yml 2021-01-17 19:49:13 -07:00
mhaag-spl 7414436df5 ID Collision 2021-01-17 19:46:00 -07:00
mhaag-spl 2e9bd74689 MSBuild 
fixes
 2021-01-17 19:43:38 -07:00
mhaag-spl 08488e067e Revert "Revert "Revert "Revert "T1127.001 MSbuild"""" 
This reverts commit fd5e4adfb1.
 2021-01-17 19:38:36 -07:00
mhaag-spl fd5e4adfb1 Revert "Revert "Revert "T1127.001 MSbuild""" 
This reverts commit 9617d4d9b3.
 2021-01-17 19:37:58 -07:00
mhaag-spl 9617d4d9b3 Revert "Revert "T1127.001 MSbuild"" 
This reverts commit e27ad1399a.
 2021-01-15 15:06:53 -07:00
mhaag-spl e27ad1399a Revert "T1127.001 MSbuild" 
This reverts commit 0eba4877ff.
 2021-01-15 15:06:15 -07:00
mhaag-spl 0eba4877ff T1127.001 MSbuild 
MSbuild detections and test.
 2021-01-15 14:25:25 -07:00
Bhavin Patel f15c2d33cb Merge pull request #1104 from splunk/allow_external_prs 
fixed bug where it did not checkout external branches
 2021-01-15 12:37:51 -08:00
Bhavin Patel 8cad455781 Merge branch 'develop' into allow_external_prs 2021-01-15 11:53:13 -08:00
divious1 13801b6a0e fixed bug where it did not checkout external branches 2021-01-15 11:14:47 -05:00
dependabot[bot] 7b4836b01b Merge pull request #1103 from splunk/dependabot/pip/botocore-1.19.55 2021-01-15 14:18:11 +00:00
dependabot[bot] 2ae044f136 Bump botocore from 1.19.54 to 1.19.55 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.54 to 1.19.55.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.54...1.19.55)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-15 14:12:10 +00:00
dependabot[bot] c7109e1eef Merge pull request #1102 from splunk/dependabot/pip/boto3-1.16.55 2021-01-15 14:11:10 +00:00
dependabot[bot] 28b54bef7d Bump boto3 from 1.16.54 to 1.16.55 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.54 to 1.16.55.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.54...1.16.55)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-15 14:05:20 +00:00
P4T12ICK 92485a8acd Merge pull request #1097 from splunk/TR-318_mfa 
O365 Bypass MFA via Trusted IP
 2021-01-15 10:21:56 +01:00
bpatel b99d01458e first commit with product tag 2021-01-14 17:09:00 -08:00
github-actions[bot] 18ba87492f Branch was auto-updated. 2021-01-14 20:29:17 +00:00
jzsplunk a772e74a83 Merge pull request #1078 from splunk/detection_testing_branch 
detection testing branch
 2021-01-14 12:28:53 -08:00
root b751d5ddb8 Added detection testing service results inDetect hosts connecting to dynamic domain providers 2021-01-14 15:15:59 +00:00
P4T12ICK 50c3e8ead2 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-14 15:57:55 +01:00
P4T12ICK 2e1234c594 improved detections and tests 2021-01-14 15:57:42 +01:00
github-actions[bot] 42419b043e Branch was auto-updated. 2021-01-14 14:21:59 +00:00
dependabot[bot] e127c23ba0 Merge pull request #1100 from splunk/dependabot/pip/boto3-1.16.54 2021-01-14 14:21:38 +00:00
dependabot[bot] 1e0bc6e64a Bump boto3 from 1.16.53 to 1.16.54 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.53 to 1.16.54.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.53...1.16.54)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-14 14:14:35 +00:00
dependabot[bot] 7e6acc5465 Merge pull request #1099 from splunk/dependabot/pip/botocore-1.19.54 2021-01-14 14:13:29 +00:00
dependabot[bot] a55f2a129a Bump botocore from 1.19.53 to 1.19.54 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.53 to 1.19.54.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.53...1.19.54)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-14 14:05:31 +00:00
P4T12ICK c871d6804a improved detections and tests 2021-01-14 15:01:16 +01:00
P4T12ICK d72747ccd4 new generate feature 2021-01-14 12:33:36 +01:00
root 050b89ebef Added detection testing service results inO365 Bypass MFA via Trusted IP 2021-01-14 02:45:18 +00:00