admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,347 Commits 697 Branches 195 Tags
94de7c8d57553ed698e489857713153cc386170e
Commit Graph

8347 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mhaag-spl 84fef240a1 Update bcdedit_failure_recovery_modification.yml 2021-01-11 16:12:59 -07:00
root a2fa25f9bc Added detection testing service results inBCDEdit Failure Recovery Modification 2021-01-11 23:08:28 +00:00
Jose Enrique Hernandez 723d3dac11 minor syntax error 2021-01-11 17:51:42 -05:00
mhaag-spl b7d9fb164b Update bcdedit_failure_recovery_modification.yml 2021-01-11 15:45:45 -07:00
mhaag-spl def94c4623 Update bcdedit_failure_recovery_modification.test.yml 2021-01-11 13:57:05 -07:00
mhaag-spl d99e66f367 T1490 BCDedit 
T1490 BCDedit
 2021-01-11 12:25:19 -07:00
root dd8d642973 Added detection testing service results inAWS Detect Users with KMS keys performing encryption S3 2021-01-11 14:56:55 +00:00
root 73b29808ee Added detection testing service results inAWS Detect Users creating keys with encrypt policy without MFA 2021-01-11 14:31:23 +00:00
P4T12ICK 5d481c95ab bug fix detection 2021-01-11 15:13:05 +01:00
github-actions[bot] 83ad7fbae7 Branch was auto-updated. 2021-01-11 14:11:04 +00:00
github-actions[bot] c2508e8404 Branch was auto-updated. 2021-01-11 14:11:02 +00:00
github-actions[bot] c9e66ed6bd Branch was auto-updated. 2021-01-11 14:11:01 +00:00
dependabot[bot] 8af7cac864 Merge pull request #1084 from splunk/dependabot/pip/identify-1.5.12 2021-01-11 14:10:40 +00:00
dependabot[bot] 1cffa2e0fc Bump importlib-metadata from 3.3.0 to 3.4.0 
Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/CHANGES.rst)
- [Commits](https://github.com/python/importlib_metadata/compare/v3.3.0...v3.4.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-11 14:03:34 +00:00
dependabot[bot] 1eb3de9609 Bump virtualenv from 20.2.2 to 20.3.0 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.2.2 to 20.3.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.2.2...20.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-11 14:03:33 +00:00
dependabot[bot] dc9efbf09d Bump importlib-resources from 4.1.1 to 5.0.0 
Bumps [importlib-resources](https://github.com/python/importlib_resources) from 4.1.1 to 5.0.0.
- [Release notes](https://github.com/python/importlib_resources/releases)
- [Changelog](https://github.com/python/importlib_resources/blob/main/CHANGES.rst)
- [Commits](https://github.com/python/importlib_resources/compare/v4.1.1...v5.0.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-11 14:03:32 +00:00
dependabot[bot] 48bb6a978d Bump identify from 1.5.11 to 1.5.12 
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.11 to 1.5.12.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.11...v1.5.12)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-11 14:03:29 +00:00
P4T12ICK b7175cbc08 updated detection and test file 2021-01-11 14:28:14 +01:00
P4T12ICK 4383db4e83 update detection 2021-01-11 13:31:02 +01:00
Jose Enrique Hernandez d8182bc8ad Merge pull request #1082 from splunk/TR-223 
Syntax change in first_time_event
 2021-01-08 17:58:28 -05:00
Ignacio Bermudez Corrales 1edc936662 Syntax change in first_time_event 2021-01-08 11:10:12 -08:00
P4T12ICK 6304b53e65 Merge branch 'detection_testing_branch' of github.com:splunk/security-content into detection_testing_branch 2021-01-08 15:52:36 +01:00
P4T12ICK d0bea9eecf detection testing cloud 2021-01-08 15:51:45 +01:00
github-actions[bot] 6164e15bdc Branch was auto-updated. 2021-01-08 14:16:01 +00:00
dependabot[bot] 00a5291569 Merge pull request #1081 from splunk/dependabot/pip/boto3-1.16.51 2021-01-08 14:15:39 +00:00
dependabot[bot] 7ce147217c Bump boto3 from 1.16.50 to 1.16.51 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.50 to 1.16.51.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.50...1.16.51)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-08 14:09:40 +00:00
github-actions[bot] 363b9464b8 Branch was auto-updated. 2021-01-08 14:09:16 +00:00
dependabot[bot] 5f4135cb0b Merge pull request #1080 from splunk/dependabot/pip/botocore-1.19.51 2021-01-08 14:08:53 +00:00
dependabot[bot] e42b1fae0d Bump botocore from 1.19.50 to 1.19.51 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.50 to 1.19.51.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.50...1.19.51)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-08 14:02:57 +00:00
dependabot[bot] b19c8f4107 Bump dnspython from 2.0.0 to 2.1.0 
Bumps [dnspython](https://github.com/rthalley/dnspython) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/master/doc/whatsnew.rst)
- [Commits](https://github.com/rthalley/dnspython/compare/v2.0.0...v2.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-08 14:02:53 +00:00
root 2af42c6f65 Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls 2021-01-08 13:00:41 +00:00
P4T12ICK fd427dde35 small change 2021-01-08 13:29:04 +01:00
research bot a75b94ee87 updating docs and package bits [ci skip] 2021-01-07 20:47:59 +00:00
Jose Enrique Hernandez 060cd72540 Merge pull request #1065 from splunk/issue_848_dest_mac 
should be dest_mac as reported
v3.11.0 		2021-01-07 12:37:23 -05:00
github-actions[bot] 3398b5c927 Branch was auto-updated. 2021-01-07 15:56:50 +00:00
Jose Enrique Hernandez c0c8358563 Merge pull request #1030 from splunk/TR-320-suspicious-rights-delegation 
Office 365 Detections
 2021-01-07 10:56:27 -05:00
github-actions[bot] 01f1b85b58 Branch was auto-updated. 2021-01-07 14:52:29 +00:00
github-actions[bot] 0381f57b57 Branch was auto-updated. 2021-01-07 14:52:28 +00:00
dependabot[bot] da8ca9afab Merge pull request #1076 from splunk/dependabot/pip/botocore-1.19.50 2021-01-07 14:52:05 +00:00
dependabot[bot] 643588c288 Bump botocore from 1.19.49 to 1.19.50 
Bumps [botocore](https://github.com/boto/botocore) from 1.19.49 to 1.19.50.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.49...1.19.50)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-07 14:45:04 +00:00
dependabot[bot] 860bbec43a Merge pull request #1077 from splunk/dependabot/pip/boto3-1.16.50 2021-01-07 14:44:17 +00:00
P4T12ICK 8df36c2e0c Merge branch 'develop' into TR-320-suspicious-rights-delegation 2021-01-07 15:28:30 +01:00
dependabot[bot] 8bb0ce7dfa Bump boto3 from 1.16.49 to 1.16.50 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.49 to 1.16.50.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.49...1.16.50)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-07 14:02:31 +00:00
github-actions[bot] 8c66036d3a Branch was auto-updated. 2021-01-06 23:21:35 +00:00
Bhavin Patel e2d7a88d9d Merge pull request #1075 from splunk/supernova_webshell 
adding solarflare detection for supernova built by John Stoner
 2021-01-06 15:21:15 -08:00
github-actions[bot] 64dc7d0486 Branch was auto-updated. 2021-01-06 23:14:39 +00:00
github-actions[bot] aa6845d91d Branch was auto-updated. 2021-01-06 23:14:37 +00:00
Bhavin Patel 7a76b1b645 Merge pull request #1035 from splunk/appinspect_service_account 
added logic to pass a username password a service account
 2021-01-06 15:14:15 -08:00
Jose Enrique Hernandez fe13a41290 Merge branch 'develop' into supernova_webshell 2021-01-06 18:09:13 -05:00
divious1 f5d522c697 fixing ref 2021-01-06 18:07:40 -05:00