Commit Graph

2958 Commits

Author SHA1 Message Date
P4T12ICK d8e090d496 wip 2020-11-11 16:27:14 +01:00
Detection Testing Service 9cdca4e7b6 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 15:15:19 +00:00
root 9e6a855e6d Added detection testing service results inDetect PsExec With accepteula Flag 2020-11-10 15:15:18 +00:00
Detection Testing Service 3a59c7734a Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 15:02:19 +00:00
root ff4207b44c Added detection testing service results inDetect Use of cmd exe to Launch Script Interpreters 2020-11-10 15:02:17 +00:00
P4T12ICK 7867a6c825 new test file 2020-11-10 15:59:50 +01:00
P4T12ICK 3f6f8af783 new test file 2020-11-10 15:44:07 +01:00
Detection Testing Service 7f7933af05 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-10 14:26:42 +00:00
root 285a6f9860 Added detection testing service results inDetect processes used for System Network Configuration Discovery 2020-11-10 14:26:41 +00:00
P4T12ICK 2da2082b6a new test file 2020-11-10 15:13:15 +01:00
root 3bf9acae8c Added detection testing service results inDetect Prohibited Applications Spawning cmd exe 2020-11-10 08:35:10 +00:00
P4T12ICK 4059b769a2 new detection test 2020-11-10 09:20:22 +01:00
P4T12ICK 70466c9301 new detection test 2020-11-10 09:02:24 +01:00
P4T12ICK f51a8f5b10 Merge branch 'develop' into detection_testing_part_one 2020-11-09 17:16:01 +01:00
root 31ec8a4bc3 Added detection testing service results inDetect mshta exe running scripts in command-line arguments 2020-11-09 15:59:06 +00:00
dependabot[bot] 46d503405b Merge pull request #886 from splunk/dependabot/pip/ansible-2.10.3 2020-11-09 15:41:35 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
dependabot[bot] 919b7236d8 Bump ansible from 2.10.2 to 2.10.3
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.2...v2.10.3)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-09 15:31:19 +00:00
P4T12ICK 5a34ae63ae Merge branch 'develop' into detection_testing_part_one 2020-11-09 15:56:23 +01:00
dependabot[bot] f053664217 Merge pull request #903 from splunk/dependabot/pip/boto3-1.16.13 2020-11-09 14:38:33 +00:00
dependabot[bot] fc25eb7cb9 Bump boto3 from 1.16.11 to 1.16.13
Bumps [boto3](https://github.com/boto/boto3) from 1.16.11 to 1.16.13.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.11...1.16.13)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-09 14:05:25 +00:00
P4T12ICK 97181a2276 detection review 2020-11-09 14:36:48 +01:00
P4T12ICK cfcaa4c0e8 Merge branch 'develop' into detection_testing_part_one 2020-11-09 14:36:14 +01:00
Detection Testing Service 60dec9ea55 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 12:43:38 +00:00
root 89ede1f1f8 Added detection testing service results inDetect Excessive Account Lockouts From Endpoint 2020-11-09 12:43:35 +00:00
root a99d31c43a Added detection testing service results inDetect Excessive User Account Lockouts 2020-11-09 12:43:26 +00:00
P4T12ICK 53bc5414f9 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 13:25:41 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
root 1e5bbadd2b Added detection testing service results inDeleting Shadow Copies 2020-11-09 09:56:18 +00:00
P4T12ICK ff910fa590 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 10:38:50 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
Detection Testing Service fbccb2412c Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:51:53 +00:00
root ffb6fb5409 Added detection testing service results inCommon Ransomware Notes 2020-11-09 08:51:52 +00:00
Detection Testing Service 69d8c00af3 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:43:18 +00:00
root ede365c015 Added detection testing service results inCommon Ransomware Extensions 2020-11-09 08:43:16 +00:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
P4T12ICK b25ef1a4cb ransomware extension 2020-11-09 09:24:14 +01:00
Jose Enrique Hernandez 05eef5af56 Merge pull request #894 from splunk/dependabot_auto_merges
specific token that requires github repo access otherwise auto merges…
2020-11-06 14:02:36 -05:00
Jose Enrique Hernandez d14703fa3c Merge branch 'develop' into dependabot_auto_merges 2020-11-06 13:57:58 -05:00
Ignacio 9c3cbf193b Merge branch 'develop' into detection_testing_part_one 2020-11-06 08:58:12 -08:00
Ignacio 52898f78aa Merge pull request #895 from splunk/TR-281
Selecting only necessary fields to avoid serialization problem on DSP
2020-11-06 08:46:17 -08:00
root 39c6a6c1e8 Added detection testing service results inBatch File Write to System32 2020-11-06 12:58:46 +00:00
Detection Testing Service afc2ee1777 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-06 12:44:39 +00:00
root 3420a755d0 Added detection testing service results inAttempt To Stop Security Service 2020-11-06 12:44:38 +00:00
P4T12ICK 85f349668c new detection testing file 2020-11-06 13:43:49 +01:00
P4T12ICK ee59a8150b new test file 2020-11-06 13:26:45 +01:00
Ignacio 049d9da7a3 Merge branch 'develop' into TR-281 2020-11-05 19:22:36 -08:00
Ignacio Bermudez Corrales 10917d4c8d Selecting only necessary fields to avoid serialization problem on DSP 2020-11-05 19:19:50 -08:00
Jose Enrique Hernandez 94e73720b4 Merge branch 'develop' into dependabot_auto_merges 2020-11-05 21:43:23 -05:00