Commit Graph

3434 Commits

Author SHA1 Message Date
P4T12ICK e874e0675d Merge pull request #954 from splunk/dependabot/pip/virtualenv-20.2.1
Bump virtualenv from 20.1.0 to 20.2.1
2020-11-27 09:15:52 +01:00
P4T12ICK f698e0f4f1 Merge branch 'develop' into dependabot/pip/virtualenv-20.2.1 2020-11-27 09:06:58 +01:00
P4T12ICK ef1ef56ca9 Merge pull request #965 from splunk/dependabot/pip/attackcti-0.3.4.3
Bump attackcti from 0.3.4 to 0.3.4.3
2020-11-27 09:06:43 +01:00
dependabot[bot] 1aec3eac01 Bump virtualenv from 20.1.0 to 20.2.1
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.1.0 to 20.2.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.1.0...20.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-27 07:51:08 +00:00
P4T12ICK b820c26155 Merge branch 'develop' into dependabot/pip/attackcti-0.3.4.3 2020-11-27 08:50:36 +01:00
P4T12ICK 69e36d86ba Merge pull request #967 from splunk/dependabot/pip/antlr4-python3-runtime-4.9
Bump antlr4-python3-runtime from 4.8 to 4.9
2020-11-27 08:50:24 +01:00
dependabot[bot] 14cb8fb1c9 Bump attackcti from 0.3.4 to 0.3.4.3
Bumps [attackcti](https://github.com/OTRF/ATTACK-Python-Client) from 0.3.4 to 0.3.4.3.
- [Release notes](https://github.com/OTRF/ATTACK-Python-Client/releases)
- [Commits](https://github.com/OTRF/ATTACK-Python-Client/compare/0.3.4...0.3.4.3)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-27 07:37:58 +00:00
P4T12ICK be2087cad2 Merge branch 'develop' into dependabot/pip/antlr4-python3-runtime-4.9 2020-11-27 08:37:21 +01:00
P4T12ICK 362b4d8533 Merge pull request #969 from splunk/dependabot/pip/pre-commit-2.9.2
Bump pre-commit from 2.8.2 to 2.9.2
2020-11-27 08:37:08 +01:00
dependabot[bot] b006a90ab7 Bump pre-commit from 2.8.2 to 2.9.2
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 2.8.2 to 2.9.2.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v2.8.2...v2.9.2)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-26 14:03:06 +00:00
dependabot[bot] e952a2d3d5 Bump antlr4-python3-runtime from 4.8 to 4.9
Bumps [antlr4-python3-runtime](http://www.antlr.org) from 4.8 to 4.9.

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-25 14:52:52 +00:00
dependabot[bot] 62960b37f5 Merge pull request #968 from splunk/dependabot/pip/boto3-1.16.25 2020-11-25 14:52:00 +00:00
dependabot[bot] 4d1303f266 Bump boto3 from 1.16.24 to 1.16.25
Bumps [boto3](https://github.com/boto/boto3) from 1.16.24 to 1.16.25.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.24...1.16.25)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-25 14:47:52 +00:00
dependabot[bot] ad663f90e2 Merge pull request #964 from splunk/dependabot/pip/cffi-1.14.4 2020-11-25 14:46:51 +00:00
dependabot[bot] 9cfe82a797 Bump cffi from 1.14.3 to 1.14.4
Bumps [cffi](https://github.com/python-cffi/release-doc) from 1.14.3 to 1.14.4.
- [Release notes](https://github.com/python-cffi/release-doc/releases)
- [Commits](https://github.com/python-cffi/release-doc/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-25 14:08:54 +00:00
dependabot[bot] e067606a03 Merge pull request #966 from splunk/dependabot/pip/botocore-1.19.25 2020-11-25 14:07:58 +00:00
dependabot[bot] 9307e57723 Bump botocore from 1.19.24 to 1.19.25
Bumps [botocore](https://github.com/boto/botocore) from 1.19.24 to 1.19.25.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.24...1.19.25)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-25 14:03:11 +00:00
dependabot[bot] f61e5f9005 Merge pull request #955 from splunk/dependabot/pip/identify-1.5.10 2020-11-24 14:23:03 +00:00
dependabot[bot] f56ccf079d Bump identify from 1.5.9 to 1.5.10
Bumps [identify](https://github.com/pre-commit/identify) from 1.5.9 to 1.5.10.
- [Release notes](https://github.com/pre-commit/identify/releases)
- [Commits](https://github.com/pre-commit/identify/compare/v1.5.9...v1.5.10)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-24 14:18:01 +00:00
dependabot[bot] 52bc17c6df Merge pull request #957 from splunk/dependabot/pip/boto3-1.16.24 2020-11-24 14:17:10 +00:00
dependabot[bot] 91a82f76b7 Bump boto3 from 1.16.22 to 1.16.24
Bumps [boto3](https://github.com/boto/boto3) from 1.16.22 to 1.16.24.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.22...1.16.24)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-24 14:12:49 +00:00
dependabot[bot] 7df17cac70 Merge pull request #958 from splunk/dependabot/pip/botocore-1.19.24 2020-11-24 14:11:56 +00:00
dependabot[bot] f66569fb40 Bump botocore from 1.19.22 to 1.19.24
Bumps [botocore](https://github.com/boto/botocore) from 1.19.22 to 1.19.24.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.22...1.19.24)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-24 14:07:46 +00:00
dependabot[bot] ab3332666d Merge pull request #956 from splunk/dependabot/pip/attackcti-0.3.4 2020-11-24 14:06:52 +00:00
dependabot[bot] 04c501c619 Bump attackcti from 0.3.3 to 0.3.4
Bumps [attackcti](https://github.com/OTRF/ATTACK-Python-Client) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/OTRF/ATTACK-Python-Client/releases)
- [Commits](https://github.com/OTRF/ATTACK-Python-Client/compare/0.3.3...0.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-24 14:02:43 +00:00
P4T12ICK 38991e84e0 Merge pull request #945 from splunk/testing-data-pulling
Refactored and pulls data only on ssa detections
2020-11-24 14:30:14 +01:00
P4T12ICK 41053507a0 Merge branch 'develop' into testing-data-pulling 2020-11-23 18:05:20 +01:00
Ignacio Bermudez Corrales 54141c1de6 missing imports in ssa_validate 2020-11-20 09:34:06 -08:00
Ignacio Bermudez Corrales 0b93c814a0 missing sys in ssa_validate 2020-11-20 09:32:02 -08:00
dependabot[bot] dbcda3ca56 Bump botocore from 1.19.21 to 1.19.22
Bumps [botocore](https://github.com/boto/botocore) from 1.19.21 to 1.19.22.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.21...1.19.22)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-20 09:32:02 -08:00
dependabot[bot] 75da36c992 Bump boto3 from 1.16.21 to 1.16.22
Bumps [boto3](https://github.com/boto/boto3) from 1.16.21 to 1.16.22.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.21...1.16.22)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-20 09:32:02 -08:00
dependabot[bot] 41a5c35ba4 Merge pull request #947 from splunk/dependabot/pip/botocore-1.19.22 2020-11-20 14:12:58 +00:00
dependabot[bot] 380437fa38 Bump botocore from 1.19.21 to 1.19.22
Bumps [botocore](https://github.com/boto/botocore) from 1.19.21 to 1.19.22.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.21...1.19.22)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-20 14:07:48 +00:00
dependabot[bot] f120a059ed Merge pull request #946 from splunk/dependabot/pip/boto3-1.16.22 2020-11-20 14:07:01 +00:00
dependabot[bot] 35c2aab7f0 Bump boto3 from 1.16.21 to 1.16.22
Bumps [boto3](https://github.com/boto/boto3) from 1.16.21 to 1.16.22.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.21...1.16.22)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-20 14:02:55 +00:00
Ignacio fb6d8ac64f Merge branch 'develop' into testing-data-pulling 2020-11-19 16:34:25 -08:00
Ignacio Bermudez Corrales 7187f2cef6 Refactored and pulls data only on ssa detections 2020-11-19 16:32:04 -08:00
dependabot[bot] a8543c539f Merge pull request #943 from splunk/dependabot/pip/botocore-1.19.21 2020-11-19 14:22:07 +00:00
dependabot[bot] 7bb0d714c8 Bump botocore from 1.19.20 to 1.19.21
Bumps [botocore](https://github.com/boto/botocore) from 1.19.20 to 1.19.21.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.20...1.19.21)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-19 14:09:26 +00:00
dependabot[bot] e39779f761 Merge pull request #944 from splunk/dependabot/pip/boto3-1.16.21 2020-11-19 14:08:36 +00:00
dependabot[bot] 2d3e6ab43a Bump boto3 from 1.16.20 to 1.16.21
Bumps [boto3](https://github.com/boto/boto3) from 1.16.20 to 1.16.21.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.20...1.16.21)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-19 14:03:42 +00:00
Bhavin Patel bb6a5d9e75 Merge pull request #942 from splunk/issue_941
updating risk object
2020-11-18 15:46:53 -08:00
Bhavin Patel 2772bf4559 Merge pull request #940 from wesinator/patch-1
add additional suspicious file extensions
2020-11-18 15:28:33 -08:00
bpatel e0c267779f updating risk object 2020-11-18 15:23:13 -08:00
Ԝеѕ 0f2056149f add additional suspicious file extensions
chm, vbe, additional media double ext exe's
2020-11-18 16:19:11 -05:00
Ignacio 688b006ed0 Merge pull request #890 from splunk/misko_credential_probing
Probing access with stolen credentials,  assessing credential strength, recon of credential stores and use of CryptoAPI
2020-11-18 11:36:16 -08:00
Ignacio 4e5b26e322 Merge branch 'develop' into misko_credential_probing 2020-11-18 11:30:43 -08:00
Bhavin Patel c8710c17ad Merge pull request #893 from davisshannon/develop
Data Exfil PR (fixed up)
2020-11-18 11:30:10 -08:00
Ignacio 9b8bc3ceaf Merge branch 'develop' into misko_credential_probing 2020-11-18 11:25:16 -08:00
Ignacio fc8ab61ac0 Merge pull request #896 from splunk/misko_recon_use_cases
Reconnaissance use case: domains, network, devices, shares, users, services, processes ...
2020-11-18 11:23:53 -08:00