Commit Graph

4506 Commits

Author SHA1 Message Date
mhaag-spl eaf1e8eb07 Merge branch '02rel1' of https://github.com/splunk/security_content into 02rel1 2021-01-28 14:43:42 -07:00
mhaag-spl 4576b9f72b Update ntdsutil_export_ntds.yml 2021-01-28 14:43:33 -07:00
Michael Haag cd56808350 Merge branch 'develop' into 02rel1 2021-01-28 14:38:55 -07:00
mhaag-spl 177dc4eb96 ntdsutil export NTDS.dit
Broke out ntdsutil.exe from creation_of_shadow_copy to allow for better filtering and specific monitoring/alerting.
2021-01-28 14:36:52 -07:00
divious1 5f649291e0 rename detection and updated description 2021-01-28 11:56:01 -05:00
dependabot[bot] 4adb0810d0 Merge pull request #1148 from splunk/dependabot/pip/boto3-1.16.61 2021-01-28 14:17:08 +00:00
dependabot[bot] 452bf009fa Bump boto3 from 1.16.60 to 1.16.61
Bumps [boto3](https://github.com/boto/boto3) from 1.16.60 to 1.16.61.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.60...1.16.61)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-28 14:11:24 +00:00
dependabot[bot] df9b23e938 Merge pull request #1149 from splunk/dependabot/pip/botocore-1.19.61 2021-01-28 14:10:32 +00:00
dependabot[bot] 71ce6b4364 Bump botocore from 1.19.60 to 1.19.61
Bumps [botocore](https://github.com/boto/botocore) from 1.19.60 to 1.19.61.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.60...1.19.61)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-28 14:03:52 +00:00
research bot 328b9eb4ba updating docs and package bits [ci skip] 2021-01-27 20:18:41 +00:00
Bhavin Patel 06033d9aad Merge pull request #1107 from splunk/msbuild
Analytic Updates - 01262021
v3.13.0
2021-01-27 11:52:04 -08:00
mhaag-spl 5b86943eb4 Update suspicious_msbuild_path.yml
Modified to exclude all version path. Updated false positive info and description to reflect Visual Studio usage of msbuild.
2021-01-27 11:58:14 -07:00
github-actions[bot] c050d18744 Branch was auto-updated. 2021-01-27 17:14:53 +00:00
Bhavin Patel e4779e58f6 Merge pull request #1137 from splunk/issue_395
Mustang investigations
2021-01-27 09:14:28 -08:00
github-actions[bot] 63b23e9534 Branch was auto-updated. 2021-01-27 15:15:24 +00:00
github-actions[bot] dfcec38e14 Branch was auto-updated. 2021-01-27 15:15:21 +00:00
P4T12ICK 5d4ca7e92f Merge pull request #1143 from splunk/dependabot/pip/importlib-resources-5.1.0
Bump importlib-resources from 5.0.0 to 5.1.0
2021-01-27 16:14:58 +01:00
github-actions[bot] 99f2520f57 Branch was auto-updated. 2021-01-27 14:36:53 +00:00
github-actions[bot] c3788c2eab Branch was auto-updated. 2021-01-27 14:36:51 +00:00
P4T12ICK da07c7ae0b Merge branch 'develop' into dependabot/pip/importlib-resources-5.1.0 2021-01-27 15:35:30 +01:00
P4T12ICK 3a6df8df10 Merge pull request #1144 from splunk/dependabot/pip/virtualenv-20.4.0
Bump virtualenv from 20.3.0 to 20.4.0
2021-01-27 15:35:13 +01:00
github-actions[bot] 9fbf39be18 Branch was auto-updated. 2021-01-27 14:26:48 +00:00
github-actions[bot] 5893303efe Branch was auto-updated. 2021-01-27 14:26:46 +00:00
github-actions[bot] 5ff7771d4d Branch was auto-updated. 2021-01-27 14:26:43 +00:00
github-actions[bot] cbebd412e9 Branch was auto-updated. 2021-01-27 14:26:42 +00:00
P4T12ICK aa80b945e7 Merge pull request #1145 from splunk/dependabot/pip/execnet-1.8.0
Bump execnet from 1.7.1 to 1.8.0
2021-01-27 15:26:21 +01:00
github-actions[bot] c1a51089b6 Branch was auto-updated. 2021-01-27 14:20:28 +00:00
github-actions[bot] 4d0c86a61f Branch was auto-updated. 2021-01-27 14:20:26 +00:00
github-actions[bot] a5c1b4c453 Branch was auto-updated. 2021-01-27 14:20:23 +00:00
github-actions[bot] f18e02a967 Branch was auto-updated. 2021-01-27 14:20:20 +00:00
P4T12ICK 8057425400 Merge branch 'develop' into dependabot/pip/execnet-1.8.0 2021-01-27 15:19:26 +01:00
P4T12ICK f13f5b8e1b Merge pull request #1146 from splunk/dependabot/pip/boto3-1.16.60
Bump boto3 from 1.16.59 to 1.16.60
2021-01-27 15:19:13 +01:00
mhaag-spl d82f9a5116 Resolved yml formatting 2021-01-27 06:35:41 -07:00
P4T12ICK 9960481189 Merge branch 'develop' into dependabot/pip/boto3-1.16.60 2021-01-27 13:26:42 +01:00
github-actions[bot] 0a8fe23c04 Branch was auto-updated. 2021-01-27 12:26:37 +00:00
github-actions[bot] 044630b6bf Branch was auto-updated. 2021-01-27 12:26:34 +00:00
github-actions[bot] 45212b2c0d Branch was auto-updated. 2021-01-27 12:26:30 +00:00
github-actions[bot] c1e4dffe64 Branch was auto-updated. 2021-01-27 12:26:29 +00:00
P4T12ICK 29aa25dbbb Merge branch 'develop' into dependabot/pip/importlib-resources-5.1.0 2021-01-27 13:26:13 +01:00
P4T12ICK 7a588101ac Merge pull request #1142 from splunk/dependabot/pip/azure-mgmt-network-17.1.0
Bump azure-mgmt-network from 17.0.0 to 17.1.0
2021-01-27 13:26:01 +01:00
github-actions[bot] 87ef93cd15 Branch was auto-updated. 2021-01-27 11:43:29 +00:00
github-actions[bot] 5aa04226ee Branch was auto-updated. 2021-01-27 11:43:28 +00:00
github-actions[bot] f863f1ec1a Branch was auto-updated. 2021-01-27 11:43:25 +00:00
dependabot[bot] ca69bc2317 Bump boto3 from 1.16.59 to 1.16.60
Bumps [boto3](https://github.com/boto/boto3) from 1.16.59 to 1.16.60.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.59...1.16.60)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-27 11:43:24 +00:00
github-actions[bot] 24fe2011de Branch was auto-updated. 2021-01-27 11:43:22 +00:00
github-actions[bot] eab259453f Branch was auto-updated. 2021-01-27 11:43:20 +00:00
github-actions[bot] 2d5eeb6721 Branch was auto-updated. 2021-01-27 11:43:19 +00:00
P4T12ICK dae9db5ea1 Merge pull request #1128 from splunk/dependabot/pip/boto3-1.16.59
Bump boto3 from 1.16.58 to 1.16.59
2021-01-27 12:42:55 +01:00
github-actions[bot] be7de9a92b Branch was auto-updated. 2021-01-27 11:25:33 +00:00
github-actions[bot] 870dc7c688 Branch was auto-updated. 2021-01-27 11:25:31 +00:00