2679 Commits

Author SHA1 Message Date
peter ddf9d107f4 Merge pull request #806 from splunk/misko_category_fixes_cred_extract
Fixing categories & text in Credential Extraction detections
v3.0.8
2020-10-20 15:08:18 -07:00
peter e541880a7f Merge branch 'develop' into misko_category_fixes_cred_extract 2020-10-20 14:55:03 -07:00
dependabot-preview[bot] c62d2f0c6c Merge pull request #808 from splunk/dependabot/pip/botocore-1.19.1 2020-10-20 20:43:44 +00:00
dependabot-preview[bot] 4c03676136 Bump botocore from 1.19.0 to 1.19.1
Bumps [botocore](https://github.com/boto/botocore) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.19.0...1.19.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 20:39:13 +00:00
dependabot-preview[bot] 434e0e03b1 Merge pull request #807 from splunk/dependabot/pip/boto3-1.16.1 2020-10-20 20:38:04 +00:00
dependabot-preview[bot] a8c65aeffc Bump boto3 from 1.16.0 to 1.16.1
Bumps [boto3](https://github.com/boto/boto3) from 1.16.0 to 1.16.1.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.0...1.16.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 20:34:02 +00:00
Stanislav Miskovic 3984d0e5b4 Fixing detection categories and polishing some descriptions in Credential Extraction detections. 2020-10-20 13:20:25 -07:00
Bhavin Patel d6e268ee86 Merge pull request #631 from splunk/response_phases
[WIP] Response plans and templates
2020-10-20 11:48:24 -07:00
Bhavin Patel 990c4134f8 Merge branch 'develop' into response_phases 2020-10-20 11:42:26 -07:00
bpatel e94b358a88 blank references 2020-10-20 11:39:00 -07:00
bpatel 9000dd4e23 tags and ascii fixes 2020-10-20 11:24:37 -07:00
Bhavin Patel 8fef4fe2fe Merge pull request #775 from splunk/improved_kerberoasting_attack
Automated Detection Testing PR improved_kerberoasting_attack
2020-10-20 11:01:40 -07:00
Bhavin Patel 7a45ca7143 Merge pull request #774 from splunk/pass_the_hash_detection
Automated Detection Testing PR pass_the_hash_detection
2020-10-20 10:55:43 -07:00
Bhavin Patel 8210804332 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-20 10:54:22 -07:00
Bhavin Patel c27c1b9a9c Merge pull request #791 from splunk/misko_cred_extract_ssa
SSA detections for credential extraction
2020-10-20 10:53:52 -07:00
Jose Enrique Hernandez 6838cbc393 Merge branch 'develop' into misko_cred_extract_ssa 2020-10-20 13:21:13 -04:00
Bhavin Patel 836c2a0c3b Merge branch 'develop' into response_phases 2020-10-20 10:20:12 -07:00
dependabot-preview[bot] f78268de5e Merge pull request #805 from splunk/dependabot/pip/pyparsing-2.4.7 2020-10-20 14:18:35 +00:00
dependabot-preview[bot] c0189b0409 Bump pyparsing from 2.4.6 to 2.4.7
Bumps [pyparsing](https://github.com/pyparsing/pyparsing) from 2.4.6 to 2.4.7.
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](https://github.com/pyparsing/pyparsing/compare/pyparsing_2.4.6...pyparsing_2.4.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-20 14:13:35 +00:00
peter 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa 2020-10-19 16:24:52 -07:00
peter-cg 64e6680aca Fixed a couple typos 2020-10-19 16:23:48 -07:00
peter b3586064f1 Merge pull request #804 from splunk/update_credump_notebooks
Updating credential dumping notebooks
2020-10-19 15:07:20 -07:00
peter-cg dba3722795 Updating credential dumping notebooks 2020-10-19 15:01:20 -07:00
peter ecc99f2455 Merge pull request #734 from splunk/add_gitlab_ci
WIP - SSA CI job
2020-10-19 14:31:50 -07:00
Jose Enrique Hernandez ca119d7cb5 Merge branch 'develop' into improved_kerberoasting_attack 2020-10-19 17:29:03 -04:00
Jose Enrique Hernandez ff2ee69853 Merge branch 'develop' into add_gitlab_ci 2020-10-19 17:27:50 -04:00
Jose Enrique Hernandez 38aecd9114 Merge pull request #770 from splunk/lolbas-fixes
Lolbas SSA fixes
2020-10-19 17:27:34 -04:00
Jose Enrique Hernandez ade78957f1 Merge branch 'develop' into lolbas-fixes 2020-10-19 17:19:18 -04:00
dependabot-preview[bot] ad0b9eb9b0 Merge pull request #803 from splunk/dependabot/pip/boto3-1.16.0 2020-10-19 19:43:04 +00:00
dependabot-preview[bot] 2fd0c55f4c Bump boto3 from 1.15.18 to 1.16.0
Bumps [boto3](https://github.com/boto/boto3) from 1.15.18 to 1.16.0.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.15.18...1.16.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 19:37:04 +00:00
dependabot-preview[bot] 064a4dc1d5 Merge pull request #802 from splunk/dependabot/pip/botocore-1.19.0 2020-10-19 19:35:48 +00:00
dependabot-preview[bot] 45f1b31891 Bump botocore from 1.18.18 to 1.19.0
Bumps [botocore](https://github.com/boto/botocore) from 1.18.18 to 1.19.0.
- [Release notes](https://github.com/boto/botocore/releases)
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/botocore/compare/1.18.18...1.19.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 19:31:16 +00:00
dependabot-preview[bot] ec881ec61d Merge pull request #801 from splunk/dependabot/pip/virtualenv-20.0.35 2020-10-19 18:08:41 +00:00
dependabot-preview[bot] 56b06d2246 Bump virtualenv from 20.0.33 to 20.0.35
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.0.33 to 20.0.35.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.0.33...20.0.35)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 18:04:13 +00:00
Bhavin Patel 4f417cb867 Merge pull request #732 from splunk/gcploit
Gcploit
2020-10-19 10:34:46 -07:00
bpatel 988d123704 reorg dir 2020-10-19 10:10:09 -07:00
Bhavin Patel 029f0afff3 Merge branch 'develop' into gcploit 2020-10-19 10:08:21 -07:00
Stanislav Miskovic 3a65129f5c Removed non-alphanumeric characters from detection names 2020-10-19 09:47:34 -07:00
dependabot-preview[bot] 5b2710e684 Merge pull request #796 from splunk/dependabot/pip/ansible-2.10.1 2020-10-19 15:09:25 +00:00
dependabot-preview[bot] 7eb89f7e83 Bump ansible from 2.9.2 to 2.10.1
Bumps [ansible](https://github.com/ansible/ansible) from 2.9.2 to 2.10.1.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.9.2...v2.10.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 15:03:39 +00:00
dependabot-preview[bot] 53748d2da0 Merge pull request #799 from splunk/dependabot/pip/jmespath-0.10.0 2020-10-19 15:02:14 +00:00
dependabot-preview[bot] f74eac4531 Bump jmespath from 0.9.4 to 0.10.0
Bumps [jmespath](https://github.com/jmespath/jmespath.py) from 0.9.4 to 0.10.0.
- [Release notes](https://github.com/jmespath/jmespath.py/releases)
- [Changelog](https://github.com/jmespath/jmespath.py/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/jmespath/jmespath.py/compare/0.9.4...0.10.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 14:57:23 +00:00
dependabot-preview[bot] df33414571 Merge pull request #800 from splunk/dependabot/pip/urllib3-1.25.11 2020-10-19 14:56:05 +00:00
dependabot-preview[bot] fa3f0c2b99 Bump urllib3 from 1.25.10 to 1.25.11
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.10 to 1.25.11.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/master/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.25.10...1.25.11)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 14:51:52 +00:00
dependabot-preview[bot] f3dad40e97 Merge pull request #793 from splunk/dependabot/pip/packaging-20.4 2020-10-19 14:50:31 +00:00
dependabot-preview[bot] f8151f705f Bump packaging from 19.2 to 20.4
Bumps [packaging](https://github.com/pypa/packaging) from 19.2 to 20.4.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/19.2...20.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 14:46:21 +00:00
dependabot-preview[bot] 26cc474dfb Merge pull request #797 from splunk/dependabot/pip/tabulate-0.8.7 2020-10-19 14:45:03 +00:00
dependabot-preview[bot] 1f83645b6b Bump tabulate from 0.8.6 to 0.8.7
Bumps [tabulate](https://github.com/astanin/python-tabulate) from 0.8.6 to 0.8.7.
- [Release notes](https://github.com/astanin/python-tabulate/releases)
- [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG)
- [Commits](https://github.com/astanin/python-tabulate/compare/v0.8.6...v0.8.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 14:40:37 +00:00
dependabot-preview[bot] 643247cba3 Merge pull request #790 from splunk/dependabot/pip/mysql-connector-python-8.0.22 2020-10-19 14:39:18 +00:00
dependabot-preview[bot] 815ef33688 Bump mysql-connector-python from 8.0.21 to 8.0.22
Bumps [mysql-connector-python](http://dev.mysql.com/doc/connector-python/en/index.html) from 8.0.21 to 8.0.22.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-19 14:35:03 +00:00