admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,964 Commits 697 Branches 195 Tags
v3.0.9
Commit Graph

2964 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jose Enrique Hernandez c67d2e5944 Merge pull request #899 from splunk/ryuk-story 
Ryuk story and detections
v3.0.9 		2020-11-09 17:45:04 -05:00
divious1 d73c630bb0 removed samsam notes 2020-11-09 17:38:09 -05:00
divious1 30c6fa6606 fixing minor mistakes 2020-11-09 17:32:13 -05:00
divious1 6b8b2b61ec Revert "Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story" 
This reverts commit b1db736eb2, reversing
changes made to 026bb228a0.
 2020-11-09 14:55:16 -05:00
divious1 79a9a16809 updating with upstream 2020-11-09 11:23:11 -05:00
Jose Enrique Hernandez 37dd447777 Merge pull request #884 from splunk/detection_testing_part_one 
Automated Detection Testing PR detection_testing_part_one
 2020-11-09 11:21:16 -05:00
P4T12ICK f51a8f5b10 Merge branch 'develop' into detection_testing_part_one 2020-11-09 17:16:01 +01:00
divious1 f8fc4fa95d fixing warning on comparisons 2020-11-09 11:10:10 -05:00
root 31ec8a4bc3 Added detection testing service results inDetect mshta exe running scripts in command-line arguments 2020-11-09 15:59:06 +00:00
divious1 b1db736eb2 Merge remote-tracking branch 'origin/ryuktestsfiles' into ryuk-story 2020-11-09 10:55:45 -05:00
dependabot[bot] 46d503405b Merge pull request #886 from splunk/dependabot/pip/ansible-2.10.3 2020-11-09 15:41:35 +00:00
P4T12ICK ca7c9c878e detection test 2020-11-09 16:41:09 +01:00
dependabot[bot] 919b7236d8 Bump ansible from 2.10.2 to 2.10.3 
Bumps [ansible](https://github.com/ansible/ansible) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.10.2...v2.10.3)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 15:31:19 +00:00
P4T12ICK 5a34ae63ae Merge branch 'develop' into detection_testing_part_one 2020-11-09 15:56:23 +01:00
dependabot[bot] f053664217 Merge pull request #903 from splunk/dependabot/pip/boto3-1.16.13 2020-11-09 14:38:33 +00:00
dependabot[bot] fc25eb7cb9 Bump boto3 from 1.16.11 to 1.16.13 
Bumps [boto3](https://github.com/boto/boto3) from 1.16.11 to 1.16.13.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.16.11...1.16.13)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-11-09 14:05:25 +00:00
P4T12ICK 97181a2276 detection review 2020-11-09 14:36:48 +01:00
P4T12ICK cfcaa4c0e8 Merge branch 'develop' into detection_testing_part_one 2020-11-09 14:36:14 +01:00
Detection Testing Service 60dec9ea55 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 12:43:38 +00:00
root 89ede1f1f8 Added detection testing service results inDetect Excessive Account Lockouts From Endpoint 2020-11-09 12:43:35 +00:00
root a99d31c43a Added detection testing service results inDetect Excessive User Account Lockouts 2020-11-09 12:43:26 +00:00
P4T12ICK 53bc5414f9 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 13:25:41 +01:00
P4T12ICK 87a7d64d66 new tests 2020-11-09 13:25:27 +01:00
root 1e5bbadd2b Added detection testing service results inDeleting Shadow Copies 2020-11-09 09:56:18 +00:00
P4T12ICK ff910fa590 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one 2020-11-09 10:38:50 +01:00
P4T12ICK 079742338b deleting shadow copy test 2020-11-09 10:38:40 +01:00
Detection Testing Service fbccb2412c Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:51:53 +00:00
root ffb6fb5409 Added detection testing service results inCommon Ransomware Notes 2020-11-09 08:51:52 +00:00
Detection Testing Service 69d8c00af3 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-09 08:43:18 +00:00
root ede365c015 Added detection testing service results inCommon Ransomware Extensions 2020-11-09 08:43:16 +00:00
P4T12ICK f7fad21b02 ransomware notes test 2020-11-09 09:36:01 +01:00
P4T12ICK 66e2341012 ransomware extension 2020-11-09 09:26:04 +01:00
P4T12ICK b25ef1a4cb ransomware extension 2020-11-09 09:24:14 +01:00
Rod Soto f8a131528d widowswsecuritysamsearch 2020-11-08 11:30:34 -05:00
Rod Soto e21455a145 fixnamedaddedantispyware 2020-11-08 11:10:49 -05:00
Rod Soto 2fd9f07c75 winconhostryuksearch 2020-11-08 10:57:02 -05:00
Rod Soto 7af33cfd4f ryuktestfilestestfile 2020-11-08 10:27:03 -05:00
divious1 026bb228a0 Merge branch 'ryuk-story' of github.com:splunk/security-content into ryuk-story 2020-11-06 19:08:00 -05:00
divious1 2d37dc2e26 fixed validation errors 2020-11-06 19:07:54 -05:00
divious1 2ecead4232 added additional checks to validate 2020-11-06 18:32:56 -05:00
Jose Enrique Hernandez b6fe73df7d Merge branch 'develop' into ryuk-story 2020-11-06 18:03:20 -05:00
divious1 301c13f7fa new detections 2020-11-06 17:34:40 -05:00
Jose Enrique Hernandez 05eef5af56 Merge pull request #894 from splunk/dependabot_auto_merges 
specific token that requires github repo access otherwise auto merges…
 2020-11-06 14:02:36 -05:00
Jose Enrique Hernandez d14703fa3c Merge branch 'develop' into dependabot_auto_merges 2020-11-06 13:57:58 -05:00
Jose Enrique Hernandez 15bcf0bde3 Merge branch 'develop' into ryuk-story 2020-11-06 12:36:01 -05:00
divious1 77af8684bc ryuk story and detections 2020-11-06 12:32:48 -05:00
Ignacio 9c3cbf193b Merge branch 'develop' into detection_testing_part_one 2020-11-06 08:58:12 -08:00
Ignacio 52898f78aa Merge pull request #895 from splunk/TR-281 
Selecting only necessary fields to avoid serialization problem on DSP
 2020-11-06 08:46:17 -08:00
root 39c6a6c1e8 Added detection testing service results inBatch File Write to System32 2020-11-06 12:58:46 +00:00
Detection Testing Service afc2ee1777 Merge branch 'detection_testing_part_one' of https://github.com/splunk/security-content into detection_testing_part_one 2020-11-06 12:44:39 +00:00