admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e993ff1dce Updating baseline to latest apps as of 20220715. Apps have already been uploaded to S3. pyth0n1c 2022-07-15 08:48:32 -07:00
  • 1cdfb1916f Fixed paths in content generation to use the input path instead of hardcoded relative paths. pyth0n1c 2022-07-15 08:02:17 -07:00
  • 97ad9beaa2 Fixed the pathing issue for reporting. pyth0n1c 2022-07-15 06:44:25 -07:00
  • 0fa185eeab updating description mvelazco 2022-07-14 16:55:46 -04:00
  • fee335e73d renaming analytic story mvelazco 2022-07-14 16:44:33 -04:00
  • 366e8763c2 oh hey data Michael Haag 2022-07-14 11:51:36 -06:00
  • d6dd5098be adding new detection mvelazco 2022-07-14 13:29:55 -04:00
  • 9ac23b6cf5 Experimenting with reducing size. minmimal_size pyth0n1c 2022-07-14 10:28:20 -07:00
  • 0a56c2470f proto fix Michael Haag 2022-07-14 09:50:41 -06:00
  • 3c5d118341 actual description Michael Haag 2022-07-14 09:43:00 -06:00
  • b4c6d95acd rename Michael Haag 2022-07-14 08:42:53 -06:00
  • 4cdbe51506 model to detect risky commands Kumar Sharad 2022-07-14 16:37:47 +02:00
  • ba98c8c7e1 Initial improvements for handling the --pr_number argument and commit_hash arguments. These were not working as intended. git_checkout_improvements pyth0n1c 2022-07-13 17:08:47 -07:00
  • c4ad3d0996 LOTL Michael Haag 2022-07-13 15:51:47 -06:00
  • 5bf8a69beb delete cloudtrail patel-bhavin 2022-07-13 12:49:43 -07:00
  • 45922dd210 Updated some print statements. Everything looks good! print_error_strings_on_summary pyth0n1c 2022-07-13 12:20:08 -07:00
  • c0996437b5 remove update patel-bhavin 2022-07-13 11:40:55 -07:00
  • b615728924 fixing file path mvelazco 2022-07-13 14:38:13 -04:00
  • f666632017 update description mvelazco 2022-07-13 14:23:38 -04:00
  • 7807c66f73 adding new detection mvelazco 2022-07-13 14:16:09 -04:00
  • e06e3da573 Merge branch 'TR-2222' of github.com:splunk/security_content into TR-2222 patel-bhavin 2022-07-12 18:30:33 -07:00
  • 0c7efe362c message patel-bhavin 2022-07-12 18:27:39 -07:00
  • 037bcb3f18 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:52 -07:00
  • c08e5f8a71 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:51 -07:00
  • d11b2dedf3 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:50 -07:00
  • d34a10968e Branch was auto-updated. pyth0n1c 2022-07-12 17:52:48 -07:00
  • d4bcd0716c Branch was auto-updated. pyth0n1c 2022-07-12 17:52:47 -07:00
  • 2183543236 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:46 -07:00
  • 52ad26197f Branch was auto-updated. pyth0n1c 2022-07-12 17:52:44 -07:00
  • 163d2bace0 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:43 -07:00
  • 71ff6c11e8 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:42 -07:00
  • 57371eecc4 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:39 -07:00
  • 929c623975 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:38 -07:00
  • fa2c0a6a40 Branch was auto-updated. pyth0n1c 2022-07-12 17:52:37 -07:00
  • 9c226267cb Branch was auto-updated. pyth0n1c 2022-07-12 17:52:36 -07:00
  • 3bd256120f Merge pull request #2242 from splunk/azorult-sfx-package Bhavin Patel 2022-07-12 17:52:18 -07:00
  • 92d6b653bc mionr patel-bhavin 2022-07-12 17:50:38 -07:00
  • 9756e681f7 aws cloudtrail stop logging patel-bhavin 2022-07-12 17:47:58 -07:00
  • 7e1d210cc9 Fixed improper return varaible unpacking. pyth0n1c 2022-07-12 17:07:00 -07:00
  • 4b391432a0 Intentionally break a test and a detection file so that they throw different errors. This will test the Error print functionality in the summarization step. pyth0n1c 2022-07-12 16:49:58 -07:00
  • ebe784f5c2 Print out error text at the very end of the test if there are errors. We want these to be more visibile because they are usually particualrly important to troubleshoot and fix ASAP. This way, you don't need to download the summary.json file to view them. pyth0n1c 2022-07-12 16:44:17 -07:00
  • 20ab9f27ce Moved id collision checking into the Utils module since it will be used by the Factory and the BA Factory. Updated a duplicate UUID to mitigate the collision issue raised on GitHub. pyth0n1c 2022-07-12 15:06:35 -07:00
  • 3935b8634d Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying mvelazco 2022-07-12 18:03:28 -04:00
  • 18aa9f2e7a adding new detection mvelazco 2022-07-12 18:03:26 -04:00
  • 9b21029bea Added logic for checking to see if there are duplicate ids for any/all kinds of content that have an ID associated with it. pyth0n1c 2022-07-12 14:26:34 -07:00
  • 8ec266233b Windows Protocol Handler Michael Haag 2022-07-12 14:43:39 -06:00
  • 42191ed3a9 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:23 -07:00
  • 79b48f69dc Branch was auto-updated. pyth0n1c 2022-07-12 12:33:22 -07:00
  • 3841520566 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:21 -07:00
  • 5ecd4380b8 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:20 -07:00
  • 11609e9227 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:19 -07:00
  • 5369103dd6 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:18 -07:00
  • 17b8e9cef0 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:17 -07:00
  • 82ee418b89 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:16 -07:00
  • dbc710114a Branch was auto-updated. pyth0n1c 2022-07-12 12:33:15 -07:00
  • 4f77e857e9 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:14 -07:00
  • 22ddcc1c93 Branch was auto-updated. pyth0n1c 2022-07-12 12:33:14 -07:00
  • debf5ddda6 Merge pull request #2275 from splunk/fix-join-issue2 Bhavin Patel 2022-07-12 12:32:55 -07:00
  • bb37b7db6b Branch was auto-updated. pyth0n1c 2022-07-12 12:14:25 -07:00
  • 9b5bc176ec Branch was auto-updated. pyth0n1c 2022-07-12 12:14:24 -07:00
  • 85d8b50be9 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:23 -07:00
  • afc9a64b62 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:22 -07:00
  • e0626b55c0 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:22 -07:00
  • 46d152a0c1 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:21 -07:00
  • 0a9404d737 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:20 -07:00
  • 7dbdf53037 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:19 -07:00
  • 3b8c7835f2 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:19 -07:00
  • b9cb41d763 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:18 -07:00
  • b3de7d6403 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:17 -07:00
  • b5d2c880b2 Branch was auto-updated. pyth0n1c 2022-07-12 12:14:16 -07:00
  • 3da5f6c6c8 Merge pull request #2284 from splunk/resolve_local_gha_delta Bhavin Patel 2022-07-12 12:13:55 -07:00
  • d7cf60c4c7 Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying mvelazco 2022-07-12 13:54:34 -04:00
  • f8e28dde20 adding new detection mvelazco 2022-07-12 13:54:32 -04:00
  • f8ac5616a0 Reverting the workflow and all of the detections that were touched to their original versions. pyth0n1c 2022-07-12 10:08:07 -07:00
  • ae4208c489 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:17 -07:00
  • 2f5af667bb Branch was auto-updated. pyth0n1c 2022-07-12 10:01:16 -07:00
  • 1ac5790863 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:14 -07:00
  • ca82eef693 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:13 -07:00
  • 025477394a Branch was auto-updated. pyth0n1c 2022-07-12 10:01:12 -07:00
  • 49401c3c56 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:11 -07:00
  • e55a97263a Branch was auto-updated. pyth0n1c 2022-07-12 10:01:10 -07:00
  • e226b9a994 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:09 -07:00
  • ed5bb40174 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:07 -07:00
  • 104c03a7b1 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:06 -07:00
  • 52c0f065c4 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:05 -07:00
  • 94d7b1ff08 Branch was auto-updated. pyth0n1c 2022-07-12 10:01:03 -07:00
  • 32c29963ac Merge pull request #2283 from splunk/add_gitpod P4T12ICK 2022-07-12 19:00:41 +02:00
  • ed713c24da Add gitpod config P4T12ICK 2022-07-12 16:52:25 +00:00
  • 797455e17f updating filter macro mvelazco 2022-07-12 11:41:45 -04:00
  • bf127dc0c0 Updating authorize.conf to allow us to delete from internal indexes. Reordering how delete works. pyth0n1c 2022-07-12 08:39:08 -07:00
  • 743b94d8a9 updating test files mvelazco 2022-07-12 11:22:38 -04:00
  • 45ee82ff9e fixing macro mvelazco 2022-07-12 10:26:48 -04:00
  • d8458b882e Quick hack to get everything tested in GHA using this verison of the CI/CD code. pyth0n1c 2022-07-11 14:31:02 -07:00
  • 6e6ea95e3c Merge branch 'TR-2219_AzureAD_Password_Srapying' of github.com:splunk/security_content into TR-2219_AzureAD_Password_Srapying mvelazco 2022-07-11 17:29:20 -04:00
  • ba163055eb adding 2 detections mvelazco 2022-07-11 17:29:18 -04:00
  • 71b7c5d45c Forgot to specify the host that data was being uploaded from. This means that delete does not work as expected, causing a large number of tests to fail and slower searches. pyth0n1c 2022-07-11 14:06:01 -07:00
  • ccbe770e21 Modify all tests that fail in gha but pass in local testing for easier troubleshooting. pyth0n1c 2022-07-11 12:53:51 -07:00
  • 1e6f2d79b0 Don't modify the original search variable. This can cause problems if we need to run the search again. pyth0n1c 2022-07-11 12:48:25 -07:00
  • 97a0132af1 Update windows_application_layer_protocol_rms_radmin_tool_namedpipe.yml tccontre 2022-07-11 17:15:11 +02:00
  • 74ea79b419 Update windows_powershell_import_applocker_policy.yml tccontre 2022-07-11 11:55:12 +02:00