admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e5d2e9f6f3 Update windows_impair_defense_add_xml_applocker_rules.yml tccontre 2022-07-11 11:54:52 +02:00
  • c0b848d43c Update windows_remote_access_software_rms_registry.yml tccontre 2022-07-11 11:54:20 +02:00
  • c96e149cbd wip P4T12ICK 2022-07-08 12:50:15 +02:00
  • 86ae42674d Merge branch 'azorult-bomb3' of github.com:splunk/security_content into azorult-bomb3 tccontre 2022-07-08 11:05:50 +02:00
  • cd0207e68f azorult-bomb3 tccontre 2022-07-08 11:05:34 +02:00
  • 13d3a2e891 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:32 -07:00
  • 012a22b1a2 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:31 -07:00
  • d461a5b5ed Branch was auto-updated. pyth0n1c 2022-07-07 17:12:29 -07:00
  • 4732398f87 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:28 -07:00
  • b2aae73265 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:27 -07:00
  • b970026483 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:26 -07:00
  • 43714f60d4 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:24 -07:00
  • e6c8772049 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:23 -07:00
  • 8615f3d844 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:22 -07:00
  • 4e730e5ace Branch was auto-updated. pyth0n1c 2022-07-07 17:12:21 -07:00
  • 9a139e1cb9 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:20 -07:00
  • a618987313 Branch was auto-updated. pyth0n1c 2022-07-07 17:12:19 -07:00
  • 8f0e5be32d Merge pull request #2279 from splunk/retry_failed_detections_in_cicd pyth0n1c 2022-07-07 17:11:56 -07:00
  • b1ba36517e Updated wait time and fixed typo in print statement. pyth0n1c 2022-07-07 17:09:51 -07:00
  • ba1019f8f0 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:08 -07:00
  • d90dc8100c Branch was auto-updated. pyth0n1c 2022-07-07 17:08:07 -07:00
  • d2ecec653f Branch was auto-updated. pyth0n1c 2022-07-07 17:08:07 -07:00
  • 87a807c19a Branch was auto-updated. pyth0n1c 2022-07-07 17:08:06 -07:00
  • 7c825f6110 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:05 -07:00
  • 1cd0ae4af3 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:04 -07:00
  • 0c41f0a2f8 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:03 -07:00
  • edba7b08d1 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:02 -07:00
  • 215dda2deb Branch was auto-updated. pyth0n1c 2022-07-07 17:08:01 -07:00
  • 6722d936f8 Branch was auto-updated. pyth0n1c 2022-07-07 17:08:00 -07:00
  • 6145468c2b Branch was auto-updated. pyth0n1c 2022-07-07 17:07:58 -07:00
  • aefc5a7f3e Branch was auto-updated. pyth0n1c 2022-07-07 17:07:58 -07:00
  • 4bae19f854 Merge pull request #2277 from splunk/contentctl_inmemory_cache_and_bugfix pyth0n1c 2022-07-07 17:07:40 -07:00
  • 81324ddb00 A number of detections are passing locally but failing in CI/CD. I believe this is because they are not being given enough time to finish their data ingest completely. If a search fails, wait some time and run it a few more times to see if it will complete. pyth0n1c 2022-07-07 15:58:46 -07:00
  • f2b7f155eb Faster container startup when launching a single container. Same wait time between containers when launching multiple containers. This gets us to startup much faster for the most common testing case, a single container. pyth0n1c 2022-07-07 15:30:24 -07:00
  • ca443d7b6a adding analytic story and new macro mvelazco 2022-07-07 18:06:58 -04:00
  • 8ed9372401 On CVESearch API failure, added a brief sleep to allow the API to begin working again before trying to resolve it again. pyth0n1c 2022-07-07 14:40:39 -07:00
  • 80af56d397 Fixing the rare case where enrichment fails due to CVESearch API failure, causing the entire workflow to fail. Now, we will retry enrichment up to a total of 3 times. This should virtually eliminate all CVE Enrichment failures. If they do still occur, we will receive a descriptive message indicating why there was a failure instead of the cryptic message that we were getting before. pyth0n1c 2022-07-07 14:33:57 -07:00
  • 6dba7cc848 mav mhaag-spl 2022-07-07 15:24:13 -06:00
  • 76d95fd83f Branch was auto-updated. pyth0n1c 2022-07-07 09:47:26 -07:00
  • e8299b4726 Branch was auto-updated. pyth0n1c 2022-07-07 09:47:25 -07:00
  • 9079b4c660 Branch was auto-updated. pyth0n1c 2022-07-07 09:47:24 -07:00
  • ce26abbfb7 Branch was auto-updated. pyth0n1c 2022-07-07 09:47:23 -07:00
  • a83589fa6e Branch was auto-updated. pyth0n1c 2022-07-07 09:47:22 -07:00
  • c220041d5c Branch was auto-updated. pyth0n1c 2022-07-07 09:47:21 -07:00
  • 024a9811a0 Branch was auto-updated. pyth0n1c 2022-07-07 09:47:20 -07:00
  • 4aff29e922 Branch was auto-updated. pyth0n1c 2022-07-07 09:47:20 -07:00
  • 555992f38c Branch was auto-updated. pyth0n1c 2022-07-07 09:47:19 -07:00
  • d68dadb7ab Branch was auto-updated. pyth0n1c 2022-07-07 09:47:17 -07:00
  • 236ea67d30 Merge pull request #2270 from splunk/TR-2210_Edit_Windows_PowerView_Kerberos_Service_Ticket_Request mvelazco 2022-07-07 12:47:00 -04:00
  • 10aa2d0a0a Update office_product_writing_cab_or_inf.yml tccontre 2022-07-07 17:55:57 +02:00
  • cb7523dfd9 fix-join-issue2 tccontre 2022-07-07 17:46:24 +02:00
  • d8a24be09a Branch was auto-updated. pyth0n1c 2022-07-07 08:12:36 -07:00
  • 284e226fc7 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:35 -07:00
  • eb29bc04f6 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:34 -07:00
  • 09e1435886 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:33 -07:00
  • 1f4af38d5e Branch was auto-updated. pyth0n1c 2022-07-07 08:12:33 -07:00
  • 6da24a4d87 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:32 -07:00
  • 18763801cd Branch was auto-updated. pyth0n1c 2022-07-07 08:12:31 -07:00
  • 8150dcad8d Branch was auto-updated. pyth0n1c 2022-07-07 08:12:30 -07:00
  • 39a18f02d9 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:29 -07:00
  • c623492507 Branch was auto-updated. pyth0n1c 2022-07-07 08:12:28 -07:00
  • e0f43b02f4 Merge pull request #2274 from splunk/fix-join-issue Jose Enrique Hernandez 2022-07-07 11:12:09 -04:00
  • f28fbb6c54 fix-join-issue tccontre 2022-07-07 17:01:52 +02:00
  • 9135893f95 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:50 -07:00
  • 57e6b92dc6 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:49 -07:00
  • bd0b6c5d0e Branch was auto-updated. pyth0n1c 2022-07-07 07:56:48 -07:00
  • 012b360989 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:47 -07:00
  • 16f3dc8246 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:46 -07:00
  • 169739041d Branch was auto-updated. pyth0n1c 2022-07-07 07:56:45 -07:00
  • 58d0930679 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:44 -07:00
  • 2148b9b053 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:43 -07:00
  • 221195e8c2 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:42 -07:00
  • 38d91caf77 Branch was auto-updated. pyth0n1c 2022-07-07 07:56:41 -07:00
  • 61a698f574 Merge pull request #2273 from splunk/mispelling_in_lookup Jose Enrique Hernandez 2022-07-07 10:56:19 -04:00
  • 9cc85a614f Update security_services.csv Jose Enrique Hernandez 2022-07-07 10:43:17 -04:00
  • b9450b3a32 azorult-bomb3 tccontre 2022-07-06 13:03:14 +02:00
  • e34e8797d1 Update windows_remote_services_rdp_enable.yml tccontre 2022-07-05 15:41:09 +02:00
  • 7cea438ff9 Update windows_remote_services_allow_remote_assistance.yml tccontre 2022-07-05 15:38:57 +02:00
  • 8a95bfd0b8 Update windows_remote_services_allow_remote_assistance.yml tccontre 2022-07-05 15:37:46 +02:00
  • 16a9e7c3af Update windows_remote_services_allow_rdp_in_firewall.yml tccontre 2022-07-05 15:36:27 +02:00
  • 0ed61a57f4 Edit the search SPL gowthamarajr 2022-07-01 17:12:05 -04:00
  • 9689073946 Edit windows_powerview_kerberos_service_ticket_request detection gowthamarajr 2022-07-01 16:24:42 -04:00
  • 76642e3c97 MMC mhaag-spl 2022-07-01 07:43:45 -06:00
  • ecbf458418 Update windows_modify_registry_disable_windows_security_center_notif.yml tccontre 2022-07-01 12:07:31 +02:00
  • f6500dc1f6 Update disable_defender_submit_samples_consent_feature.yml tccontre 2022-07-01 11:47:38 +02:00
  • aca6fba26f azorult-bomb2 tccontre 2022-07-01 10:17:53 +02:00
  • fd5597767b azorult-bomb2 tccontre 2022-07-01 09:59:12 +02:00
  • 73f04bcc9c test sandbox Xiao Lin 2022-06-30 16:28:31 -07:00
  • 52abbc9408 Changing enrichment failures from error prints to error prints AND failures. pyth0n1c 2022-06-30 15:47:29 -07:00
  • cb1ba3c884 Added slightly more verbose printing to track high-level progress in CICD. pyth0n1c 2022-06-30 11:12:50 -07:00
  • bc08339ed4 Update windows_odbcconf_hunting.test.yml mhaag-spl 2022-06-30 12:12:23 -06:00
  • 45736b5ed7 Updated CI/CD Workflow and python code in contentctl so that progress update are not output when running in CICD environment. Outputting all of this data causes thousands of lines of output logs to be generated in CICD. This info is only relevant when running locally in a tty. pyth0n1c 2022-06-30 10:52:00 -07:00
  • 679345b153 fix mhaag-spl 2022-06-30 11:41:22 -06:00
  • bf4c3d8a2a ODBC mhaag-spl 2022-06-30 10:30:13 -06:00
  • 790e77e380 azorult-bomb2 tccontre 2022-06-30 12:41:27 +02:00
  • d3e6627d26 azorult-bomb2 tccontre 2022-06-30 12:36:22 +02:00
  • 8b7f7d20eb in-memory optimization for fetching CVE enrichment and app enrichment, even if skip_enrichment or cached_and_offline are disabled. pyth0n1c 2022-06-29 16:53:17 -07:00
  • 28c799e829 model to detect risky commands Kumar Sharad 2022-06-29 23:45:27 +02:00
  • aeceacc737 updating docs and package bits [ci skip] research bot 2022-06-29 21:25:28 +00:00
  • ea3eac483b Updating search string in a field from objectclass to objectcategory. pyth0n1c 2022-06-29 13:45:17 -07:00