admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • dbee750576 updated github action P4T12ICK 2022-02-15 10:20:47 +01:00
  • b775bf74e0 updated github action P4T12ICK 2022-02-15 10:16:54 +01:00
  • a91d3bea0a updated github action P4T12ICK 2022-02-15 10:07:53 +01:00
  • ceabbaad1f updated github action P4T12ICK 2022-02-15 10:03:48 +01:00
  • ae7cc29279 updated github action P4T12ICK 2022-02-15 09:28:34 +01:00
  • 4e197b93e1 updated github action P4T12ICK 2022-02-15 09:24:44 +01:00
  • f1b2857bf4 updated github action P4T12ICK 2022-02-15 09:15:50 +01:00
  • f47930004b updated github action P4T12ICK 2022-02-15 09:06:42 +01:00
  • 0a4f0ad01e updated github action P4T12ICK 2022-02-15 08:50:47 +01:00
  • e941098259 Merge branch 'Log4ForgeLog4ShellLog4RCE' of github.com:splunk/security_content into Log4ForgeLog4ShellLog4RCE d1vious 2022-02-14 21:29:21 -05:00
  • 3a3d0a9922 adding powershell downloadfile but not passing d1vious 2022-02-14 21:28:57 -05:00
  • 7648c76c0b A handful of easy detection test fixes to get the tests to detections to work with the newest application baseline. pyth0n1c 2022-02-14 16:57:33 -08:00
  • 11ab86fdf4 remove detections aalready covered patel-bhavin 2022-02-14 15:03:24 -08:00
  • c521d07f7d file updates patel-bhavin 2022-02-14 14:59:36 -08:00
  • 1062a0bf93 duplicates patel-bhavin 2022-02-14 14:06:37 -08:00
  • 5783f37e2a Merge branch 'nixpost3' of github.com:splunk/security_content into nixpost3 patel-bhavin 2022-02-14 13:51:42 -08:00
  • 34f231e3a2 version 1 patel-bhavin 2022-02-14 13:51:34 -08:00
  • 548f9fc1b5 Branch was auto-updated. pyth0n1c 2022-02-14 13:12:48 -08:00
  • 0af3013b1f Branch was auto-updated. pyth0n1c 2022-02-14 13:12:47 -08:00
  • 67760a5cca Branch was auto-updated. pyth0n1c 2022-02-14 13:12:46 -08:00
  • cc58cc7e8f Branch was auto-updated. pyth0n1c 2022-02-14 13:12:45 -08:00
  • 9a05f8c086 Branch was auto-updated. pyth0n1c 2022-02-14 13:12:41 -08:00
  • 1ff26167c4 Branch was auto-updated. pyth0n1c 2022-02-14 13:12:39 -08:00
  • 7fa988a18a Branch was auto-updated. pyth0n1c 2022-02-14 13:12:38 -08:00
  • 0ef2035d78 Merge pull request #1992 from splunk/tuneup Bhavin Patel 2022-02-14 13:12:19 -08:00
  • eec391c8d8 Branch was auto-updated. pyth0n1c 2022-02-14 12:59:24 -08:00
  • fdfcbcb987 Branch was auto-updated. pyth0n1c 2022-02-14 12:59:18 -08:00
  • 58d3d914a8 Branch was auto-updated. pyth0n1c 2022-02-14 12:59:17 -08:00
  • 9c5ae030cc Branch was auto-updated. pyth0n1c 2022-02-14 12:59:09 -08:00
  • 232e00412c Branch was auto-updated. pyth0n1c 2022-02-14 12:59:08 -08:00
  • d953780c8c Branch was auto-updated. pyth0n1c 2022-02-14 12:59:06 -08:00
  • af6dabf0e5 Branch was auto-updated. pyth0n1c 2022-02-14 12:59:05 -08:00
  • 52ab302315 Merge pull request #2016 from splunk/Multiplicity Bhavin Patel 2022-02-14 12:58:44 -08:00
  • 73cb36c626 adding working detection d1vious 2022-02-14 15:54:12 -05:00
  • 1cdd6386f3 updating the detection d1vious 2022-02-14 13:47:06 -05:00
  • 0a2618f686 adding 1 detection d1vious 2022-02-14 13:40:24 -05:00
  • a1d127126a adding template detection d1vious 2022-02-14 11:11:47 -05:00
  • f7f0b2712d Merge branch 'refactored_security_content' of github.com:splunk/security_content into refactored_security_content P4T12ICK 2022-02-14 16:48:08 +01:00
  • 0b5b4e2388 generate API package working P4T12ICK 2022-02-14 16:45:27 +01:00
  • d96849c449 linux_lolbin_stage1 tccontre 2022-02-14 10:17:46 +01:00
  • 73ba128590 fixing duplicate lookups bug d1vious 2022-02-11 12:11:10 -05:00
  • 48393bb964 Bump attrs from 21.2.0 to 21.4.0 dependabot[bot] 2022-02-11 16:59:09 +00:00
  • d14b240186 Branch was auto-updated. pyth0n1c 2022-02-11 08:59:01 -08:00
  • af4da12519 Branch was auto-updated. pyth0n1c 2022-02-11 08:59:00 -08:00
  • 8ab48aefb2 Branch was auto-updated. pyth0n1c 2022-02-11 08:58:58 -08:00
  • 8e3468002b Merge pull request #2005 from splunk/dependabot/pip/semantic-version-2.9.0 Jose Enrique Hernandez 2022-02-11 11:58:35 -05:00
  • c284abde06 Branch was auto-updated. pyth0n1c 2022-02-11 08:52:57 -08:00
  • 363f78e77d Branch was auto-updated. pyth0n1c 2022-02-11 08:52:56 -08:00
  • c69f075c4b Branch was auto-updated. pyth0n1c 2022-02-11 08:52:54 -08:00
  • a37dd2c427 Branch was auto-updated. pyth0n1c 2022-02-11 08:52:53 -08:00
  • 9f20073cfd Merge pull request #2008 from splunk/dependabot/pip/urllib3-1.26.8 Jose Enrique Hernandez 2022-02-11 11:52:30 -05:00
  • 5b11f3daff linux_lolbin_stage1 tccontre 2022-02-11 13:44:14 +01:00
  • 4f0622a5aa Update to latest Splunkbase Windows Sysmon pyth0n1c 2022-02-10 16:24:17 -08:00
  • 889f27064c Downloaded apps are now cached by default. This can save a huge amount of time on startup, especially for a large number of containers or for slower connections. Otherwise, each container that is set up needs over 600MB of throughput. pyth0n1c 2022-02-10 15:50:25 -08:00
  • ace7ccbb6d Update windows_schtasks_create_run_as_system.yml mhaag-spl 2022-02-10 11:36:02 -07:00
  • ec90ee19d5 Now, when one or more detection tests fail in the CI/CD, it will cause the workflow to fail. In turn, this would prevent a PR from being merged. However, this lets a developer know more easily (without needing to dive into the GitHub Actions logs) whether or not their detections passed successfully. It also upload an extra file called DetectionFailureManifest which is a test file for ONLY the failed tests. You can run this locally on your machine to quickly, interactively debug the failures only. pyth0n1c 2022-02-10 09:17:23 -08:00
  • 6c9c932c30 Branch was auto-updated. pyth0n1c 2022-02-10 09:10:42 -08:00
  • 2b113361e3 Branch was auto-updated. pyth0n1c 2022-02-10 09:10:41 -08:00
  • 98afaaa6b8 Branch was auto-updated. pyth0n1c 2022-02-10 09:10:40 -08:00
  • afa55c5052 Branch was auto-updated. pyth0n1c 2022-02-10 09:10:39 -08:00
  • 428785a15f Revert "Now, failing one or more CI/CD Tests causes" pyth0n1c 2022-02-10 09:07:02 -08:00
  • fe09d6238b Branch was auto-updated. pyth0n1c 2022-02-10 09:04:32 -08:00
  • b8b8c47ff3 Branch was auto-updated. pyth0n1c 2022-02-10 09:04:31 -08:00
  • 110a5e8628 Branch was auto-updated. pyth0n1c 2022-02-10 09:04:29 -08:00
  • 6a93f59340 Branch was auto-updated. pyth0n1c 2022-02-10 09:04:28 -08:00
  • 55e94c3eab Now, failing one or more CI/CD Tests causes the workflow to fail. An additional file is also uploaded called "replicate_failures" which allows the user to easily retest just the failed tests locally. pyth0n1c 2022-02-10 09:04:04 -08:00
  • 40b34450a0 Windows Schtasks Create Run As System mhaag-spl 2022-02-10 09:08:52 -07:00
  • 58a6071d3d Branch was auto-updated. pyth0n1c 2022-02-09 16:53:39 -08:00
  • e456278647 Branch was auto-updated. pyth0n1c 2022-02-09 16:53:37 -08:00
  • 17e2f3c94b Branch was auto-updated. pyth0n1c 2022-02-09 16:53:36 -08:00
  • a1d17cba1a Branch was auto-updated. pyth0n1c 2022-02-09 16:53:35 -08:00
  • ce9493adca Merge pull request #2009 from splunk/TR-1194v2 Bhavin Patel 2022-02-09 16:53:14 -08:00
  • baab603657 Update ssa___unusual_volume_download_from_internal_server.yml Bhavin Patel 2022-02-09 16:45:28 -08:00
  • ee2ee98742 remove duplicate Xiao Lin 2022-02-09 16:44:17 -08:00
  • 4c5f48c507 add detection for unusal volume of data download Xiao Lin 2022-02-09 16:40:45 -08:00
  • a1e6d3e225 update search string Xiao Lin 2022-02-09 15:45:33 -08:00
  • 9a04a4e833 fix a typo Xiao Lin 2022-02-09 14:54:23 -08:00
  • ddd492fe23 update data link to attack_range, move detection to experimental Xiao Lin 2022-02-09 14:23:27 -08:00
  • 62ab576733 Update ssa___unusual_volume_download_from_internal_server.yml Bhavin Patel 2022-02-09 12:06:59 -08:00
  • b31ee54c20 Unusual Volume of Data Download from Internal Server Per Entity Xiao Lin 2022-01-20 19:30:11 -08:00
  • 8bf87d95a7 Branch was auto-updated. pyth0n1c 2022-02-09 16:29:15 -08:00
  • 2c6c4feb55 Branch was auto-updated. pyth0n1c 2022-02-09 16:29:14 -08:00
  • 82adfb243c Branch was auto-updated. pyth0n1c 2022-02-09 16:29:13 -08:00
  • 99e62645bc Branch was auto-updated. pyth0n1c 2022-02-09 16:29:10 -08:00
  • e3d1ae9be7 Bump urllib3 from 1.26.6 to 1.26.8 dependabot[bot] 2022-02-10 00:28:52 +00:00
  • a3c1998e49 Merge pull request #1980 from splunk/dependabot/pip/tomli-2.0.0 Bhavin Patel 2022-02-09 16:28:47 -08:00
  • 6ae9922819 Branch was auto-updated. pyth0n1c 2022-02-09 16:28:22 -08:00
  • 50d6d7e956 Branch was auto-updated. pyth0n1c 2022-02-09 16:28:21 -08:00
  • 68a55989bd Branch was auto-updated. pyth0n1c 2022-02-09 16:28:20 -08:00
  • 7908ba4d01 Merge pull request #1979 from splunk/dependabot/pip/charset-normalizer-2.0.11 Bhavin Patel 2022-02-09 16:28:04 -08:00
  • c4629f483a Bump semantic-version from 2.8.5 to 2.9.0 dependabot[bot] 2022-02-10 00:27:55 +00:00
  • 8d4f4726c2 Branch was auto-updated. pyth0n1c 2022-02-09 16:27:49 -08:00
  • 9de796fb52 Branch was auto-updated. pyth0n1c 2022-02-09 16:27:48 -08:00
  • a929cfee4b Merge pull request #1983 from splunk/dependabot/pip/pre-commit-2.17.0 Bhavin Patel 2022-02-09 16:27:47 -08:00
  • 1fc138c12e Branch was auto-updated. pyth0n1c 2022-02-09 16:27:38 -08:00
  • d05a10a05c Branch was auto-updated. pyth0n1c 2022-02-09 16:27:37 -08:00
  • 2f3e9c7f8f Merge pull request #1984 from splunk/dependabot/pip/pyrsistent-0.18.1 Bhavin Patel 2022-02-09 16:27:27 -08:00
  • fac5da5771 Merge pull request #1997 from splunk/PRdeet Bhavin Patel 2022-02-09 16:27:14 -08:00
  • d0afcb458d Check to ensure that Splunkbase username and password are passed in the config or command line when one or more apps is lacking http_path or local_path. Before, this would be caught later on and not in the beginning. Also, the previous commit added new http_paths for all of the default apps. pyth0n1c 2022-02-09 15:37:34 -08:00
  • c45c1335ae Two changes. First, removed the separate splunkbase_apps and local_apps sections of the config file. They are now unified under a single section called apps. If you don't provide a splunkbase username and password, it will simply use the HTTP target/local_paths. If you do provide those, then it will donwload from splunkbase. However, local_path will override both of these. pyth0n1c 2022-02-09 15:23:04 -08:00