admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 37f388b5f9 Branch was auto-updated. pyth0n1c 2022-01-13 09:20:21 -08:00
  • 27953f5ffc Branch was auto-updated. pyth0n1c 2022-01-13 09:20:20 -08:00
  • 3524798c84 Branch was auto-updated. pyth0n1c 2022-01-13 09:20:18 -08:00
  • dfb1a5acea Branch was auto-updated. pyth0n1c 2022-01-13 09:20:16 -08:00
  • b2458117ec Branch was auto-updated. pyth0n1c 2022-01-13 09:20:13 -08:00
  • e0eb910257 Branch was auto-updated. pyth0n1c 2022-01-13 09:20:10 -08:00
  • 359c3159d0 Branch was auto-updated. pyth0n1c 2022-01-13 09:20:09 -08:00
  • 51a273636d Merge pull request #1934 from splunk/haagin Bhavin Patel 2022-01-13 09:19:48 -08:00
  • 0a7b4d27de minor fix patel-bhavin 2022-01-13 09:17:03 -08:00
  • 7935b368bc linux_persist_priv_batch_5 tccontre 2022-01-13 18:11:17 +01:00
  • f808a4eb4a Update linux_possible_append_command_to_profile_config_file.yml tccontre 2022-01-13 17:57:34 +01:00
  • 3356f45dab Update linux_nopasswd_entry_in_sudoers_file.yml tccontre 2022-01-13 17:56:48 +01:00
  • 5d630fcbba Update linux_possible_append_command_to_profile_config_file.yml tccontre 2022-01-13 17:54:39 +01:00
  • edd652e723 Update linux_possible_access_or_modification_of_sshd_config_file.yml tccontre 2022-01-13 17:54:25 +01:00
  • 8d4d33bf5a Update linux_nopasswd_entry_in_sudoers_file.yml tccontre 2022-01-13 17:54:09 +01:00
  • b9f1449548 Updates mhaag-spl 2022-01-13 09:18:12 -07:00
  • a4a1aead17 Merge branch 'splunk:develop' into test/enrich_detections rushabhs-crest 2022-01-13 13:10:39 +05:30
  • b484bdb336 Merge branch 'develop' of github.com:splunk/security-content into tf23 tf23 Xiao Lin 2022-01-12 17:50:21 -08:00
  • fdcdb61298 Forgot to include the small change to the required_fields_cleaner.py that resulted in the full model.submodel.fieldname being included in required_fields. pyth0n1c 2022-01-12 17:13:16 -08:00
  • 5b2a180e68 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:23 -08:00
  • c96f21e154 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:20 -08:00
  • f96ad49f42 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:18 -08:00
  • e36c30c17f Branch was auto-updated. pyth0n1c 2022-01-12 16:50:17 -08:00
  • 4d061412b3 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:16 -08:00
  • 860320c367 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:15 -08:00
  • fc4a8ffc25 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:14 -08:00
  • 7cdfbb7f8e Branch was auto-updated. pyth0n1c 2022-01-12 16:50:12 -08:00
  • 97d1594fed Branch was auto-updated. pyth0n1c 2022-01-12 16:50:11 -08:00
  • 67bd432c77 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:10 -08:00
  • 58a77a0201 Branch was auto-updated. pyth0n1c 2022-01-12 16:50:09 -08:00
  • 20df3795b3 Merge pull request #1933 from splunk/DockerDetectionUpdatesAndFixes Bhavin Patel 2022-01-12 16:49:51 -08:00
  • 6a7f917707 Fix to requirements to include psutil. Removed import of deleted modules/aws_service.py pyth0n1c 2022-01-12 16:40:56 -08:00
  • cdc902e052 Removed ansible from requirements and boto3 from requirements. Neither are used anymore pyth0n1c 2022-01-12 16:35:11 -08:00
  • 8d669b66f8 Removing previous file that was added accidentally in last commit. Updating the detection-testing.yml file to remove ls of non-existant directory as intended pyth0n1c 2022-01-12 16:17:38 -08:00
  • fc189e92ee Removed ls or directory that didn't exist anymore in detection-testing.yml pyth0n1c 2022-01-12 16:10:21 -08:00
  • 2cb3390164 Migrated the docker detection testing from build-and-validate.yml into detection-testing.yml workflow. Removed the unused AWS batch testing workflow. This makes much more sense pyth0n1c 2022-01-12 16:05:22 -08:00
  • e0b69e560c Branch was auto-updated. pyth0n1c 2022-01-12 15:44:37 -08:00
  • 0aa533a262 Branch was auto-updated. pyth0n1c 2022-01-12 15:44:36 -08:00
  • 2022fc41d8 Branch was auto-updated. pyth0n1c 2022-01-12 15:44:35 -08:00
  • aa0b27ac2e Branch was auto-updated. pyth0n1c 2022-01-12 15:44:34 -08:00
  • 1f43aace2b Branch was auto-updated. pyth0n1c 2022-01-12 15:44:33 -08:00
  • 096a4ec6f6 Branch was auto-updated. pyth0n1c 2022-01-12 15:44:32 -08:00
  • 890def0a17 Branch was auto-updated. pyth0n1c 2022-01-12 15:44:32 -08:00
  • 247fa24abc Branch was auto-updated. pyth0n1c 2022-01-12 15:44:31 -08:00
  • 54c06ab774 Branch was auto-updated. pyth0n1c 2022-01-12 15:44:30 -08:00
  • 5fb6a6e1cb Branch was auto-updated. pyth0n1c 2022-01-12 15:44:27 -08:00
  • 6728ae406e Branch was auto-updated. pyth0n1c 2022-01-12 15:44:25 -08:00
  • 5af2c3a867 Merge pull request #1927 from splunk/haagin Bhavin Patel 2022-01-12 15:44:09 -08:00
  • 08bc674ab5 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:44 -08:00
  • 2fe98e4e28 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:40 -08:00
  • 2a60d91355 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:38 -08:00
  • 4a51499bc3 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:37 -08:00
  • cf347aa620 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:36 -08:00
  • 85ac64bb8f Branch was auto-updated. pyth0n1c 2022-01-12 15:19:35 -08:00
  • 179402eac4 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:34 -08:00
  • 5e1897fd52 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:33 -08:00
  • c419363fc9 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:32 -08:00
  • d0645ae350 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:31 -08:00
  • 1474829074 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:30 -08:00
  • d6601a8599 Branch was auto-updated. pyth0n1c 2022-01-12 15:19:29 -08:00
  • dee77e7957 Merge pull request #1932 from splunk/DockerDetectionUpdatesAndFixes Bhavin Patel 2022-01-12 15:19:13 -08:00
  • 73998ca5c1 Changed summarize_json.py to return success (0) code even if there are failures or errors found during testing during the initial testing of CI/CD. This is because we don't want these to hold up the build process. Eventually we will report actual success/failure of all tests after we have the opportunity to validate the new testing pipeline and make updates to failing searches. pyth0n1c 2022-01-12 14:57:17 -08:00
  • 649c43f237 Update windows_possible_credential_dumping.yml Bhavin Patel 2022-01-12 14:39:35 -08:00
  • 0cd7c9460f Branch was auto-updated. pyth0n1c 2022-01-12 14:23:31 -08:00
  • 33a2b27daa Branch was auto-updated. pyth0n1c 2022-01-12 14:23:30 -08:00
  • d8b009ceec Branch was auto-updated. pyth0n1c 2022-01-12 14:23:29 -08:00
  • b3def2f07c Branch was auto-updated. pyth0n1c 2022-01-12 14:23:28 -08:00
  • b69bcfaedb Branch was auto-updated. pyth0n1c 2022-01-12 14:23:27 -08:00
  • 6408f2d14a Branch was auto-updated. pyth0n1c 2022-01-12 14:23:26 -08:00
  • 2fd9de9972 Branch was auto-updated. pyth0n1c 2022-01-12 14:23:25 -08:00
  • ec71405e8d Branch was auto-updated. pyth0n1c 2022-01-12 14:23:25 -08:00
  • c7c3c1e7ac Branch was auto-updated. pyth0n1c 2022-01-12 14:23:24 -08:00
  • ba36266e95 Branch was auto-updated. pyth0n1c 2022-01-12 14:23:22 -08:00
  • bedfc5ca10 Branch was auto-updated. pyth0n1c 2022-01-12 14:23:21 -08:00
  • 68e68e4a9f Branch was auto-updated. pyth0n1c 2022-01-12 14:23:16 -08:00
  • 41b58642c4 Merge pull request #1931 from splunk/DockerDetectionUpdatesAndFixes Bhavin Patel 2022-01-12 14:22:53 -08:00
  • c9d0e72cf3 removed accidental brackets from branch name in CI testing branch name. pyth0n1c 2022-01-12 14:04:38 -08:00
  • 588eaad92a Accidentally hardcoded the branch name for testing. Fixed. pyth0n1c 2022-01-12 13:44:01 -08:00
  • 97416c4bc9 Branch was auto-updated. pyth0n1c 2022-01-12 12:18:09 -08:00
  • 4b51ae224f Branch was auto-updated. pyth0n1c 2022-01-12 12:18:03 -08:00
  • 711bdf3ad6 Branch was auto-updated. pyth0n1c 2022-01-12 12:18:00 -08:00
  • 1076d41131 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:59 -08:00
  • 0c79db9196 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:57 -08:00
  • 2a03118134 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:56 -08:00
  • 5d42ca4454 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:54 -08:00
  • 6310427166 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:53 -08:00
  • 1eb9bf8a1e Branch was auto-updated. pyth0n1c 2022-01-12 12:17:51 -08:00
  • fd60029855 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:49 -08:00
  • 50176afcc8 Branch was auto-updated. pyth0n1c 2022-01-12 12:17:47 -08:00
  • 054653023e Branch was auto-updated. pyth0n1c 2022-01-12 12:17:46 -08:00
  • 52e482c604 Merge pull request #1928 from splunk/DockerDetectionUpdatesAndFixes Bhavin Patel 2022-01-12 12:17:22 -08:00
  • ecf27cf81f Updated almost all detections again. Changed required_fields from submodel.fieldname to model.submodel.fieldname as discussed with the CREST Team. pyth0n1c 2022-01-12 11:31:15 -08:00
  • b12ccf0cd2 Added a readme.md. Need to check that the markdown renders appropriately pyth0n1c 2022-01-12 10:54:45 -08:00
  • 42920eccd9 comment out Mustang configs patel-bhavin 2022-01-12 10:53:33 -08:00
  • 3afef5d559 Updated the error for providing both PR and commit_hash to a warning. This was causing an error during PR triggered testing in github actions as both of these are provided. Perhaps we actually can include both of these and can get old PRs based on commit hash, but until then we will just test using the PR number and ignore the commit_hash if we find both. pyth0n1c 2022-01-12 10:38:23 -08:00
  • 86328655ec fixlinpe Rod Soto 2022-01-12 10:21:50 -08:00
  • 020e9d5f58 endpfx Rod Soto 2022-01-12 09:56:26 -08:00
  • c9f12163a8 fixedformatt Rod Soto 2022-01-12 09:46:50 -08:00
  • 815fa610e9 Updated PowerShell - Connect To Internet With Hidden Window mhaag-spl 2022-01-12 09:45:32 -07:00
  • 56b5159b5d Update windows_possible_credential_dumping.test.yml mhaag-spl 2022-01-12 09:39:14 -07:00