admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • a827841f26 Branch was auto-updated. Bhavin Patel 2021-12-08 14:34:03 -08:00
  • 70a9640500 Merge pull request #1877 from splunk/dependabot/pip/distlib-0.3.4 pyth0n1c 2021-12-08 14:33:44 -08:00
  • 18d63fd252 Merge branch 'lateralmovement_playbooks' of github.com:splunk/security_content into lateralmovement_playbooks Lou Stella 2021-12-08 16:27:51 -06:00
  • 83e06f4f2f Extra character removal Lou Stella 2021-12-08 16:27:38 -06:00
  • 6ad4d8c345 Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:24 -08:00
  • 4b35283cd5 Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:23 -08:00
  • 02e5d03e58 Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:22 -08:00
  • 19dbb44c27 Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:21 -08:00
  • 64f866218d Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:19 -08:00
  • 7cf66864f7 Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:15 -08:00
  • e86832ce2d Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:14 -08:00
  • 4ae8cff12c Branch was auto-updated. Bhavin Patel 2021-12-08 14:26:13 -08:00
  • c24d68268b Merge pull request #1872 from splunk/dependabot/pip/charset-normalizer-2.0.9 pyth0n1c 2021-12-08 14:25:53 -08:00
  • 8f8f4abca5 Branch was auto-updated. Bhavin Patel 2021-12-08 14:20:01 -08:00
  • 2b0c0264ec Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:59 -08:00
  • e81b543b36 Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:58 -08:00
  • 553e1187cc Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:57 -08:00
  • fe8912e6c9 Bump distlib from 0.3.3 to 0.3.4 dependabot[bot] 2021-12-08 22:19:55 +00:00
  • 05180a2f60 Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:54 -08:00
  • 132bd8fc2d Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:52 -08:00
  • b034e19a8c Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:52 -08:00
  • e20d814144 Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:51 -08:00
  • 3f2bc0b82d Branch was auto-updated. Bhavin Patel 2021-12-08 14:19:49 -08:00
  • 9901987bae Merge pull request #1871 from splunk/dependabot/pip/simplejson-3.17.6 pyth0n1c 2021-12-08 14:19:43 -08:00
  • 0077b9edac Merge pull request #1870 from splunk/dependabot/pip/pre-commit-2.16.0 pyth0n1c 2021-12-08 14:19:23 -08:00
  • 5a554f3b5b Updated paths in workflows that changed due to relocating the automated_detection_testing folder in bin/ pyth0n1c 2021-12-08 14:09:22 -08:00
  • 04ba2b5ae6 Merge branch 'develop' into DetectionTestingDocker pyth0n1c 2021-12-08 13:04:28 -08:00
  • cc4f91d8c2 Moved everything into the bin directory. pyth0n1c 2021-12-08 12:46:06 -08:00
  • 47197fbab1 Merge branch 'T1059' of https://github.com/splunk/security_content into T1059 mhaag-spl 2021-12-08 13:44:26 -07:00
  • 219ba97d2d installerfiletakeover mhaag-spl 2021-12-08 13:44:23 -07:00
  • c26ad1f87c Merge branch 'T1059' of https://github.com/splunk/security_content into T1059 Detection Testing Service 2021-12-08 20:29:15 +00:00
  • 7f5d11bcd9 Added detection testing service results inWindows DISM Remove Defender root 2021-12-08 20:29:14 +00:00
  • cd36c6dd6f Raccine Disable mhaag-spl 2021-12-08 13:25:21 -07:00
  • e3a84f8f6e Defense mhaag-spl 2021-12-08 13:07:50 -07:00
  • 8f55eb5848 Proper summary.json files are now always generated after a run of the CI. It does not require a separate run of summarize_json.py. Becuase the CI runs different jobs, though, it is still required to run this explicitly in the CI. Also fixed an issue where searches that resulted in an error had incorrect json output due to improper python error handling. pyth0n1c 2021-12-08 12:00:51 -08:00
  • 3b58b30516 Adding custom functions & playbooks Lou Stella 2021-12-08 13:58:46 -06:00
  • dbaa641e13 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 mvelazco 2021-12-08 13:41:07 -05:00
  • 648bf1fc6e minor fixes mvelazco 2021-12-08 13:41:04 -05:00
  • da2c9b74c3 Update ssa___anomalous_usage_of_account_credentials.yml Lou Stella 2021-12-08 12:22:47 -06:00
  • 6e4a5bfdf5 Create ssa___anomalous_usage_of_account_credentials.yml Lou Stella 2021-12-08 12:20:10 -06:00
  • 8cc5adc54c Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:32 -08:00
  • a65ae6f35b Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:31 -08:00
  • 1ecb6d9cc6 Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:30 -08:00
  • ef05534704 Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:29 -08:00
  • 5673f80041 Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:28 -08:00
  • 456d7483d6 Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:24 -08:00
  • 685ab6681a Branch was auto-updated. Bhavin Patel 2021-12-08 09:36:23 -08:00
  • 0934e5ea2f Merge pull request #1860 from splunk/BA Jose Enrique Hernandez 2021-12-08 12:36:06 -05:00
  • ef86431e0f Branch was auto-updated. Bhavin Patel 2021-12-08 07:37:39 -08:00
  • 56278252ec Branch was auto-updated. Bhavin Patel 2021-12-08 07:37:37 -08:00
  • 16a5285957 Merge pull request #1859 from splunk/re-ssa Jose Enrique Hernandez 2021-12-08 10:37:18 -05:00
  • 2e4bebab22 BA detections P4T12ICK 2021-12-08 15:27:44 +01:00
  • 7e1fbbc8ad BA detections P4T12ICK 2021-12-08 12:50:13 +01:00
  • 9f6fc87a59 BA detections P4T12ICK 2021-12-08 12:21:40 +01:00
  • 98d9e927e7 BA detections P4T12ICK 2021-12-08 12:08:42 +01:00
  • 95268a9d27 BA detections P4T12ICK 2021-12-08 11:20:58 +01:00
  • 88bbb3dd64 BA detections P4T12ICK 2021-12-08 10:43:36 +01:00
  • 4c8ab01f3c BA detections P4T12ICK 2021-12-08 10:20:36 +01:00
  • ae44ed6e6b BA detections P4T12ICK 2021-12-08 09:59:22 +01:00
  • a7637dae83 BA detections P4T12ICK 2021-12-08 09:46:20 +01:00
  • 934a3727f2 A number of changes. First we quit immediately if docker is not running on the machine... we were missing the quit before but not the check and error message. Next, we fix a persistent problem with storing the output of a test that encounters an error. We also remove some un-needed print statements pyth0n1c 2021-12-07 17:08:11 -08:00
  • a71bd19bdb Bump charset-normalizer from 2.0.7 to 2.0.9 dependabot[bot] 2021-12-07 23:40:51 +00:00
  • 6454098227 Bump simplejson from 3.17.5 to 3.17.6 dependabot[bot] 2021-12-07 23:40:26 +00:00
  • c8cbe5512c Bump pre-commit from 2.14.1 to 2.16.0 dependabot[bot] 2021-12-07 23:40:05 +00:00
  • ec5f5713a1 Update resize_shadowstorage_volume.yml mhaag-spl 2021-12-07 15:54:21 -07:00
  • 7fc627e2a7 fixesnixpost Rod Soto 2021-12-07 14:48:09 -08:00
  • ae3cfa6bc8 fixedspaces Rod Soto 2021-12-07 13:49:34 -08:00
  • 12c8dccc59 added T mhaag-spl 2021-12-07 14:46:35 -07:00
  • 81a49be5e8 Out of the Gates mhaag-spl 2021-12-07 14:46:14 -07:00
  • f0ad0eeccb fixautosuid Rod Soto 2021-12-07 13:39:21 -08:00
  • b2cc42aa10 fixdatasetsinyml Rod Soto 2021-12-07 13:31:15 -08:00
  • 0f87a6011c Changes to support more of interactive mode and interactive_failure_mode as well as better logic around whether or not the password should be printed to the command line. In short, it will be printed if you are in interactive mode and have not included it in the config. If you are interactive and the password is in the config file, you will be warned but it will not be printed. If you are not interactive, it will not be printed unless you ask it to print. pyth0n1c 2021-12-07 13:27:38 -08:00
  • 692a565bef Update ssa___wbadmin_delete_system_backups.test.yml mhaag-spl 2021-12-07 14:01:52 -07:00
  • 3c2c99fb9c Update ssa___wbadmin_delete_system_backups.test.yml mhaag-spl 2021-12-07 13:55:05 -07:00
  • 44bf73018a wbadmin mhaag-spl 2021-12-07 13:31:19 -07:00
  • 9176e24d44 A number of small usability updates. Added and tested a --interactive mode flag and changed --interactive_failure to --no_interactive_failure. Interactive_failure mode is now the default mode. Improved spacing and messages on some error strings. pyth0n1c 2021-12-07 12:11:29 -08:00
  • 890e31a9c1 Update ssa___bcdedit_failure_recovery_modification.test.yml mhaag-spl 2021-12-07 12:38:37 -07:00
  • 51a47f76df Update ssa___bcdedit_failure_recovery_modification.yml mhaag-spl 2021-12-07 12:30:48 -07:00
  • e2abbaffe1 fsutil and bcdedit mhaag-spl 2021-12-07 12:19:41 -07:00
  • faebd2b7cd Merge branch 'BA' of https://github.com/splunk/security_content into BA mhaag-spl 2021-12-07 12:02:14 -07:00
  • d64b454702 Branch was auto-updated. Bhavin Patel 2021-12-07 11:01:51 -08:00
  • 3b7e2ffabf Branch was auto-updated. ssa_dummy_finding_repo Bhavin Patel 2021-12-07 11:01:49 -08:00
  • b4bab318d2 Branch was auto-updated. Bhavin Patel 2021-12-07 11:01:46 -08:00
  • 52ce90917e Branch was auto-updated. Bhavin Patel 2021-12-07 11:01:45 -08:00
  • b409336f85 Merge pull request #1865 from splunk/DetectionBaselineFixes Bhavin Patel 2021-12-07 11:01:28 -08:00
  • 16849ba96e Update ssa___dns_exfiltration_using_nslookup_app.yml mhaag-spl 2021-12-07 11:58:44 -07:00
  • 77d186e946 Update ssa___dns_exfiltration_using_nslookup_app.yml mhaag-spl 2021-12-07 11:51:15 -07:00
  • 6b36d8c6ec DNS Exfil mhaag-spl 2021-12-07 11:43:34 -07:00
  • b51b7dbdf1 Update ssa___detect_rclone_command_line_usage.yml mhaag-spl 2021-12-07 11:40:46 -07:00
  • 3807a2565b Branch was auto-updated. Bhavin Patel 2021-12-07 08:16:58 -08:00
  • 3b07aa32bb Branch was auto-updated. Bhavin Patel 2021-12-07 08:16:57 -08:00
  • 74036fbc3a Branch was auto-updated. Bhavin Patel 2021-12-07 08:16:53 -08:00
  • 9be0cf55f6 Branch was auto-updated. Bhavin Patel 2021-12-07 08:16:51 -08:00
  • 108881783b Branch was auto-updated. Bhavin Patel 2021-12-07 08:16:50 -08:00
  • 0fc4bdbdee Merge pull request #1868 from splunk/dependabot/pip/configparser-5.2.0 pyth0n1c 2021-12-07 08:16:45 -08:00
  • c47fd8fa3b Merge pull request #1867 from splunk/dependabot/pip/more-itertools-8.12.0 pyth0n1c 2021-12-07 08:16:32 -08:00
  • 32870a934f Merge branch 'develop' into dependabot/pip/more-itertools-8.12.0 pyth0n1c 2021-12-07 08:09:48 -08:00
  • 25ff9017fc Branch was auto-updated. Bhavin Patel 2021-12-07 08:09:17 -08:00
  • 2f502b0ca4 Branch was auto-updated. Bhavin Patel 2021-12-07 08:09:16 -08:00
  • 489915ec9d Branch was auto-updated. Bhavin Patel 2021-12-07 08:09:14 -08:00