admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 2c0bc58a6a Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:10 -08:00
  • 51ccf14ddf Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:08 -08:00
  • fba1d395b5 Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:07 -08:00
  • 6eadae069a Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:04 -08:00
  • d52b5980b0 Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:03 -08:00
  • 3074f69e25 Branch was auto-updated. Bhavin Patel 2021-12-02 09:02:01 -08:00
  • fa2a204672 Merge pull request #1858 from splunk/ssa_why_java_why v3.31.0 base3310 Bhavin Patel 2021-12-02 09:01:40 -08:00
  • 0df7bf2cdc Extra filters for java David Dorsey 2021-12-02 08:54:12 -06:00
  • 6457b505db When there is an error checking out a git PR. If the PR number is bad, we will exit. Also updated the CI/CD to test all of develop again. We will look at the results after we have increased the wait time after loading data a bit. pyth0n1c 2021-12-01 15:58:31 -08:00
  • 1747744648 Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:24 -08:00
  • abbbab400f Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:23 -08:00
  • 6197ce96b0 Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:22 -08:00
  • d9cb252a34 Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:20 -08:00
  • 568d2e9481 Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:19 -08:00
  • cf0a7d0c9e Branch was auto-updated. Bhavin Patel 2021-12-01 15:41:18 -08:00
  • 57c1ef30dd Merge pull request #1857 from splunk/RegistryDetectionFixes Bhavin Patel 2021-12-01 15:41:01 -08:00
  • 044d3ccca2 Bump filelock from 3.3.2 to 3.4.0 dependabot[bot] 2021-12-01 23:00:52 +00:00
  • 353513b8c0 Bump identify from 2.3.5 to 2.4.0 dependabot[bot] 2021-12-01 23:00:46 +00:00
  • 7687ca1004 Bump msgpack from 1.0.2 to 1.0.3 dependabot[bot] 2021-12-01 23:00:42 +00:00
  • 531d550b3b Just change the workflow to explicitly test the RegistryDetectionFixes branch. pyth0n1c 2021-12-01 14:44:51 -08:00
  • 3a8dc379bd Restoring modified files because they do not work with the new sysmon. Now, all of the detections in this branch work. pyth0n1c 2021-12-01 14:36:49 -08:00
  • 6e319c2ca7 Branch was auto-updated. Bhavin Patel 2021-12-01 12:16:20 -08:00
  • 837cfc2551 Branch was auto-updated. Bhavin Patel 2021-12-01 12:16:19 -08:00
  • 9836dc85bd Branch was auto-updated. Bhavin Patel 2021-12-01 12:16:15 -08:00
  • cb053c1847 Merge pull request #1771 from splunk/ssa_why_chrome_why Bhavin Patel 2021-12-01 12:15:54 -08:00
  • 76858554a3 Merge branch 'develop' into ssa_why_chrome_why David Dorsey 2021-12-01 14:04:22 -06:00
  • 3d978aebf3 Branch was auto-updated. TR-1173_improve_lolbas Bhavin Patel 2021-12-01 11:42:55 -08:00
  • 4c9fc158cd Branch was auto-updated. Bhavin Patel 2021-12-01 11:42:55 -08:00
  • ee54e4741c Branch was auto-updated. Bhavin Patel 2021-12-01 11:42:52 -08:00
  • 5c0bc7990c Branch was auto-updated. Bhavin Patel 2021-12-01 11:42:51 -08:00
  • a5d81f3cd5 Merge pull request #1835 from splunk/ssa_minor_update Michael Haag 2021-12-01 12:42:32 -07:00
  • 6999693e3b fixed Michael Haag 2021-12-01 12:34:20 -07:00
  • f0157408a7 Updated some words Michael Haag 2021-12-01 12:28:38 -07:00
  • 3872168920 Merge branch 'ssa_why_chrome_why' of github.com:splunk/security-content into ssa_why_chrome_why David Dorsey 2021-12-01 13:15:52 -06:00
  • 31342ab905 Fixed data model David Dorsey 2021-12-01 13:15:39 -06:00
  • 859bd9c6da Some small changes dealing with errors during a test. pyth0n1c 2021-12-01 11:00:04 -08:00
  • 7300bfe836 Update ssa___resize_shadowstorage_volume.yml Michael Haag 2021-12-01 11:50:33 -07:00
  • 7b4d6013f1 Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:37 -08:00
  • ff3fb25109 Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:35 -08:00
  • 20317e465f Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:32 -08:00
  • 128bf22f39 Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:31 -08:00
  • aab2916b16 Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:30 -08:00
  • 6dd8123c0d Branch was auto-updated. Bhavin Patel 2021-12-01 10:31:28 -08:00
  • f8c2d3a4ba Merge pull request #1852 from splunk/rclone Bhavin Patel 2021-12-01 10:31:09 -08:00
  • 87f62f2177 Fixed data model David Dorsey 2021-11-30 22:23:31 -06:00
  • c085327a72 Change the detection testing mode to all for a test of everything. pyth0n1c 2021-11-30 19:33:46 -08:00
  • c9c2f7c3e3 Initial support for testing if a container crashes or fails to start during setup. In that case, the whole test will finish, the other containers will be stopped, and we will fail. pyth0n1c 2021-11-30 19:32:52 -08:00
  • 83c9220411 adding distinct count d1vious 2021-11-30 22:08:30 -05:00
  • e77a0db31d major fixes to the detection, include, changing logic to use distinct count, added more objects to the body that make the alert useful, as well as renaming, and overhauling description d1vious 2021-11-30 20:26:48 -05:00
  • b4caaf23a1 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-11-30 16:32:55 -08:00
  • d61b908f5d Branch was auto-updated. Bhavin Patel 2021-11-30 16:19:12 -08:00
  • 78be05b638 Branch was auto-updated. rclone Bhavin Patel 2021-11-30 16:19:11 -08:00
  • 46b368785a Branch was auto-updated. Bhavin Patel 2021-11-30 16:19:10 -08:00
  • dd2475c402 Branch was auto-updated. Bhavin Patel 2021-11-30 16:19:10 -08:00
  • d557407f94 Branch was auto-updated. Bhavin Patel 2021-11-30 16:19:07 -08:00
  • d468fdc273 Branch was auto-updated. Bhavin Patel 2021-11-30 16:19:05 -08:00
  • a93687e353 Merge pull request #1843 from splunk/issue_1839 pyth0n1c 2021-11-30 16:18:49 -08:00
  • fee83d2cfd Check for splunkbase_username and splunkbase_password immediately if Splunkbase apps are to be installed and fail with a descriptive error if they are not provided. pyth0n1c 2021-11-30 14:22:34 -08:00
  • 9700571e0c Set required version of jsonschema. Added an --interactive_failure command line option. Fixed a typo and removed non required jsonschema library pyth0n1c 2021-11-30 13:43:25 -08:00
  • e524ecb408 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:11 -08:00
  • 4d2221de73 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:10 -08:00
  • 698356d345 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:08 -08:00
  • 991d5ab905 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:06 -08:00
  • 78fec6e11e Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:05 -08:00
  • 3bdbba50e0 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:05 -08:00
  • 78c5f10942 Branch was auto-updated. Bhavin Patel 2021-11-30 12:02:04 -08:00
  • c5554e4dc8 Merge pull request #1850 from splunk/double-fix Bhavin Patel 2021-11-30 12:01:40 -08:00
  • f1a10f0d65 Upload the updated test file so we can replicate the test in the future. pyth0n1c 2021-11-30 10:36:12 -08:00
  • 918b680350 update experimental detection names mvelazco 2021-11-30 13:20:42 -05:00
  • e759f01e0c Better command line summary of pass and fail for summarize_json.py pyth0n1c 2021-11-30 10:16:05 -08:00
  • eb6378e805 Made some changes to properly supporting testing changed test file. Had some trouble before locating the appropriate detection file. Also throw an error if we try to test a file that was changed and is in the experimental path. Set up to run a test of the DetectionBaselineFixes branch to test these changes in GitHub Actions. pyth0n1c 2021-11-30 09:52:36 -08:00
  • 5fa8ad9210 Merge branch 'TR-1085_LateralMovement_4' of github.com:splunk/security_content into TR-1085_LateralMovement_4 mvelazco 2021-11-30 12:51:46 -05:00
  • b5783ab849 adding 2 experimental detections mvelazco 2021-11-30 12:51:43 -05:00
  • 97c83a1864 Created Experimental folder in tests, as well as cloud, endpoint, and network subfolders, and moved some tests into it. This corresponds with the experimental folder in detections. pyth0n1c 2021-11-30 09:47:01 -08:00
  • e1947f155a Added detection testing service results inDetect RClone Command-Line Usage root 2021-11-30 12:56:06 +00:00
  • b87061f794 rookie mistake Michael Haag 2021-11-30 05:34:29 -07:00
  • 6843ccadc5 refactoring P4T12ICK 2021-11-30 08:25:55 +01:00
  • 868c98082b Small change to test changes on a specific branch instead of develop. pyth0n1c 2021-11-29 16:49:06 -08:00
  • 84e54e26d6 Changing to the correct baseline paths after restructuring repo AAAAADELETE pyth0n1c 2021-11-29 16:44:40 -08:00
  • bae2e35b1c fix Michael Haag 2021-11-29 16:19:21 -07:00
  • 81e952185e Rclone Haagrid mhaag-spl 2021-11-29 15:55:38 -07:00
  • 180785c7d4 Certain types of error would have missing fields in the results json, causing the summarization code to crash. Fixed that. Also sorted the output of the summarization to made it easier to look at a glance. Errors and failures will be at the top and the rest will be sorted alphabetically. pyth0n1c 2021-11-29 14:40:17 -08:00
  • 7ea845c9d5 Added detection testing service results inPossible Lateral Movement PowerShell Spawn root 2021-11-29 22:12:37 +00:00
  • 0254c60a28 adding detection mvelazco 2021-11-29 16:50:39 -05:00
  • fe7817f28a Update detect_html_help_renamed.yml double-fix mhaag-spl 2021-11-29 13:43:41 -07:00
  • 2b3fd66bb3 Run a test on everything, saving the intermediate files to help debugging. pyth0n1c 2021-11-29 11:54:26 -08:00
  • fff797358c Run a handlful of tests on push to produce output artifacts. pyth0n1c 2021-11-29 11:34:59 -08:00
  • 95e7169e05 fix quote pyth0n1c 2021-11-29 10:53:29 -08:00
  • e8fb9578ea Change types of quotes around schedule pyth0n1c 2021-11-29 10:51:44 -08:00
  • 38ad36c296 Run at 55th minute each hour for testing. pyth0n1c 2021-11-29 10:49:54 -08:00
  • 024a0be7ff Branch was auto-updated. Bhavin Patel 2021-11-25 05:31:55 -08:00
  • bac32282a4 Branch was auto-updated. Bhavin Patel 2021-11-25 05:31:54 -08:00
  • 73ddbbfd27 Branch was auto-updated. Bhavin Patel 2021-11-25 05:31:53 -08:00
  • 699dfa0f5c Branch was auto-updated. Bhavin Patel 2021-11-25 05:31:52 -08:00
  • 35ccc2cf60 Branch was auto-updated. Bhavin Patel 2021-11-25 05:31:50 -08:00
  • 49170484ea Merge pull request #1846 from splunk/ssa_anomalous_usage_of_7zip P4T12ICK 2021-11-25 14:31:31 +01:00
  • 127dae7be2 Branch was auto-updated. Bhavin Patel 2021-11-25 05:07:29 -08:00
  • 19d0ead8c5 Branch was auto-updated. Bhavin Patel 2021-11-25 05:07:27 -08:00
  • 80ba7482e4 Branch was auto-updated. Bhavin Patel 2021-11-25 05:07:25 -08:00
  • 0bd09d6126 Branch was auto-updated. Bhavin Patel 2021-11-25 05:07:24 -08:00