admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c9c996c809 Branch was auto-updated. Bhavin Patel 2021-11-03 19:08:58 -07:00
  • 0838b26f2e Bump ansible in /bin/automated_detection_testing/ci/labeled_data dependabot[bot] 2021-11-04 02:08:58 +00:00
  • 0d0da2a170 Branch was auto-updated. Bhavin Patel 2021-11-03 19:08:57 -07:00
  • 5889e63d1a Branch was auto-updated. Bhavin Patel 2021-11-03 19:08:56 -07:00
  • 962a2e7eef Branch was auto-updated. Bhavin Patel 2021-11-03 19:08:54 -07:00
  • c04a2c73d6 Branch was auto-updated. Bhavin Patel 2021-11-03 19:08:52 -07:00
  • 10f4c3c408 Merge pull request #1778 from splunk/moving_automated_detection_testing_under_bin pyth0n1c 2021-11-03 19:08:34 -07:00
  • 4bbe1891c3 moving under bin d1vious 2021-11-03 21:43:47 -04:00
  • d825a6d82f wrong category patel-bhavin 2021-11-03 17:57:20 -07:00
  • 6592124a12 Uploading the artifacts as different names so that they don't clobber each other. pyth0n1c 2021-11-03 16:49:57 -07:00
  • c4c1db1f2c Fixed up the pathing related to the ESCU Package. pyth0n1c 2021-11-03 16:30:02 -07:00
  • 8c501e789d Distribute testing amongst multiple containers. pyth0n1c 2021-11-03 16:18:41 -07:00
  • 02b586b6c9 Branch was auto-updated. Bhavin Patel 2021-11-03 15:58:18 -07:00
  • c6de395e30 Branch was auto-updated. Bhavin Patel 2021-11-03 15:58:15 -07:00
  • d6135381ad Branch was auto-updated. Bhavin Patel 2021-11-03 15:58:14 -07:00
  • fde91603ec Branch was auto-updated. Bhavin Patel 2021-11-03 15:58:13 -07:00
  • f2c08c40f6 Merge pull request #1769 from splunk/fixing_issue_1767 Bhavin Patel 2021-11-03 15:57:52 -07:00
  • e36969c9cd Branch was auto-updated. Bhavin Patel 2021-11-03 15:11:25 -07:00
  • 88bf05b529 Branch was auto-updated. Bhavin Patel 2021-11-03 15:11:24 -07:00
  • 9834eb83ed Branch was auto-updated. Bhavin Patel 2021-11-03 15:11:23 -07:00
  • b9a68bb1f7 Branch was auto-updated. Bhavin Patel 2021-11-03 15:11:20 -07:00
  • 1ed9d2d649 Branch was auto-updated. Bhavin Patel 2021-11-03 15:11:18 -07:00
  • ed91698f04 Merge pull request #1776 from splunk/ssa_fix Bhavin Patel 2021-11-03 15:10:58 -07:00
  • 8c160f9bca Added detection testing service results inWindows AdFind Exe root 2021-11-03 22:10:48 +00:00
  • df4623a652 Update ssa___modify_acls_permission_of_files_or_folders.yml Lou Stella 2021-11-03 17:04:39 -05:00
  • 1f66d94667 author updates patel-bhavin 2021-11-03 14:38:40 -07:00
  • 0096350774 quotes patel-bhavin 2021-11-03 14:32:17 -07:00
  • 4b4f616bf5 date patel-bhavin 2021-11-03 13:41:39 -07:00
  • da9d9ae021 updates patel-bhavin 2021-11-03 13:40:22 -07:00
  • 72b1fb7df4 Added datamodels to most of the ssa___ detections. Still needs some more attention - there are likely some missing datamodels and some that are incorrect. pyth0n1c 2021-11-03 12:01:00 -07:00
  • c6a98285e9 Branch was auto-updated. Bhavin Patel 2021-11-03 10:43:53 -07:00
  • fc4cc81ad6 Branch was auto-updated. Bhavin Patel 2021-11-03 10:43:52 -07:00
  • 1b29ec4eee Branch was auto-updated. Bhavin Patel 2021-11-03 10:43:50 -07:00
  • 1329ff2998 Branch was auto-updated. Bhavin Patel 2021-11-03 10:43:48 -07:00
  • 50a730bebf Branch was auto-updated. Bhavin Patel 2021-11-03 10:43:47 -07:00
  • cf50083094 Merge pull request #1736 from splunk/expgsuite Bhavin Patel 2021-11-03 10:43:28 -07:00
  • 0dfff97830 yml errors patel-bhavin 2021-11-02 18:11:32 -07:00
  • 767461b47d remove wrong lookup patel-bhavin 2021-11-02 18:04:52 -07:00
  • 1c1d17df17 Merge branch 'expgsuite' of github.com:splunk/security_content into expgsuite patel-bhavin 2021-11-02 18:03:33 -07:00
  • 0a9c396e08 search update patel-bhavin 2021-11-02 18:03:21 -07:00
  • dbc1e604b8 Changed datamodel from Endpoint to Endpoint_Process for a number of the ssa___ detection files. pyth0n1c 2021-11-02 17:40:19 -07:00
  • 244fad2f7e Removed Endpoint, it should be Endpoint_Process for relevant detections. pyth0n1c 2021-11-02 17:34:47 -07:00
  • 80db3a4e86 Added Endpoint to ba_detections.spec.json pyth0n1c 2021-11-02 17:29:55 -07:00
  • 2009a6541c more fixes to getting ssa detections pyth0n1c 2021-11-02 17:22:03 -07:00
  • 26af696757 fixed checking of the ssa filename, I think pyth0n1c 2021-11-02 17:15:02 -07:00
  • 3d84051d80 some print statements during validation to help with debugging pyth0n1c 2021-11-02 17:05:49 -07:00
  • ac4bbd06a6 Just ba_detections to make parsing easier. pyth0n1c 2021-11-02 16:57:47 -07:00
  • f0f7092884 Removed one line from json schema. This should fail, removal and check for failure checks that we fixed the underlying issue. pyth0n1c 2021-11-02 16:51:11 -07:00
  • 5117990730 Added a ba_detections.spec.json file for validation of the BA detections. Updated validate_schema to use a different shcema for BA detections vs non BA detections. pyth0n1c 2021-11-02 16:30:49 -07:00
  • 581ace9401 Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:15 -07:00
  • bb1b3ed291 Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:14 -07:00
  • 9cc5671f48 Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:12 -07:00
  • 7e948c3b23 Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:10 -07:00
  • fcf073e01f Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:08 -07:00
  • b0a44e4d2f Branch was auto-updated. Bhavin Patel 2021-11-02 11:56:07 -07:00
  • 5e300eafa3 Merge pull request #1772 from splunk/TR-880_generate_ssa_package Bhavin Patel 2021-11-02 11:55:48 -07:00
  • b0c0d89368 Branch was auto-updated. Bhavin Patel 2021-11-02 09:57:02 -07:00
  • 571276f9f5 Branch was auto-updated. Bhavin Patel 2021-11-02 09:57:01 -07:00
  • d279e77dcc Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:58 -07:00
  • db8142e1e8 Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:56 -07:00
  • 5459d17d29 Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:55 -07:00
  • fd953d2dbe Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:52 -07:00
  • 7181933d48 Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:51 -07:00
  • 2407813a61 Branch was auto-updated. Bhavin Patel 2021-11-02 09:56:49 -07:00
  • a0411fd063 Merge pull request #1731 from splunk/iceid_ttps tccontre 2021-11-02 17:56:25 +01:00
  • 280f6f4a10 PEX-33: fix repo path duplication issue Danny Leung 2021-11-02 00:11:24 -07:00
  • ade0bf3bf6 PEX-33: remove chalice import Danny Leung 2021-11-01 22:56:37 -07:00
  • 500dcf256e PEX-33: test running build on current branch instead of develop. Danny Leung 2021-11-01 22:42:44 -07:00
  • 7737249d92 Revert "PEX-33: manual revert to develop" Danny Leung 2021-11-01 22:16:43 -07:00
  • 79833fccd0 Fixed how OrderedDict is imported to hopefully fix CSV output format. pyth0n1c 2021-11-01 18:10:25 -07:00
  • 8d7ed3105b Update attempted_credential_dump_from_registry_via_reg_exe.yml Bhavin Patel 2021-11-01 17:44:38 -07:00
  • 3ecdae1e84 minor patel-bhavin 2021-11-01 17:43:37 -07:00
  • aadb588fff Changes to generate JSON artifacts as well as CSV and upload them after a test run on GH Actions. pyth0n1c 2021-11-01 17:23:22 -07:00
  • 19a159802c updating with no savedsearches_annotations d1vious 2021-11-01 20:01:33 -04:00
  • ad5afdc3dc calendar search patel-bhavin 2021-11-01 16:14:12 -07:00
  • 3237b98c0b remove pretty search d1vious 2021-11-01 18:58:09 -04:00
  • bc3209042b pretty print search yaml, update ci d1vious 2021-11-01 18:55:23 -04:00
  • 0c53c4a9ab Changed to test against a different branch for testing purposes pyth0n1c 2021-11-01 14:45:57 -07:00
  • e0dc0e6743 Testing 2 containers with a larger number of detections pyth0n1c 2021-11-01 14:24:49 -07:00
  • 75bc9ee74c Badly formatted secrets fixed pyth0n1c 2021-11-01 14:10:41 -07:00
  • 1bf59b0ca7 Installing pip by script, not by apt pyth0n1c 2021-11-01 14:05:11 -07:00
  • e04135b8ae Properly installing python2 pyth0n1c 2021-11-01 14:02:55 -07:00
  • c8615d208c Docker is already installed on VM, no need to install it. pyth0n1c 2021-11-01 13:48:46 -07:00
  • ceb606a01f Explicitly installing containerd pyth0n1c 2021-11-01 13:34:39 -07:00
  • bb22ea0604 Printing out version of containerd pyth0n1c 2021-11-01 13:31:37 -07:00
  • 0539ea52f2 macro update patel-bhavin 2021-11-01 13:30:50 -07:00
  • a1521a1dce Created a GitHub Action YML for testing using docker container on GitHub actions. Right now, it's just testing a single, static detection since that's easier and faster. pyth0n1c 2021-11-01 13:23:56 -07:00
  • b4122efa5c Change the pipeline trigger conditions mjobanputra 2021-11-01 18:52:33 +05:30
  • bb2050269f PEX-33: manual revert to develop Danny Leung 2021-11-01 01:23:36 -07:00
  • 63bbcc6056 PEX-33: add comments and logging Danny Leung 2021-11-01 01:11:33 -07:00
  • a912b062b2 PEX-33: test remove build dependencies Danny Leung 2021-11-01 00:25:17 -07:00
  • 196ee689ac PEX-33: test upload JSON to s3 test bucket Danny Leung 2021-11-01 00:06:09 -07:00
  • 69bcff647c cleaned up logic d1vious 2021-10-30 23:27:09 -04:00
  • bfc25f0cec adding skeleton for ssa package generation d1vious 2021-10-30 21:31:04 -04:00
  • f89d686688 PEX-33: adding yml2json script to build Danny Leung 2021-10-30 01:07:12 -07:00
  • d0e998075a PEX-33: fix JSON output dir Danny Leung 2021-10-30 00:58:01 -07:00
  • 3be3c37a50 Added the data model David Dorsey 2021-10-29 21:46:27 -05:00
  • a6dd62edbc PEX-33: add work iterate types and print out Danny Leung 2021-10-29 15:57:21 -07:00
  • 87c0f21453 Added cmd_line to the body David Dorsey 2021-10-29 16:28:22 -05:00
  • 2f8f267a68 Fixed more SPL2 errors David Dorsey 2021-10-29 15:14:36 -05:00