admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 11179c57a1 Now we fixed the tag i think pyth0n1c 2021-08-13 11:57:29 -07:00
  • e1e3a3a91b Fixing tag value again pyth0n1c 2021-08-13 11:49:26 -07:00
  • f93fb88b47 other tag get syntax pyth0n1c 2021-08-13 11:44:04 -07:00
  • 57d21063df Printing out the whole github ref. pyth0n1c 2021-08-13 11:37:05 -07:00
  • da0f66af49 updating docs and package bits [ci skip] research bot 2021-08-13 18:21:57 +00:00
  • 40bd17d958 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-13 10:54:22 -07:00
  • 4528e9a6fd Was getting the tag the wrong way and it was coming up empty. Fixed. Running again. pyth0n1c 2021-08-13 10:54:18 -07:00
  • c5a3cc35a5 updating docs and package bits [ci skip] research bot 2021-08-13 17:37:57 +00:00
  • 3ec453f768 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-13 10:08:01 -07:00
  • 94f0b4b329 Fixed the naming of the release artifacts with the proper GitHub Actions Variable. pyth0n1c 2021-08-13 10:07:52 -07:00
  • 2ae9056412 updating docs and package bits [ci skip] research bot 2021-08-13 16:39:00 +00:00
  • e6388bd1e5 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-13 09:08:47 -07:00
  • ff9ee4c7c9 Fixed appinspect report.tar.gz path. pyth0n1c 2021-08-13 09:08:02 -07:00
  • b0c7e54173 Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak tccontre 2021-08-13 14:05:50 +02:00
  • d1158e1af9 conti_leak tccontre 2021-08-13 14:05:33 +02:00
  • 02e8b46f11 updating docs and package bits [ci skip] research bot 2021-08-13 00:24:55 +00:00
  • 13e6f885d6 Fixing the path for the appinspect report one last time. pyth0n1c 2021-08-12 16:54:23 -07:00
  • 6c427d9f7c Wrong path for report.tar.gz pyth0n1c 2021-08-12 16:27:43 -07:00
  • 9fb490a816 Intentionally ignore one of the pieces of feedback from semgrep (not validating TLS Certificate) because it is a service running locally. pyth0n1c 2021-08-12 15:57:02 -07:00
  • 7ba36644bf As suggested by semgrep: Replaced a call to os.system with a call to subprocess.call. Fixed csv quoting to QUOTE_ALL in one of the files that was missed. pyth0n1c 2021-08-12 15:31:36 -07:00
  • c0107fde5e Fixed other semgrep recommendations - for certain uses of urllib (getting content from a dynamic URI/URL), use the python requests library instead. pyth0n1c 2021-08-12 15:07:27 -07:00
  • 54bde203c3 Changed QUOTE_MINIMAL to QUOTE_ALL in Python CSV Writer calls in response to semgrep recommendations. pyth0n1c 2021-08-12 14:04:26 -07:00
  • 6f938863e7 validate caught a syntax error in one of the python files. pyth0n1c 2021-08-12 13:48:32 -07:00
  • c1d144e0d5 auto_escape fix with either not picked up by semgrep because it was changing a global jinja2 configuration or because it didn't actually fix what we thought it would. Setting the global default is probably the best idea since if another function call doesn't explicitly set it, then it won't be set. However, we leave it like this for now. pyth0n1c 2021-08-12 13:43:54 -07:00
  • 88b2a47a4c Converted humvee md5 check to sha256 check for increased integrity in response to semgrep recommendation. pyth0n1c 2021-08-12 13:35:18 -07:00
  • b6b5f9317f Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results. pyth0n1c 2021-08-12 13:26:29 -07:00
  • 0728cb8f87 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-12 14:07:02 -06:00
  • ed971abfac Update detect_sharphound_usage.yml mhaag-spl 2021-08-12 14:06:59 -06:00
  • 9d32f23bbc Removed a large block of commented out code. pyth0n1c 2021-08-12 13:04:16 -07:00
  • 6d100dbcc9 Uploading additional release artifacts. Moved away from ghr and to an action designed for attaching github release artifacts. This will only run for tagged releases. pyth0n1c 2021-08-12 13:03:15 -07:00
  • 1cf0f63d8f Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-12 12:20:08 -07:00
  • a875e38d08 Renamed a store_artifacts step pyth0n1c 2021-08-12 12:20:02 -07:00
  • a2bb49f089 updating docs and package bits [ci skip] research bot 2021-08-12 18:43:04 +00:00
  • ecc75732b3 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:51 +00:00
  • 8d49d5d1e5 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:43 +00:00
  • d8cb7677e0 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:39 +00:00
  • d9aec8e5f1 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:39 +00:00
  • 1e4fe37d63 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:38 +00:00
  • e031738360 Branch was auto-updated. github-actions[bot] 2021-08-12 18:15:37 +00:00
  • 2df1975e5f Merge pull request #1559 from splunk/appinspect_failures v3.26.0 pyth0n1c 2021-08-12 11:15:21 -07:00
  • 4a94db95c2 Turned off file output from semgrep - current bug prevents anything from being written. it is okay when it is writted to stdout. pyth0n1c 2021-08-12 10:18:22 -07:00
  • 1e6e1c795e Update suspicious_msbuild_rename.yml mhaag-spl 2021-08-12 10:52:48 -06:00
  • cd4df7567a fixes patel-bhavin 2021-08-12 09:47:40 -07:00
  • 86e78db19a Added detection testing service results inDetect Renamed WinRAR mhaag-spl 2021-08-12 10:41:19 -06:00
  • 3f23ca062b Merge branch 'splunk:develop' into develop pyth0n1c 2021-08-12 09:31:19 -07:00
  • d1d2aa92dc Rename detect_phishing_content___ssa.yml to ssa___detect_phishing_content.yml Jose Enrique Hernandez 2021-08-12 12:26:04 -04:00
  • 611c65f1fc Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-12 09:53:49 -06:00
  • fc58b0fe69 Update detect_renamed_winrar.yml mhaag-spl 2021-08-12 09:53:42 -06:00
  • 0c46b33693 Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak tccontre 2021-08-12 17:49:36 +02:00
  • 788c1fb495 conti_leak tccontre 2021-08-12 17:49:16 +02:00
  • 104e8b3526 Added detection testing service results inDetect Renamed PSExec mhaag-spl 2021-08-12 09:43:50 -06:00
  • 31b5dc53b3 Update detect_renamed_psexec.yml mhaag-spl 2021-08-12 08:55:58 -06:00
  • 3576abc8c0 psexec and startw fix mhaag-spl 2021-08-12 08:55:39 -06:00
  • a49702a9fe Added detection testing service results inDetect microsoft.workflow.compiler.exe usage mhaag-spl 2021-08-12 08:23:22 -06:00
  • 14e55880cd mwc fix mhaag-spl 2021-08-12 07:27:44 -06:00
  • 633c3b8f06 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-12 06:41:03 -06:00
  • f538e37f09 Update detect_mshta_renamed.yml mhaag-spl 2021-08-12 06:40:52 -06:00
  • a2f9ac969c Added detection testing service results inDetect microsoft.workflow.compiler.exe rename mhaag-spl 2021-08-12 06:32:45 -06:00
  • 915f5ac350 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-12 05:46:51 -06:00
  • 8397af1673 Update suspicious_microsoft_workflow_compiler_usage.yml mhaag-spl 2021-08-12 05:46:36 -06:00
  • 4f8b5ad361 Merge branch 'conti_leak' of https://github.com/splunk/security_content into conti_leak Detection Testing Service 2021-08-12 10:11:40 +00:00
  • a89eeababf Added detection testing service results inRundll32 LockWorkStation root 2021-08-12 10:11:39 +00:00
  • 6e7280e936 Added detection testing service results inUninstall App Using MsiExec root 2021-08-12 10:06:47 +00:00
  • 568fa87c40 conti_leak tccontre 2021-08-12 11:48:18 +02:00
  • 899e9d01c0 Added detection testing service results inPowershell Execute COM Object root 2021-08-12 09:19:27 +00:00
  • 74e20eb919 Branch was auto-updated. github-actions[bot] 2021-08-12 08:59:58 +00:00
  • e2ae69cd10 Branch was auto-updated. github-actions[bot] 2021-08-12 08:59:54 +00:00
  • 70d87bc2ce Branch was auto-updated. github-actions[bot] 2021-08-12 08:59:52 +00:00
  • c3a973657a Branch was auto-updated. github-actions[bot] 2021-08-12 08:59:51 +00:00
  • 6b4ae84e01 Branch was auto-updated. github-actions[bot] 2021-08-12 08:59:50 +00:00
  • c8d21347b1 Merge pull request #1549 from splunk/icedid tccontre 2021-08-12 10:59:31 +02:00
  • 0f7d5aa104 Added detection testing service results inFsutil Zeroing File root 2021-08-12 08:07:27 +00:00
  • dcfab01e14 icedid tccontre 2021-08-12 09:25:43 +02:00
  • 204dd45bc8 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm Detection Testing Service 2021-08-11 20:32:46 -06:00
  • f7bb6e308d Added detection testing service results inDetect HTML Help Renamed mhaag-spl 2021-08-11 20:32:46 -06:00
  • c6f4791a1b Update suspicious_microsoft_workflow_compiler_rename.test.yml mhaag-spl 2021-08-11 19:51:53 -06:00
  • bf673e9d1a Update detect_html_help_renamed.yml mhaag-spl 2021-08-11 15:57:22 -06:00
  • 56714c68cd Update detect_html_help_renamed.yml mhaag-spl 2021-08-11 15:01:09 -06:00
  • b450921fa1 Update suspicious_microsoft_workflow_compiler_rename.yml mhaag-spl 2021-08-11 13:47:34 -06:00
  • f078e35f81 Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:37 +00:00
  • e35372d8bc Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:36 +00:00
  • 622185c096 Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:34 +00:00
  • e0507705c3 Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:31 +00:00
  • 7fef077ac9 Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:30 +00:00
  • 4e09f8834e Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:29 +00:00
  • 11266b564d Branch was auto-updated. github-actions[bot] 2021-08-11 19:35:28 +00:00
  • c84a3b3b25 Merge pull request #1555 from splunk/blackbolt_1 Michael Haag 2021-08-11 13:35:12 -06:00
  • 9f71b88e6c duplicate patel-bhavin 2021-08-11 11:24:14 -07:00
  • 2317ee7a4b Added detection testing service results inDetect Renamed 7-Zip mhaag-spl 2021-08-11 12:08:08 -06:00
  • a864bdc842 Update detect_renamed_7_zip.yml mhaag-spl 2021-08-11 11:23:42 -06:00
  • fa681a604f lockbit_ttp tccontre 2021-08-11 18:37:03 +02:00
  • d13b923f91 Update detect_renamed_winrar.yml mhaag-spl 2021-08-11 10:26:48 -06:00
  • 368cb3d1fb Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-08-11 08:55:59 -07:00
  • 0e71fa736a Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-11 09:34:47 -06:00
  • 8458ce2eb4 Update detect_renamed_winrar.yml mhaag-spl 2021-08-11 09:34:41 -06:00
  • eed6b40e5f Added detection testing service results inDetect Renamed PSExec mhaag-spl 2021-08-11 09:24:31 -06:00
  • ca96ea558f Update detect_renamed_psexec.yml mhaag-spl 2021-08-11 08:34:05 -06:00
  • aeace8d801 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-11 08:33:23 -06:00
  • 005cfcc40e Added detection testing service results inDetect Renamed RClone mhaag-spl 2021-08-11 08:25:46 -06:00
  • 749fbff290 Update detect_renamed_rclone.yml mhaag-spl 2021-08-11 07:39:30 -06:00