admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • cf669e8deb Added detection testing service results inSuspicious Rundll32 startw mhaag-spl 2021-08-11 07:25:28 -06:00
  • 87e23caa40 Update suspicious_rundll32_startw.yml mhaag-spl 2021-08-11 06:38:49 -06:00
  • 055ed9ca2d Merge branch 'develop' into misko_scores miskoSplunk 2021-08-10 15:14:52 -07:00
  • 971315f40e Fixing score rounding for two detections Stanislav Miskovic 2021-08-10 14:57:40 -07:00
  • 64b1a1f926 Correcting non-integer scores for two detections Stanislav Miskovic 2021-08-10 14:53:31 -07:00
  • dcd72f2f67 Update suspicious_msbuild_rename.yml mhaag-spl 2021-08-10 14:31:04 -06:00
  • 779c45abc5 Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop pyth0n1c 2021-08-10 12:59:05 -07:00
  • 668fba767b Update suspicious_msbuild_rename.yml mhaag-spl 2021-08-10 13:28:55 -06:00
  • 932f368332 updating docs and package bits [ci skip] research bot 2021-08-10 19:06:43 +00:00
  • f2fa2bf079 Apparently, unless specified otherwise, exit returns most recent return code. Explicitly have it return 0 on success. pyth0n1c 2021-08-10 11:56:02 -07:00
  • e8b49a3228 Better, more verbose tag checking for all the yml pyth0n1c 2021-08-10 11:53:38 -07:00
  • 67c4c1fdb2 More verbose tag checking. pyth0n1c 2021-08-10 11:51:30 -07:00
  • 9c22253318 Adding the tag check to the semgrep.yml. Printing our the GITHUB_REF before checking it, because we seem to be failing for some reason on regular pushes. pyth0n1c 2021-08-10 11:45:57 -07:00
  • 2cb62a0cd9 Legacy code that tried to push to the tag instead of develop pyth0n1c 2021-08-10 11:39:06 -07:00
  • 23a2dcb7c1 Merge branch 'The-Haag-of-The-Storm' of https://github.com/splunk/security_content into The-Haag-of-The-Storm mhaag-spl 2021-08-10 12:37:25 -06:00
  • 6a81b49ae9 Update suspicious_msbuild_rename.yml mhaag-spl 2021-08-10 12:37:22 -06:00
  • 6a99bcffa8 Added detection testing service results inDetect Renamed rundll32.exe Rename mhaag-spl 2021-08-10 12:26:39 -06:00
  • 98f4f725c8 Changed all of the jobs which require tags to always checkout from develop. This will also allow update-sources-github to push to develop. pyth0n1c 2021-08-10 11:05:53 -07:00
  • 1eddb135e9 Added version=1.1 attributes to the forms to conform with new appinspect security requirements. Also changed the name of the report_failed uploaded report on failure. pyth0n1c 2021-08-10 10:39:01 -07:00
  • 1372bc0e8c Store the appinspect report under a different name if it fails pyth0n1c 2021-08-10 09:47:33 -07:00
  • 680db63bd5 conti_leak tccontre 2021-08-10 16:03:22 +02:00
  • 25917a36d6 conti_leak tccontre 2021-08-10 14:24:54 +02:00
  • 78177e9fe6 conti_leak tccontre 2021-08-10 14:16:33 +02:00
  • 1250e85540 conti_leak tccontre 2021-08-10 14:13:54 +02:00
  • 94c05bbb18 Merge branch 'conti_leak' of github.com:splunk/security_content into conti_leak tccontre 2021-08-10 13:27:43 +02:00
  • bf47d0fa1f conti leak tccontre 2021-08-10 13:27:30 +02:00
  • 6607ca9508 Merge branch 'develop' into analytic_types P4T12ICK 2021-08-10 11:02:18 +02:00
  • 4270461242 Was not printing out the report correctly. pyth0n1c 2021-08-09 18:10:23 -07:00
  • 833ffcc2e7 Misko: Adding RBA fields to SSA detections - message, risk_score, impact, confidence, context, observable, etc. Stanislav Miskovic 2021-08-09 17:55:28 -07:00
  • b4b15339fc Printing out the report so that we can figure out what appinspect didn't like pyth0n1c 2021-08-09 17:53:45 -07:00
  • 1338335c9f Removed duplicate of the semgrep testing flow. pyth0n1c 2021-08-09 17:27:40 -07:00
  • ed50f77308 Changing the way that we validate the tag name for a tagged release. pyth0n1c 2021-08-09 17:22:45 -07:00
  • 07bc3664a3 Merged all the new changes into my personal repo. pyth0n1c 2021-08-09 17:04:05 -07:00
  • 08faaaa605 Removed a file created for testing pyth0n1c 2021-08-09 16:42:44 -07:00
  • eecfdf786a Merging the migrate_to_github_actions in the develop branch - everything looking good? Merge commit '274c1dd9a94498ae0b16fcf2eec3acf81c1e5f0d' into develop pyth0n1c 2021-08-09 16:41:00 -07:00
  • 274c1dd9a9 Just added a check for tag validation and put it at the beginning of all the workflows. pyth0n1c 2021-08-09 16:33:10 -07:00
  • 2ca826e4d9 Uncommented all the tests from before that were commented... making sure that the file lints and runs correctly before merging it into the develop branch. pyth0n1c 2021-08-09 15:30:11 -07:00
  • 3fbed7d3be Just adding a simple file, let's see if it works! research bot 2021-08-09 20:54:34 +00:00
  • 981a894c34 Wrong argument to checkout - ref not branch pyth0n1c 2021-08-09 13:53:09 -07:00
  • ce714fb714 Forgot to add username and email before committing. pyth0n1c 2021-08-09 13:46:01 -07:00
  • 607b5955ec After our discussion, making everything much simpler by always pushing to develop. Test to see if this works. pyth0n1c 2021-08-09 13:43:12 -07:00
  • 833001dd15 Update suspicious_rundll32_rename.yml mhaag-spl 2021-08-09 14:19:27 -06:00
  • 96112b6c80 Branch was auto-updated. github-actions[bot] 2021-08-09 18:42:39 +00:00
  • f6f2744f72 Branch was auto-updated. github-actions[bot] 2021-08-09 18:42:37 +00:00
  • 7c85b0dfd8 Branch was auto-updated. github-actions[bot] 2021-08-09 18:42:36 +00:00
  • befd0e60e6 Branch was auto-updated. github-actions[bot] 2021-08-09 18:42:33 +00:00
  • da6a9c2d0f Merge pull request #1550 from splunk/ssa_TR-770_add_event_id Jose Enrique Hernandez 2021-08-09 11:42:14 -07:00
  • 81fb796b51 show-ref not git-ref pyth0n1c 2021-08-09 11:21:15 -07:00
  • 8557f7f4ed git-ref printout pyth0n1c 2021-08-09 11:18:06 -07:00
  • 6b55e8765c Fixed git ref? pyth0n1c 2021-08-09 11:11:59 -07:00
  • d34a8c1cbc fixed path so it isn't deleted pyth0n1c 2021-08-09 11:06:12 -07:00
  • f58f77b552 Changed the path to the branch pyth0n1c 2021-08-09 11:01:42 -07:00
  • e57c890f35 changed the path we are pushing to... pyth0n1c 2021-08-09 10:55:09 -07:00
  • ddfeeea2ea Deleted from the repo then updated what should be contained in the test file. pyth0n1c 2021-08-09 10:49:55 -07:00
  • a1fee0c2d1 Added -f to push statement. pyth0n1c 2021-08-09 10:42:22 -07:00
  • ad2530b790 Ensure that we are checking out the remote branch we want to modify... pyth0n1c 2021-08-09 10:35:01 -07:00
  • cfa3f2a5f9 Full refspec path pyth0n1c 2021-08-09 10:29:30 -07:00
  • 234649a36e Adding the github actor to the checkout step pyth0n1c 2021-08-09 10:26:30 -07:00
  • 85b69db698 Adding github token during original pull pyth0n1c 2021-08-09 10:19:40 -07:00
  • 0d16526223 More verbose push to solve detached head issue? pyth0n1c 2021-08-09 10:13:12 -07:00
  • 4849999140 Python requirements install failed due to later checkout. pyth0n1c 2021-08-09 10:07:11 -07:00
  • 92de174e14 Removed the checkout repo action and replaced it with manual git commands pyth0n1c 2021-08-09 10:02:37 -07:00
  • 341a7f16d6 conti_leak tccontre 2021-08-09 17:04:36 +02:00
  • f12120e587 setting ident pyth0n1c 2021-08-06 17:40:19 -07:00
  • 171b888422 adding prints for each step pyth0n1c 2021-08-06 17:35:40 -07:00
  • c8b0c088c0 Newer workflow for git ops pyth0n1c 2021-08-06 17:29:15 -07:00
  • 7fc4192c43 command line test of github action pyth0n1c 2021-08-06 17:03:17 -07:00
  • cb344bcc99 more verbose git pull pyth0n1c 2021-08-06 16:40:46 -07:00
  • 1b2cf75356 Get rid of the clone, do it the way that we tried before. pyth0n1c 2021-08-06 16:35:30 -07:00
  • fb971af706 Compute the branch name and set is as a variable so that it can be passed to the push action. pyth0n1c 2021-08-06 16:30:37 -07:00
  • 58b2fc67f2 change from colon to slash in github repo path pyth0n1c 2021-08-06 16:24:22 -07:00
  • 27696f8773 Can we move environment varaibles from one name to another? probably not... pyth0n1c 2021-08-06 16:16:13 -07:00
  • 7febf7e3a6 Pushing to the proper target branch pyth0n1c 2021-08-06 15:49:43 -07:00
  • 0c2b195932 Fixed the push destination pyth0n1c 2021-08-06 15:44:51 -07:00
  • f99a0196f5 Fixing the clone path again. Removed the actor name pyth0n1c 2021-08-06 15:37:08 -07:00
  • 503f2ab04f Fixed clone path pyth0n1c 2021-08-06 15:32:49 -07:00
  • 6bb194f74e fixed bad quote pyth0n1c 2021-08-06 15:25:36 -07:00
  • a2d0b5dfb6 Testing a manual clone of the repo pyth0n1c 2021-08-06 15:22:43 -07:00
  • b3b7e4dc14 Just printing out the branches associated with the SHA. pyth0n1c 2021-08-06 15:14:56 -07:00
  • 30c2f2dada semgroup auditOn: push pyth0n1c 2021-08-06 13:11:57 -07:00
  • 3704f9aea0 Create semgrep-analysis.yml pyth0n1c 2021-08-06 12:24:55 -07:00
  • c5c4deeefc forgot to generate a sarif. pyth0n1c 2021-08-06 12:06:01 -07:00
  • 8419cded38 ensure the semgrep step is run even if there is a failure in the step above (semgrep finds issues) - FIX SYNTAX pyth0n1c 2021-08-06 11:58:52 -07:00
  • 07b1bc3d86 ensure the semgrep step is run even if there is a failure in the step above (semgrep finds issues) pyth0n1c 2021-08-06 11:55:53 -07:00
  • 83bbb794d7 Added SARIF upload for reading semgrep output in browser. pyth0n1c 2021-08-06 11:46:51 -07:00
  • 976e913fac Added semgrep pyth0n1c 2021-08-06 11:22:14 -07:00
  • ff52b2e845 testing act pyth0n1c 2021-08-06 09:30:38 -07:00
  • f0ada409fc Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-08-06 03:39:59 -07:00
  • a8e7123c30 Added a git pull so we are not behind when we try to push... pyth0n1c 2021-08-05 17:02:24 -07:00
  • 5bd576d153 Removed the with from the push action pyth0n1c 2021-08-05 16:55:00 -07:00
  • 0136cc9e3b Meaningless change for tag test. pyth0n1c 2021-08-05 16:37:01 -07:00
  • 879ede20e6 Providing the right github token and github ref. pyth0n1c 2021-08-05 16:27:02 -07:00
  • d1ee56e2e1 Using the github-push-action action pyth0n1c 2021-08-05 16:19:21 -07:00
  • 50a780a00f more branch fixes pyth0n1c 2021-08-05 13:57:45 -07:00
  • eb518167b7 another branch name fix pyth0n1c 2021-08-05 13:53:25 -07:00
  • 2ce25b5d4e parsing branch name better pyth0n1c 2021-08-05 13:49:00 -07:00
  • a845358ed7 fixing branch path pyth0n1c 2021-08-05 13:37:01 -07:00
  • 40a969ead7 another fix to push pyth0n1c 2021-08-05 13:30:53 -07:00
  • d36ad80259 fixed the push to remote pyth0n1c 2021-08-05 13:26:00 -07:00
  • dad428a991 now trying a checkout add and push" pyth0n1c 2021-08-05 13:14:27 -07:00