admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 91814fad6c finally getting the correct branch name?" pyth0n1c 2021-08-05 13:02:24 -07:00
  • 52a9a77b20 Changing the fetch depth... pyth0n1c 2021-08-05 12:56:32 -07:00
  • 5248d3f9ad changing the syntax used to get the tag? pyth0n1c 2021-08-05 12:51:48 -07:00
  • 4e3dc7fe9c Added detection testing service results inSqlite Module In Temp Folder root 2021-08-05 15:43:52 +00:00
  • 9a79673dbd Merge branch 'icedid' of github.com:splunk/security_content into icedid tccontre 2021-08-05 17:22:51 +02:00
  • 5e8393c3b7 icedid tccontre 2021-08-05 17:22:35 +02:00
  • 665a99e197 Added detection testing service results inSuspicious IcedID Regsvr32 Cmdline root 2021-08-05 14:54:43 +00:00
  • 765f7a184f Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:26:04 +00:00
  • 442cbd9787 Added detection testing service results inDrop IcedID License dat root 2021-08-05 14:26:02 +00:00
  • ba91dfc63f Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:25:26 +00:00
  • a79f8718eb Added detection testing service results inIcedID Exfiltrated Archived File Creation root 2021-08-05 14:25:26 +00:00
  • 40cf94a229 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:11:56 +00:00
  • 8c20f6fdb0 Added detection testing service results inCHCP Command Execution root 2021-08-05 14:11:56 +00:00
  • 549cb603b8 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:10:59 +00:00
  • ea12f51783 Added detection testing service results inOffice Application Spawn Regsvr32 process root 2021-08-05 14:10:58 +00:00
  • 83dd255433 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:09:32 +00:00
  • 2b3346a7c5 Added detection testing service results inCreate Remote Thread In Shell Application root 2021-08-05 14:09:32 +00:00
  • b109f5517e Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:08:17 +00:00
  • e0b24a1984 Added detection testing service results inSuspicious Rundll32 PluginInit root 2021-08-05 14:08:16 +00:00
  • 4990119ca4 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 14:00:50 +00:00
  • 7ac92524f1 Added detection testing service results inSuspicious IcedID Rundll32 Cmdline root 2021-08-05 14:00:49 +00:00
  • 6d6f066d47 Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 13:45:15 +00:00
  • de016c4686 Added detection testing service results inRundll32 Process Creating Exe Dll Files root 2021-08-05 13:45:14 +00:00
  • 890546ac8b Merge branch 'icedid' of https://github.com/splunk/security_content into icedid Detection Testing Service 2021-08-05 13:36:43 +00:00
  • 0fde378b6f Added detection testing service results inRundll32 DNSQuery root 2021-08-05 13:36:42 +00:00
  • f9d9e07f7b Added detection testing service results inRundll32 CreateRemoteThread In Browser root 2021-08-05 13:34:25 +00:00
  • 4d47c30783 Added detection testing service results inRundll32 Create Remote Thread To A Process root 2021-08-05 13:10:18 +00:00
  • ede0bd7675 icedid tccontre 2021-08-05 13:48:42 +02:00
  • 34377e6310 icedid tccontre 2021-08-05 13:42:29 +02:00
  • 6ccaf94f2f icedid tccontre 2021-08-05 13:39:05 +02:00
  • c7e8f72fa6 icedid tccontre 2021-08-05 13:36:35 +02:00
  • d3d5ad4798 yet another change to the branch command... can't find out the branch pyth0n1c 2021-08-04 17:02:51 -07:00
  • 0d0c323459 Another small change... pyth0n1c 2021-08-04 16:57:57 -07:00
  • 09050dfae9 One small change to the git branch line pyth0n1c 2021-08-04 16:57:15 -07:00
  • 60d6562e45 Fixing up shell escapes pyth0n1c 2021-08-04 14:27:51 -07:00
  • 6dc8b261dc More complex and better way to get branch name from tag? pyth0n1c 2021-08-04 13:23:37 -07:00
  • c7194e4ece increased the fetch depth? pyth0n1c 2021-08-04 12:18:35 -07:00
  • f39b33047e Fixed up the tag naming for the --contains argument pyth0n1c 2021-08-04 11:15:04 -07:00
  • 915968ceea Print out the git log to see everything that is recent... pyth0n1c 2021-08-04 11:06:38 -07:00
  • faaad71030 Changing up how we get the branch name ofr a tagged release since Actions will not be as cooperative about it as CircleCI... pyth0n1c 2021-08-04 10:54:48 -07:00
  • 8539d351da icedid tccontre 2021-08-04 11:49:52 +02:00
  • c4efa7f011 More troubleshooting for tag and branch push functionality pyth0n1c 2021-08-03 17:38:16 -07:00
  • ecda35ec98 Updating the way that we get the latest branch commit so that we can push to it? pyth0n1c 2021-08-03 17:22:10 -07:00
  • f90791d73f Now uncommenting the if statement in detection testing. pyth0n1c 2021-08-03 15:51:30 -07:00
  • e2b9bc79cf Trying to figure out why the seaparate detection testing action is being skipped. pyth0n1c 2021-08-03 15:47:58 -07:00
  • 3de73c7b6e fixed syntax errors in added stuff to detection-testing pyth0n1c 2021-08-03 15:43:35 -07:00
  • 99f87c82ef Getting the branch name associated with the tag? pyth0n1c 2021-08-03 15:35:08 -07:00
  • ab86cbce34 There needs to be at least one step in each of the yaml files. restoring one for testing. pyth0n1c 2021-08-03 15:12:26 -07:00
  • a23550f3aa testing the naming of branch pyth0n1c 2021-08-03 15:05:31 -07:00
  • ab1abaa2a4 Fixing up filename again. pyth0n1c 2021-08-03 14:22:21 -07:00
  • b761a44c1f Fixing filed push in update-sources-github job pyth0n1c 2021-08-03 13:33:51 -07:00
  • f8fc79d4e1 Adding event_id extraction peter-cg 2021-08-03 14:45:44 -05:00
  • b8fea6311e Delete powershell_encoded_command.yml Jose Enrique Hernandez 2021-07-28 10:42:18 -04:00
  • d7000e7608 added event_id to ssa detections divious1 2021-07-28 10:39:38 -04:00
  • 9b67bc05df Branch was auto-updated. TR-770_add_event_id github-actions[bot] 2021-08-03 19:55:30 +00:00
  • d7bd3e880c Branch was auto-updated. github-actions[bot] 2021-08-03 19:55:29 +00:00
  • 354efbd86b Branch was auto-updated. github-actions[bot] 2021-08-03 19:55:28 +00:00
  • a89a087b07 Branch was auto-updated. github-actions[bot] 2021-08-03 19:55:24 +00:00
  • 62e6c006b0 Merge pull request #1547 from splunk/ssa_TR-778 peter 2021-08-03 14:55:08 -05:00
  • 23b22e95d4 Event delimiting bugfix and some event upload error checking peter-cg 2021-08-03 14:53:11 -05:00
  • f78f4b17de Removed the 'needs' dependencies from detection-testing. pyth0n1c 2021-08-03 12:32:38 -07:00
  • 9f4ff3f20c Fixed some missing lines in detection-testiny.yml pyth0n1c 2021-08-03 12:27:57 -07:00
  • 013209c67e Broke detection testing out into its own workflow. Set certain steps to only run on v tags. pyth0n1c 2021-08-03 12:25:23 -07:00
  • 16c0a1d315 Created an environment to enforce manual approval of detection testing. pyth0n1c 2021-08-03 11:49:35 -07:00
  • 51b72ea3b3 icedid tccontre 2021-08-03 14:24:34 +02:00
  • 3f9c187e11 icedid tccontre 2021-08-03 13:00:06 +02:00
  • 34a200226a Re-adding testing into the detection step. pyth0n1c 2021-07-30 18:07:13 -07:00
  • 1ea3985188 Added the proper python version and commented out potential long running task for testing. pyth0n1c 2021-07-30 18:02:50 -07:00
  • 8125f55ac5 Needed to add aws region as one of the values set in the configure-aws-credentials pyth0n1c 2021-07-30 17:54:55 -07:00
  • d12e459367 added the configure-aws-credentials action so that we can use boto3 pyth0n1c 2021-07-30 17:51:43 -07:00
  • f96b951492 Another minor syntax issue - extraneous quotation pyth0n1c 2021-07-30 17:18:35 -07:00
  • b9af26c080 Forgot to comment out one of the steps pyth0n1c 2021-07-30 17:14:04 -07:00
  • 4d19b93550 Merge branch 'migrate_to_github_actions' of https://github.com/pyth0n1c/security_content into migrate_to_github_actions pyth0n1c 2021-07-30 17:12:07 -07:00
  • 5c12fe9379 Fixing a syntax error in the way variables are enterted in detection-testing. commented out all the other tests for the sake of speed. pyth0n1c 2021-07-30 17:11:58 -07:00
  • 06fc865cb2 updating docs and package bits [ci skip] research bot 2021-07-30 23:57:13 +00:00
  • c974f8e3b6 Merge branch 'migrate_to_github_actions' of https://github.com/pyth0n1c/security_content into migrate_to_github_actions pyth0n1c 2021-07-30 16:28:27 -07:00
  • 7446e4201f Type (extra quote) in detection testing pyth0n1c 2021-07-30 16:24:02 -07:00
  • 904335e01b updating docs and package bits [ci skip] research bot 2021-07-30 23:12:35 +00:00
  • 15fa4114f0 Merge branch 'migrate_to_github_actions' of https://github.com/pyth0n1c/security_content into migrate_to_github_actions pyth0n1c 2021-07-30 15:43:17 -07:00
  • 340baf1842 Finished up the last two tests (master-api-update and detection-testing). pyth0n1c 2021-07-30 15:39:39 -07:00
  • add115d1c5 updating docs and package bits [ci skip] research bot 2021-07-30 21:08:28 +00:00
  • 660cb60b51 Testing attack range update (to s3) pyth0n1c 2021-07-30 13:35:31 -07:00
  • 8cc6c5aae4 Testing attack range update pyth0n1c 2021-07-30 13:32:48 -07:00
  • 5381df19cf github.repository contains account_name/repository_name and that is c ausing issues with the release. Hopefully trimmed off the account name and /. pyth0n1c 2021-07-30 13:14:38 -07:00
  • 9ec730f872 Updating the way we get the tag name pyth0n1c 2021-07-30 12:20:49 -07:00
  • 4d08448368 Fixed typo (unmatched braces) pyth0n1c 2021-07-30 12:04:59 -07:00
  • db8377fdb4 Merge branch 'migrate_to_github_actions' of https://github.com/pyth0n1c/security_content into migrate_to_github_actions pyth0n1c 2021-07-30 12:02:42 -07:00
  • 76344bdaab Testing publish-github-release. Commented out several long-running jobs which aren't needed for this specific test. pyth0n1c 2021-07-30 12:02:38 -07:00
  • da020898f9 SeriousSamEVTX rodprintnightmareevtx Rod Soto 2021-07-30 11:37:32 -07:00
  • 5de991e461 icedid_mod_sig tccontre 2021-07-30 17:46:06 +02:00
  • 1722daa514 icedid_mod_sig tccontre 2021-07-30 17:33:42 +02:00
  • 2d13569fff icedid story tccontre 2021-07-30 12:34:15 +02:00
  • 3579f4e87d updating docs and package bits [ci skip] research bot 2021-07-30 02:54:58 +00:00
  • 37eb71e281 Reorder steps to do the checkout first, then do other operations. I think the checkout into the current repo will overwrite the other contents there? pyth0n1c 2021-07-29 19:23:57 -07:00
  • f20718bf62 Diagnosing seeminly missing directories pyth0n1c 2021-07-29 18:50:43 -07:00
  • 0e683695ef Testing update-sources-github for the first time pyth0n1c 2021-07-29 18:04:59 -07:00
  • 2907df05df fixedgpoobjectdescription Rod Soto 2021-07-29 15:50:10 -07:00
  • 5d033645fe Created AWS User, key, and id for testing upload to S3 pyth0n1c 2021-07-29 15:33:10 -07:00
  • df85ff33ad updating docs and package bits [ci skip] research bot 2021-07-29 21:15:45 +00:00
  • cf527c0b35 Removed a debug print - appinspect step is passing correctly and produced/saved the expected reports! pyth0n1c 2021-07-29 14:10:43 -07:00