Commit Graph

  • dd9cc115bf Branch was auto-updated. github-actions[bot] 2021-01-27 09:02:29 +00:00
  • 414606590c Branch was auto-updated. github-actions[bot] 2021-01-27 09:02:25 +00:00
  • 80195953a7 Branch was auto-updated. github-actions[bot] 2021-01-27 09:02:16 +00:00
  • a301fb1037 Branch was auto-updated. github-actions[bot] 2021-01-27 09:02:14 +00:00
  • c47641d2a8 Merge pull request #1119 from splunk/issue_1101 P4T12ICK 2021-01-27 10:01:45 +01:00
  • a4a07eab95 Merge branch 'develop' into issue_1101 P4T12ICK 2021-01-27 09:03:25 +01:00
  • 8b27fb1a1d Merge branch 'sh_test' of https://github.com/splunk/security_content into sh_test Detection Testing Service 2021-01-27 03:30:49 +00:00
  • 30bb53bfbc Added detection testing service results inDetect Spike in AWS Security Hub Alerts for EC2 Instance root 2021-01-27 03:30:48 +00:00
  • b96893d92a Merge branch 'sh_test' of github.com:splunk/security_content into sh_test bpatel 2021-01-26 19:28:14 -08:00
  • ec76d28b60 rename bpatel 2021-01-26 19:28:03 -08:00
  • 676a557e45 Branch was auto-updated. github-actions[bot] 2021-01-27 02:58:18 +00:00
  • 007d957e01 Branch was auto-updated. github-actions[bot] 2021-01-27 02:58:17 +00:00
  • 7484135a8a Merge pull request #1138 from splunk/dependabot/pip/botocore-1.19.60 dependabot[bot] 2021-01-27 02:57:57 +00:00
  • edeaa89c7d macros for all bpatel 2021-01-26 18:53:01 -08:00
  • 3579999270 Merge branch 'sh_test' of github.com:splunk/security_content into sh_test bpatel 2021-01-26 18:51:17 -08:00
  • 1d4e14ad93 macro fixes bpatel 2021-01-26 18:51:06 -08:00
  • 98f2bab91d Branch was auto-updated. github-actions[bot] 2021-01-27 02:50:43 +00:00
  • 6fd4ebbed8 Branch was auto-updated. github-actions[bot] 2021-01-27 02:50:41 +00:00
  • 5dcf234f7a Branch was auto-updated. github-actions[bot] 2021-01-27 02:50:40 +00:00
  • 3611375edb Merge pull request #1139 from splunk/dependabot/pip/ansible-2.10.6 dependabot[bot] 2021-01-27 02:50:19 +00:00
  • 6fea465688 Branch was auto-updated. github-actions[bot] 2021-01-27 02:44:19 +00:00
  • fe52a7282e Branch was auto-updated. github-actions[bot] 2021-01-27 02:44:16 +00:00
  • cccf4c5dd4 Branch was auto-updated. github-actions[bot] 2021-01-27 02:44:13 +00:00
  • 80e3094109 Branch was auto-updated. github-actions[bot] 2021-01-27 02:44:11 +00:00
  • 97f726f118 Merge pull request #1140 from splunk/dependabot/pip/urllib3-1.26.3 dependabot[bot] 2021-01-27 02:43:51 +00:00
  • 4c14ca7e2c o365newfederedateddomainadded Rod Soto 2021-01-26 21:43:48 -05:00
  • 4753351b0c Merge branch 'develop' into dependabot/pip/urllib3-1.26.3 Bhavin Patel 2021-01-26 18:36:48 -08:00
  • e841476a32 o365addedserviceprincipal Rod Soto 2021-01-26 21:30:39 -05:00
  • 645e87f461 o365addapproleassignmentgrantuser Rod Soto 2021-01-26 21:18:15 -05:00
  • 215b67dc70 Bump urllib3 from 1.26.2 to 1.26.3 dependabot[bot] 2021-01-27 01:51:36 +00:00
  • 04d291b455 Bump ansible from 2.10.5 to 2.10.6 dependabot[bot] 2021-01-27 01:51:35 +00:00
  • 87af3274f1 Bump botocore from 1.19.59 to 1.19.60 dependabot[bot] 2021-01-27 01:51:31 +00:00
  • 6ea9c0f6b2 Branch was auto-updated. github-actions[bot] 2021-01-27 01:51:17 +00:00
  • aafb5088b4 Branch was auto-updated. github-actions[bot] 2021-01-27 01:51:16 +00:00
  • c66ba21904 Merge pull request #1133 from splunk/bug_fix_testing_service Bhavin Patel 2021-01-26 17:50:57 -08:00
  • c67d577df2 whole lot of changes bpatel 2021-01-26 17:43:32 -08:00
  • 43ac587efb o365ssologonerrors Rod Soto 2021-01-26 20:30:37 -05:00
  • 7d5322a812 more updates and testing bpatel 2021-01-26 16:34:30 -08:00
  • 0be178e812 updating jinja for usecase lib bpatel 2021-01-26 16:04:55 -08:00
  • d0a48bcb2f awssamlupdateidentityprovider Rod Soto 2021-01-26 18:47:16 -05:00
  • 1b799d788c user test file draft bpatel 2021-01-26 15:46:36 -08:00
  • b233d1a1fc minor bpatel 2021-01-26 14:07:19 -08:00
  • 5facbf0cf8 awssamlaccessbyprovideruserandprincipal Rod Soto 2021-01-26 16:59:56 -05:00
  • f446cc2f8a test file bpatel 2021-01-26 13:54:49 -08:00
  • 5e0de64700 search update bpatel 2021-01-26 13:53:28 -08:00
  • bb0db878d9 migrated other portions that pointed to the old repo divious1 2021-01-26 15:07:14 -05:00
  • af0fa08d34 storyandfirstsearchcloudfederatedcredentialabuse Rod Soto 2021-01-26 15:03:53 -05:00
  • df8dbab12d udpated all bins to include new name divious1 2021-01-26 15:01:49 -05:00
  • ba025f9b58 updated README with new name divious1 2021-01-26 14:58:18 -05:00
  • 6ff6e65843 Branch was auto-updated. github-actions[bot] 2021-01-26 19:56:24 +00:00
  • cd18663ced Branch was auto-updated. github-actions[bot] 2021-01-26 19:56:22 +00:00
  • 7d7c64f0b0 Merge pull request #1129 from splunk/changed-names-ssa Jose Enrique Hernandez 2021-01-26 14:56:01 -05:00
  • 12ca26bd8a Added detection testing service results inDetect mshta spawning a process root 2021-01-26 18:16:25 +00:00
  • f0ccfd7914 wrong url mhaag-spl 2021-01-26 10:56:49 -07:00
  • 8d86921ac6 Update suspicious_mshta_child_process.yml mhaag-spl 2021-01-26 10:51:38 -07:00
  • 7071c702fe Merge branch 'msbuild' of https://github.com/splunk/security_content into msbuild mhaag-spl 2021-01-26 10:21:25 -07:00
  • c42f729d2e Update suspicious_mshta_child_process.test.yml mhaag-spl 2021-01-26 10:21:23 -07:00
  • 720f26cc2d Added detection testing service results inNLTest Domain Trust Discovery root 2021-01-26 17:13:39 +00:00
  • 71c3b2c6fe Merge branch 'develop' into changed-names-ssa Ignacio 2021-01-26 08:46:06 -08:00
  • 8290ec8fb6 removing special characters from rare parent-child process ssa detection Ignacio Bermudez Corrales 2021-01-26 08:37:21 -08:00
  • 7f7081dcb7 Branch was auto-updated. github-actions[bot] 2021-01-26 14:10:33 +00:00
  • 7ed449d048 Branch was auto-updated. github-actions[bot] 2021-01-26 14:10:31 +00:00
  • 3b042638c6 Merge pull request #1134 from splunk/dependabot/pip/pytest-6.2.2 dependabot[bot] 2021-01-26 14:10:08 +00:00
  • 26aedcefd0 Bump pytest from 6.2.1 to 6.2.2 dependabot[bot] 2021-01-26 14:02:53 +00:00
  • 404f4b3900 Removed mshta rename mhaag-spl 2021-01-26 06:44:33 -07:00
  • 4cc4a8ac3c Merge branch 'develop' into msbuild Michael Haag 2021-01-26 06:10:09 -07:00
  • c0a484c14c changes renaming project P4T12ICK 2021-01-26 12:38:51 +01:00
  • 3a2882c243 Added detection testing service results inO365 Suspicious Rights Delegation automated_detection_testing_1611657413 root 2021-01-26 11:09:21 +00:00
  • fa706289f9 Added detection testing service results inO365 Suspicious Rights Delegation automated_detection_testing_1611649466 root 2021-01-26 08:57:48 +00:00
  • ed2d5c614b Merge branch 'develop' into issue_1101 P4T12ICK 2021-01-26 09:14:56 +01:00
  • b9eb65a558 renamed ssa detections Ignacio Bermudez Corrales 2021-01-25 16:32:23 -08:00
  • 294be790dc minor updates mhaag-spl 2021-01-25 14:28:26 -07:00
  • 847ae65dcb Merge pull request #1113 from splunk/detection_testing_branch Bhavin Patel 2021-01-25 11:44:52 -08:00
  • c88cc88d1b Branch was auto-updated. github-actions[bot] 2021-01-25 19:02:14 +00:00
  • 070dfff645 Merge pull request #1125 from splunk/name_changes Bhavin Patel 2021-01-25 11:01:53 -08:00
  • 92958461e4 Merge branch 'develop' into detection_testing_branch P4T12ICK 2021-01-25 19:18:27 +01:00
  • d5d1298db9 fix a description P4T12ICK 2021-01-25 18:28:25 +01:00
  • daf978228e fix a description P4T12ICK 2021-01-25 18:19:03 +01:00
  • 7f59ac7386 Merge branch 'develop' into name_changes Bhavin Patel 2021-01-25 09:11:50 -08:00
  • 3e839eabe1 Merge branch 'develop' into msbuild mhaag-spl 2021-01-25 09:54:01 -07:00
  • 2d3b98ff82 T1482 - NLTest usage mhaag-spl 2021-01-25 09:09:02 -07:00
  • 40af9c607d Merge pull request #1126 from splunk/dependabot/pip/botocore-1.19.59 dependabot[bot] 2021-01-25 14:31:55 +00:00
  • 33438ad1a4 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:59 +00:00
  • 66352afc32 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:58 +00:00
  • da25617b9b Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:57 +00:00
  • ef9ab226e0 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:55 +00:00
  • b4c9e9e2a1 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:54 +00:00
  • 4c16bfd792 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:52 +00:00
  • e1efb85594 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:50 +00:00
  • 1b4c1ca9e2 Branch was auto-updated. github-actions[bot] 2021-01-25 14:08:49 +00:00
  • 97d14e3808 Merge pull request #1127 from splunk/dependabot/pip/smmap-3.0.5 dependabot[bot] 2021-01-25 14:08:27 +00:00
  • 23f794089b Bump boto3 from 1.16.58 to 1.16.59 dependabot[bot] 2021-01-25 14:02:40 +00:00
  • 56bfa14217 Bump smmap from 3.0.4 to 3.0.5 dependabot[bot] 2021-01-25 14:02:40 +00:00
  • 76eba4591f Bump botocore from 1.19.58 to 1.19.59 dependabot[bot] 2021-01-25 14:02:36 +00:00
  • 26a386eaeb skeleton detection unusual-parent-child-relationship_experiment divious1 2021-01-24 21:55:59 -05:00
  • 851e76ba60 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2021-01-23 17:52:05 -08:00
  • 9b1e9d7dc2 Added detection testing service results inWBAdmin Delete System Backups root 2021-01-22 21:23:23 +00:00
  • e202e6299a Adding WBAdmin - delete system backups mhaag-spl 2021-01-22 13:52:56 -07:00
  • 8d02e0d4bc Fixed another syntax error David Dorsey 2021-01-22 11:13:56 -06:00
  • a0b8f18866 Syntax issue when in conf file David Dorsey 2021-01-22 10:32:45 -06:00