Commit Graph

  • e1518258d6 Added detection testing service results inScript Execution via WMI root 2020-12-07 18:00:12 +00:00
  • 3c4bcbece1 small change P4T12ICK 2020-12-07 18:40:17 +01:00
  • a86b7a5c81 Merge pull request #992 from splunk/update_new_attack_data_project P4T12ICK 2020-12-07 18:23:27 +01:00
  • 68c8baea92 Merge branch 'develop' into update_new_attack_data_project P4T12ICK 2020-12-07 18:07:27 +01:00
  • 5dad0fa5cf Added detection testing service results inSchtasks scheduling job on remote system root 2020-12-07 14:54:00 +00:00
  • d87959208c Merge pull request #996 from splunk/dependabot/pip/virtualenv-20.2.2 dependabot[bot] 2020-12-07 14:51:51 +00:00
  • eb30127527 Bump virtualenv from 20.2.1 to 20.2.2 dependabot[bot] 2020-12-07 14:45:53 +00:00
  • 4c4467c840 Merge pull request #997 from splunk/dependabot/pip/botocore-1.19.30 dependabot[bot] 2020-12-07 14:44:59 +00:00
  • 3f640840e4 Bump botocore from 1.19.29 to 1.19.30 dependabot[bot] 2020-12-07 14:40:51 +00:00
  • 8a353d8920 Merge pull request #995 from splunk/dependabot/pip/boto3-1.16.30 dependabot[bot] 2020-12-07 14:40:20 +00:00
  • 9a0bd3beef test file P4T12ICK 2020-12-07 15:37:28 +01:00
  • d72bb08f98 Bump boto3 from 1.16.29 to 1.16.30 dependabot[bot] 2020-12-07 14:03:12 +00:00
  • 3fc88e1dc4 new test file P4T12ICK 2020-12-07 14:21:52 +01:00
  • 7d062e4d9f new test file P4T12ICK 2020-12-07 14:18:07 +01:00
  • 7219bd3b2f Merge branch 'update_new_attack_data_project' of github.com:splunk/security-content into update_new_attack_data_project P4T12ICK 2020-12-07 14:01:14 +01:00
  • b7e5d46cc7 new test file P4T12ICK 2020-12-07 14:00:57 +01:00
  • f85cb702f1 Added detection testing service results inScheduled Task Name Used by Dragonfly Threat Actors root 2020-12-07 12:59:27 +00:00
  • 3dd7e5ae03 new test file P4T12ICK 2020-12-07 13:43:25 +01:00
  • 63cf7f66a5 Merge branch 'update_new_attack_data_project' of https://github.com/splunk/security-content into update_new_attack_data_project Detection Testing Service 2020-12-07 12:38:38 +00:00
  • 44bec27181 Added detection testing service results inSc exe Manipulating Windows Services root 2020-12-07 12:38:36 +00:00
  • bab819a39b Merge branch 'update_new_attack_data_project' of https://github.com/splunk/security-content into update_new_attack_data_project Detection Testing Service 2020-12-07 12:34:33 +00:00
  • 28bd33c4f9 Added detection testing service results inSamsam Test File Write root 2020-12-07 12:34:31 +00:00
  • fc054158da new test file P4T12ICK 2020-12-07 13:22:34 +01:00
  • 4477014930 new test file P4T12ICK 2020-12-07 13:09:29 +01:00
  • ab0b12d9be Merge branch 'develop' into update_new_attack_data_project P4T12ICK 2020-12-07 11:15:10 +01:00
  • 084f773457 Added detection testing service results inRunDLL Loading DLL By Ordinal automated_detection_testing_1607334446 root 2020-12-07 10:11:39 +00:00
  • 76fef04c97 Merge branch 'develop' into dependabot/pip/azure-mgmt-network-17.0.0 Ignacio 2020-12-04 14:12:22 -08:00
  • 43ff9e3512 Merge branch 'develop' into TR-253 Ignacio 2020-12-04 12:39:23 -08:00
  • b9e322db42 ignore skipped tests in reporting, include assertion functions for specific detection packages Ignacio Bermudez Corrales 2020-12-04 11:19:07 -08:00
  • 2d429135e3 Merge pull request #991 from splunk/appcert_25923 Bhavin Patel 2020-12-04 10:23:34 -08:00
  • c5a4aa4db8 remove autorize.conf bpatel 2020-12-04 09:52:30 -08:00
  • eb9d74ec1a Bump azure-mgmt-network from 16.0.0 to 17.0.0 dependabot[bot] 2020-12-04 14:15:06 +00:00
  • 48d7f22e38 Merge pull request #990 from splunk/dependabot/pip/botocore-1.19.29 dependabot[bot] 2020-12-04 14:14:11 +00:00
  • 239117d2b6 Bump botocore from 1.19.26 to 1.19.29 dependabot[bot] 2020-12-04 14:08:21 +00:00
  • b2b77bcba8 Merge pull request #989 from splunk/dependabot/pip/boto3-1.16.29 dependabot[bot] 2020-12-04 14:07:33 +00:00
  • 256165ebf0 Bump boto3 from 1.16.28 to 1.16.29 dependabot[bot] 2020-12-04 14:03:32 +00:00
  • b4de84cfa5 Merge branch 'develop' into update_new_attack_data_project P4T12ICK 2020-12-04 14:05:22 +01:00
  • 70034eea93 prilimary updates to response searches bpatel 2020-12-03 17:58:49 -08:00
  • fc102a4979 minor condition bpatel 2020-12-03 16:22:16 -08:00
  • d73efd0c88 remove duplicate response files bpatel 2020-12-03 16:14:58 -08:00
  • f006856d93 notable history and udpate token bpatel 2020-12-03 15:51:05 -08:00
  • c016374d08 update jinja for investigations bpatel 2020-12-03 15:18:40 -08:00
  • 556ba0e9e3 remove panels which are already shipped by ES bpatel 2020-12-03 15:13:42 -08:00
  • 6de245352f Merge pull request #984 from splunk/dependabot/pip/botocore-1.19.28 Bhavin Patel 2020-12-03 14:37:32 -08:00
  • 88a8ea61bc Merge pull request #982 from splunk/dependabot/pip/ansible-2.10.4 Bhavin Patel 2020-12-03 14:26:56 -08:00
  • 04c2ed4ccf Merge branch 'develop' into dependabot/pip/botocore-1.19.28 Bhavin Patel 2020-12-03 14:26:34 -08:00
  • c549467cd4 Merge pull request #981 from splunk/dependabot/pip/boto3-1.16.28 Bhavin Patel 2020-12-03 14:25:43 -08:00
  • db44bdfc4a Merge pull request #985 from splunk/dependabot/pip/azure-identity-1.5.0 Bhavin Patel 2020-12-03 14:25:17 -08:00
  • 4833e86ac1 updated pass conditions in tests Ignacio Bermudez Corrales 2020-12-03 11:37:00 -08:00
  • 8ed06d699f Skipping files that are not valid tests Ignacio Bermudez Corrales 2020-11-30 12:32:16 -08:00
  • b0c11c3d25 fixed "!" not Ignacio Bermudez Corrales 2020-11-25 10:55:04 -08:00
  • 3676b6a77a fixed links to assertions in test Ignacio Bermudez Corrales 2020-11-25 10:42:12 -08:00
  • 3d3f4cb6a8 support for multiple arguments Ignacio Bermudez Corrales 2020-11-25 10:32:03 -08:00
  • f04037b065 Basic assertion language Ignacio Bermudez Corrales 2020-11-24 14:04:30 -08:00
  • 4fd83c286f Merge pull request #983 from splunk/dependabot/pip/importlib-metadata-3.1.1 dependabot[bot] 2020-12-03 18:24:33 +00:00
  • c3d7052700 Merge branch 'develop' into dependabot/pip/boto3-1.16.28 Ignacio 2020-12-03 10:20:48 -08:00
  • 0d924562bb Merge branch 'develop' into dependabot/pip/ansible-2.10.4 Ignacio 2020-12-03 10:20:30 -08:00
  • cca5654a88 Merge branch 'develop' into dependabot/pip/importlib-metadata-3.1.1 Ignacio 2020-12-03 10:20:07 -08:00
  • 878d518f14 Merge branch 'develop' into dependabot/pip/botocore-1.19.28 Ignacio 2020-12-03 10:19:46 -08:00
  • 5cbab100cd Merge branch 'develop' into dependabot/pip/azure-identity-1.5.0 Ignacio 2020-12-03 10:19:25 -08:00
  • b36ca748cd updated url links for dataset P4T12ICK 2020-12-03 15:03:50 +01:00
  • 48e95fe940 Merge pull request #986 from splunk/TR-301 P4T12ICK 2020-12-03 13:29:05 +01:00
  • 5cbbcf9bd0 fixing testing coverage script Ignacio Bermudez Corrales 2020-12-02 16:36:32 -08:00
  • 5018fb563f changed test script and detections to comply with new format Ignacio Bermudez Corrales 2020-12-02 14:23:45 -08:00
  • 1e589d0664 Bump azure-identity from 1.4.1 to 1.5.0 dependabot[bot] 2020-12-02 14:03:52 +00:00
  • 61b81b0113 Bump botocore from 1.19.26 to 1.19.28 dependabot[bot] 2020-12-02 14:03:48 +00:00
  • 7c1a92bffa Bump importlib-metadata from 3.1.0 to 3.1.1 dependabot[bot] 2020-12-02 14:03:45 +00:00
  • 8bc4a01214 Bump ansible from 2.10.3 to 2.10.4 dependabot[bot] 2020-12-02 14:03:44 +00:00
  • db20ed8cab Bump boto3 from 1.16.25 to 1.16.28 dependabot[bot] 2020-12-02 14:03:42 +00:00
  • c841d1d1c7 Merge pull request #952 from splunk/dependabot/pip/stix2-2.1.0 P4T12ICK 2020-12-02 10:50:17 +01:00
  • 8c02d06dfd Merge branch 'develop' into dependabot/pip/stix2-2.1.0 P4T12ICK 2020-12-02 10:45:59 +01:00
  • 727c8612c4 Merge pull request #953 from splunk/dependabot/pip/importlib-metadata-3.1.0 P4T12ICK 2020-12-02 10:45:43 +01:00
  • 1a762fcd4e Bump stix2 from 2.0.2 to 2.1.0 dependabot[bot] 2020-12-02 09:42:21 +00:00
  • fca3401fda Merge branch 'develop' into dependabot/pip/importlib-metadata-3.1.0 P4T12ICK 2020-12-02 10:41:49 +01:00
  • d32202c416 Merge pull request #970 from splunk/dependabot/pip/pygithub-1.54 P4T12ICK 2020-12-02 10:41:30 +01:00
  • b60dbf9968 Merge branch 'develop' into dependabot/pip/pygithub-1.54 P4T12ICK 2020-12-02 10:36:51 +01:00
  • b080b35225 Merge pull request #971 from splunk/dependabot/pip/packaging-20.7 P4T12ICK 2020-12-02 10:36:40 +01:00
  • 8698c5fe46 Bump pygithub from 1.53 to 1.54 dependabot[bot] 2020-12-02 09:31:06 +00:00
  • 648730be8d Merge branch 'develop' into dependabot/pip/packaging-20.7 P4T12ICK 2020-12-02 10:30:32 +01:00
  • 0dd50a23e4 Merge pull request #975 from splunk/dependabot/pip/azure-mgmt-compute-18.0.0 P4T12ICK 2020-12-02 10:30:20 +01:00
  • c43d75840e Bump packaging from 20.4 to 20.7 dependabot[bot] 2020-12-02 09:26:20 +00:00
  • 29e819489c Merge branch 'develop' into dependabot/pip/azure-mgmt-compute-18.0.0 P4T12ICK 2020-12-02 10:25:49 +01:00
  • bd7ea8c0ee Merge pull request #976 from splunk/dependabot/pip/humanfriendly-9.0 P4T12ICK 2020-12-02 10:25:35 +01:00
  • 3f2692d6ac Bump azure-mgmt-compute from 17.0.0 to 18.0.0 dependabot[bot] 2020-12-02 09:19:51 +00:00
  • 8c2d64cc5c Merge branch 'develop' into dependabot/pip/humanfriendly-9.0 P4T12ICK 2020-12-02 10:19:18 +01:00
  • e809417d85 Merge pull request #979 from splunk/dependabot/pip/azure-core-1.9.0 P4T12ICK 2020-12-02 10:19:06 +01:00
  • 5214e3494d Merge branch 'develop' into dependabot/pip/azure-core-1.9.0 P4T12ICK 2020-12-02 10:12:49 +01:00
  • 1bebca7262 Merge pull request #915 from splunk/mustang_beta_test_files P4T12ICK 2020-12-02 10:11:35 +01:00
  • 8a1cb92eda Merge branch 'develop' into mustang_beta_test_files P4T12ICK 2020-12-02 10:06:59 +01:00
  • c4d749d6ff Merge branch 'develop' into workbench_issue_697 workbench_issue_697 bpatel 2020-12-01 14:00:39 -08:00
  • cfe83c3898 revert a custom config bpatel 2020-12-01 13:04:16 -08:00
  • 0805b7e9d3 Added detection testing service results inDetect AWS Console Login by User from New City root 2020-12-01 20:54:35 +00:00
  • 6324f3898d Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 20:38:46 +00:00
  • 69a1c028bf Added detection testing service results inCloud Provisioning Activity From Previously Unseen Country root 2020-12-01 20:38:45 +00:00
  • 8c1ae77ab3 Added detection testing service results inDetect AWS Console Login by New User root 2020-12-01 20:35:03 +00:00
  • cc1b0aa291 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 20:17:57 +00:00
  • b56cce1dc0 Added detection testing service results inCloud Instance Modified By Previously Unseen User root 2020-12-01 20:17:56 +00:00
  • 2a1946a5a3 Added detection testing service results inAbnormally High Number Of Cloud Security Group API Calls root 2020-12-01 20:07:25 +00:00
  • 241a01119c Added detection testing service results inAbnormally High Number Of Cloud Infrastructure API Calls root 2020-12-01 19:45:03 +00:00
  • 090ec51085 Bump humanfriendly from 8.2 to 9.0 dependabot[bot] 2020-12-01 14:17:18 +00:00