Commit Graph

  • 9f3b016129 Bump azure-core from 1.8.2 to 1.9.0 dependabot[bot] 2020-12-01 14:17:00 +00:00
  • 1743a5352a Merge pull request #974 from splunk/dependabot/pip/botocore-1.19.26 dependabot[bot] 2020-12-01 14:16:25 +00:00
  • dd14752efd Bump botocore from 1.19.25 to 1.19.26 dependabot[bot] 2020-12-01 14:12:36 +00:00
  • 51ec1c5091 Merge pull request #978 from splunk/dependabot/pip/azure-mgmt-core-1.2.2 dependabot[bot] 2020-12-01 14:11:46 +00:00
  • 99a5544e57 Bump azure-mgmt-core from 1.2.1 to 1.2.2 dependabot[bot] 2020-12-01 14:07:46 +00:00
  • 670baaf0a5 Merge pull request #977 from splunk/dependabot/pip/azure-common-1.1.26 dependabot[bot] 2020-12-01 14:07:10 +00:00
  • 8182e0162b Bump azure-common from 1.1.25 to 1.1.26 dependabot[bot] 2020-12-01 14:03:17 +00:00
  • b47fddab62 Added detection testing service results inDetect AWS Console Login by User from New Region root 2020-12-01 00:51:03 +00:00
  • 800df744a3 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 00:11:50 +00:00
  • d5df1b0c1e Added detection testing service results inCloud Provisioning Activity From Previously Unseen IP Address root 2020-12-01 00:11:49 +00:00
  • 624ef5b790 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 00:11:37 +00:00
  • 56a1852463 Added detection testing service results inDetect AWS Console Login by User from New Country root 2020-12-01 00:11:36 +00:00
  • 22ae8ac9c0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 00:11:28 +00:00
  • 96ddfdc0f6 Added detection testing service results inCloud Provisioning Activity From Previously Unseen Region root 2020-12-01 00:11:26 +00:00
  • 6421ec1b47 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-12-01 00:02:23 +00:00
  • 740a7e2f89 Added detection testing service results inCloud Provisioning Activity From Previously Unseen City root 2020-12-01 00:02:22 +00:00
  • 36fd1141e4 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Instance Type root 2020-12-01 00:02:09 +00:00
  • 216281f568 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-11-30 23:39:11 +00:00
  • e174abe001 Added detection testing service results inCloud Compute Instance Created With Previously Unseen Image root 2020-11-30 23:39:10 +00:00
  • 17ab3cf97b Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-11-30 23:29:25 +00:00
  • 8c50ef2beb Added detection testing service results inCloud Compute Instance Created By Previously Unseen User root 2020-11-30 23:29:24 +00:00
  • f57e539ad0 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files Detection Testing Service 2020-11-30 23:29:05 +00:00
  • a0dc08a2f7 Added detection testing service results inCloud API Calls From Previously Unseen User Roles root 2020-11-30 23:29:04 +00:00
  • f39ea4b631 Merge branch 'develop' into mustang_beta_test_files Bhavin Patel 2020-11-30 15:16:18 -08:00
  • 0d2d8c573d Added detection testing service results inAWS Cross Account Activity From Previously Unseen Account root 2020-11-30 23:05:14 +00:00
  • 92ee473303 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-30 14:59:19 -08:00
  • 8dee7b1001 Merge branch 'mustang_beta_test_files' of https://github.com/splunk/security-content into mustang_beta_test_files bpatel 2020-11-30 14:47:56 -08:00
  • 2f48f15024 update test condition bpatel 2020-11-30 14:43:55 -08:00
  • 9655f9245a Added detection testing service results inCloud Compute Instance Created In Previously Unused Region root 2020-11-30 22:19:34 +00:00
  • 48a1d3af9e new test file format bpatel 2020-11-30 12:56:31 -08:00
  • 0e2760f4dd Merge pull request #973 from splunk/issue_948 Bhavin Patel 2020-11-30 12:39:09 -08:00
  • ba60c97e4d terra innnit bpatel 2020-11-30 12:35:47 -08:00
  • 0e410b3dc2 updated sourcetype bpatel 2020-11-30 12:30:47 -08:00
  • dbc575f3fd Added detection testing service results inCloud Compute Instance Created In Previously Unused Region test_branch_patrick root 2020-11-30 18:02:28 +00:00
  • cb66016723 test branch P4T12ICK 2020-11-30 18:38:31 +01:00
  • e082acc73e Merge pull request #907 from splunk/detection_testing_part_one P4T12ICK 2020-11-30 18:25:14 +01:00
  • 354bf5c03a merged P4T12ICK 2020-11-30 18:12:44 +01:00
  • bafb1f6674 Merge pull request #961 from splunk/new_testing_format P4T12ICK 2020-11-30 18:10:04 +01:00
  • 22118b2ce0 new test file P4T12ICK 2020-11-30 17:20:43 +01:00
  • 3f4370788a new test format P4T12ICK 2020-11-30 17:18:10 +01:00
  • 0c73cd7759 Merge pull request #905 from splunk/ryuktestsfiles P4T12ICK 2020-11-30 17:15:05 +01:00
  • b449989ac9 small changes P4T12ICK 2020-11-30 17:09:24 +01:00
  • 0a22d9b2c7 ryuk test files P4T12ICK 2020-11-30 17:07:17 +01:00
  • 7c5a45e2a5 Added detection testing service results inRunDLL Loading DLL By Ordinal root 2020-11-30 16:02:55 +00:00
  • 40478f6377 Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one P4T12ICK 2020-11-30 16:39:43 +01:00
  • c84455b8ce detection test P4T12ICK 2020-11-30 16:39:27 +01:00
  • f0ae106811 Added detection testing service results inRemote Process Instantiation via WMI root 2020-11-30 14:20:03 +00:00
  • e6fe82dbe3 new test file P4T12ICK 2020-11-30 14:53:59 +01:00
  • ef9956b601 Added detection testing service results inRegistry Keys Used For Privilege Escalation root 2020-11-27 09:42:21 +00:00
  • 61c8403d81 Added detection testing service results inRegistry Keys Used For Persistence root 2020-11-27 09:17:39 +00:00
  • d07068eda9 new test P4T12ICK 2020-11-27 09:49:16 +01:00
  • 31fc4903fd Merge branch 'develop' into dependabot/pip/importlib-metadata-3.1.0 P4T12ICK 2020-11-27 09:16:05 +01:00
  • e874e0675d Merge pull request #954 from splunk/dependabot/pip/virtualenv-20.2.1 P4T12ICK 2020-11-27 09:15:52 +01:00
  • 62658b8ec6 Bump importlib-metadata from 2.0.0 to 3.1.0 dependabot[bot] 2020-11-27 08:07:34 +00:00
  • f698e0f4f1 Merge branch 'develop' into dependabot/pip/virtualenv-20.2.1 P4T12ICK 2020-11-27 09:06:58 +01:00
  • ef1ef56ca9 Merge pull request #965 from splunk/dependabot/pip/attackcti-0.3.4.3 P4T12ICK 2020-11-27 09:06:43 +01:00
  • 1aec3eac01 Bump virtualenv from 20.1.0 to 20.2.1 dependabot[bot] 2020-11-27 07:51:08 +00:00
  • b820c26155 Merge branch 'develop' into dependabot/pip/attackcti-0.3.4.3 P4T12ICK 2020-11-27 08:50:36 +01:00
  • 69e36d86ba Merge pull request #967 from splunk/dependabot/pip/antlr4-python3-runtime-4.9 P4T12ICK 2020-11-27 08:50:24 +01:00
  • 24a448823a Added detection testing service results inRegistry Keys for Creating SHIM Databases root 2020-11-27 07:43:34 +00:00
  • 14cb8fb1c9 Bump attackcti from 0.3.4 to 0.3.4.3 dependabot[bot] 2020-11-27 07:37:58 +00:00
  • be2087cad2 Merge branch 'develop' into dependabot/pip/antlr4-python3-runtime-4.9 P4T12ICK 2020-11-27 08:37:21 +01:00
  • 362b4d8533 Merge pull request #969 from splunk/dependabot/pip/pre-commit-2.9.2 P4T12ICK 2020-11-27 08:37:08 +01:00
  • 5629f560fb updated detection service P4T12ICK 2020-11-26 17:45:50 +01:00
  • cda72cfef3 Added detection testing service results inReg exe Manipulating Windows Services Registry Keys root 2020-11-26 16:26:31 +00:00
  • 5070d267ff Update detection_service.py P4T12ICK 2020-11-26 17:04:51 +01:00
  • 43d2c73f03 Added detection testing service results inShim Database Installation With Suspicious Parameters root 2020-11-26 15:59:55 +00:00
  • 9a6771bde9 Added detection testing service results inShim Database Installation With Suspicious Parameters root 2020-11-26 14:30:28 +00:00
  • b006a90ab7 Bump pre-commit from 2.8.2 to 2.9.2 dependabot[bot] 2020-11-26 14:03:06 +00:00
  • a416691f3a Added detection testing service results inShim Database Installation With Suspicious Parameters root 2020-11-26 13:48:57 +00:00
  • 836096e0fa Merge branch 'detection_testing_part_one' of github.com:splunk/security-content into detection_testing_part_one P4T12ICK 2020-11-26 14:27:16 +01:00
  • bd5ca7860f new detection test P4T12ICK 2020-11-26 14:26:58 +01:00
  • fae49833e1 Added detection testing service results inRegistry Keys for Creating SHIM Databases root 2020-11-26 13:23:37 +00:00
  • a8d1942571 new test file P4T12ICK 2020-11-26 14:02:15 +01:00
  • c88bd8e856 new test file P4T12ICK 2020-11-26 13:21:46 +01:00
  • b2f18cc3d4 Added detection testing service results inReg exe Manipulating Windows Services Registry Keys root 2020-11-26 11:34:53 +00:00
  • c9d7c7580a new test file P4T12ICK 2020-11-26 11:38:31 +01:00
  • 13dd351a75 new test file format P4T12ICK 2020-11-26 09:48:01 +01:00
  • 209b2ed006 new test file format P4T12ICK 2020-11-26 09:40:01 +01:00
  • 46a2937d74 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-25 15:03:09 -08:00
  • 6579c43130 Merge branch 'new_testing_format' of github.com:splunk/security-content into new_testing_format P4T12ICK 2020-11-25 16:22:36 +01:00
  • 9baa895242 new test file P4T12ICK 2020-11-25 16:21:59 +01:00
  • 5cd7719966 Added detection testing service results inDetect New Local Admin account root 2020-11-25 15:19:32 +00:00
  • e952a2d3d5 Bump antlr4-python3-runtime from 4.8 to 4.9 dependabot[bot] 2020-11-25 14:52:52 +00:00
  • 62960b37f5 Merge pull request #968 from splunk/dependabot/pip/boto3-1.16.25 dependabot[bot] 2020-11-25 14:52:00 +00:00
  • 4d1303f266 Bump boto3 from 1.16.24 to 1.16.25 dependabot[bot] 2020-11-25 14:47:52 +00:00
  • ad663f90e2 Merge pull request #964 from splunk/dependabot/pip/cffi-1.14.4 dependabot[bot] 2020-11-25 14:46:51 +00:00
  • 9cfe82a797 Bump cffi from 1.14.3 to 1.14.4 dependabot[bot] 2020-11-25 14:08:54 +00:00
  • e067606a03 Merge pull request #966 from splunk/dependabot/pip/botocore-1.19.25 dependabot[bot] 2020-11-25 14:07:58 +00:00
  • 9307e57723 Bump botocore from 1.19.24 to 1.19.25 dependabot[bot] 2020-11-25 14:03:11 +00:00
  • f1932c5a50 New format for detection testing P4T12ICK 2020-11-25 12:29:34 +01:00
  • f61e5f9005 Merge pull request #955 from splunk/dependabot/pip/identify-1.5.10 dependabot[bot] 2020-11-24 14:23:03 +00:00
  • f56ccf079d Bump identify from 1.5.9 to 1.5.10 dependabot[bot] 2020-11-24 14:18:01 +00:00
  • 52bc17c6df Merge pull request #957 from splunk/dependabot/pip/boto3-1.16.24 dependabot[bot] 2020-11-24 14:17:10 +00:00
  • 91a82f76b7 Bump boto3 from 1.16.22 to 1.16.24 dependabot[bot] 2020-11-24 14:12:49 +00:00
  • 7df17cac70 Merge pull request #958 from splunk/dependabot/pip/botocore-1.19.24 dependabot[bot] 2020-11-24 14:11:56 +00:00
  • f66569fb40 Bump botocore from 1.19.22 to 1.19.24 dependabot[bot] 2020-11-24 14:07:46 +00:00
  • ab3332666d Merge pull request #956 from splunk/dependabot/pip/attackcti-0.3.4 dependabot[bot] 2020-11-24 14:06:52 +00:00
  • 04c501c619 Bump attackcti from 0.3.3 to 0.3.4 dependabot[bot] 2020-11-24 14:02:43 +00:00
  • 38991e84e0 Merge pull request #945 from splunk/testing-data-pulling P4T12ICK 2020-11-24 14:30:14 +01:00