Commit Graph

  • b5dfe4450f removing a broken detection divious1 2020-11-17 16:32:59 -05:00
  • 83f4490738 test file bpatel 2020-11-17 13:30:02 -08:00
  • 5559738077 error bpatel 2020-11-17 12:51:51 -08:00
  • 3ef13b0937 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-17 12:43:47 -08:00
  • 7e418daa84 testing bpatel 2020-11-17 12:33:20 -08:00
  • 1f1f117a6b Merge branch 'develop' into mustang_beta_test_files Bhavin Patel 2020-11-17 10:52:15 -08:00
  • 7e0239be1d start time to be window start time Ignacio Bermudez Corrales 2020-11-17 10:10:10 -08:00
  • 1db0cb220e Merge branch 'develop' into misko_credential_probing Ignacio 2020-11-17 08:58:17 -08:00
  • 7f24225471 Merge pull request #926 from splunk/TR-279 Jose Enrique Hernandez 2020-11-17 11:46:01 -05:00
  • b43558177d Merge branch 'develop' into TR-279 Jose Enrique Hernandez 2020-11-17 11:35:51 -05:00
  • c847865345 Merge pull request #933 from splunk/dependabot/pip/botocore-1.19.19 dependabot[bot] 2020-11-17 14:45:36 +00:00
  • 16be07ffab Bump botocore from 1.19.18 to 1.19.19 dependabot[bot] 2020-11-17 14:30:57 +00:00
  • 1caced36cd Merge pull request #934 from splunk/dependabot/pip/boto3-1.16.19 dependabot[bot] 2020-11-17 14:30:11 +00:00
  • e564aade69 Bump boto3 from 1.16.18 to 1.16.19 dependabot[bot] 2020-11-17 14:02:49 +00:00
  • f110c1febe Merge branch 'develop' into mustang_beta_test_files Bhavin Patel 2020-11-16 20:44:01 -08:00
  • fe317c40fb Merge branch 'develop' into mustang_beta_drop3 Bhavin Patel 2020-11-16 20:34:01 -08:00
  • 98bcdf47fc datamodel fix bpatel 2020-11-16 20:15:36 -08:00
  • 8e5a9e731b spl update bpatel 2020-11-16 18:46:43 -08:00
  • a7110f1fec change type is EC2 bpatel 2020-11-16 17:25:45 -08:00
  • 8895ffddf7 updating macro fields bpatel 2020-11-16 17:22:29 -08:00
  • 2bed51a09e spl updates bpatel 2020-11-16 15:35:30 -08:00
  • 4f0ae086f5 order in ci pipeline: validate then test Ignacio Bermudez Corrales 2020-11-16 14:45:58 -08:00
  • e55747704d validating pipeline output required fields Ignacio Bermudez Corrales 2020-11-16 14:27:53 -08:00
  • 485a16b19c More refactoring Ignacio Bermudez Corrales 2020-11-16 14:10:35 -08:00
  • 9432661c7b Merge branch 'develop' into TR-279 Ignacio Bermudez Corrales 2020-11-16 13:43:32 -08:00
  • 71c5439788 minor change Ignacio Bermudez Corrales 2020-11-16 13:42:46 -08:00
  • 75d4610315 Renaming of objects Ignacio Bermudez Corrales 2020-11-16 11:37:13 -08:00
  • 655e3079b8 code cleanup Ignacio Bermudez Corrales 2020-11-16 10:44:47 -08:00
  • af98cad796 refactoring Ignacio Bermudez Corrales 2020-11-16 10:20:50 -08:00
  • f174ac7475 updating docs and package bits [ci skip] research bot 2020-11-16 17:17:08 +00:00
  • 9b2c2bcf28 Merge branch 'develop' into detection_testing_part_one P4T12ICK 2020-11-16 15:38:40 +01:00
  • c049e81eec Merge branch 'develop' into ryuktestsfiles P4T12ICK 2020-11-16 15:33:11 +01:00
  • 9e789a5d6d Merge pull request #930 from splunk/dependabot/pip/boto3-1.16.18 dependabot[bot] 2020-11-16 14:23:28 +00:00
  • 756c1dbb77 Bump boto3 from 1.16.17 to 1.16.18 dependabot[bot] 2020-11-16 14:18:24 +00:00
  • b4f5da9bdd Merge pull request #928 from splunk/dependabot/pip/botocore-1.19.18 dependabot[bot] 2020-11-16 14:17:32 +00:00
  • 82a0f21480 Bump botocore from 1.19.17 to 1.19.18 dependabot[bot] 2020-11-16 14:05:00 +00:00
  • c8a843c2e6 Merge branch 'ryuktestsfiles' of https://github.com/splunk/security-content into ryuktestsfiles Detection Testing Service 2020-11-16 13:59:32 +00:00
  • e2069b258c Added detection testing service results inWindows Security Account Manager Stopped root 2020-11-16 13:59:31 +00:00
  • 87488d7c16 Added detection testing service results inRyuk Test Files Detected root 2020-11-16 13:59:03 +00:00
  • e52c5627be test files changed P4T12ICK 2020-11-16 14:41:38 +01:00
  • 4873864495 updating docs and package bits [ci skip] research bot 2020-11-13 20:27:19 +00:00
  • 869eea1924 Added required fields for all SSA detections Ignacio Bermudez Corrales 2020-11-13 10:27:29 -08:00
  • 9cc734c38d Find problems with declared SSA fields in detection file Ignacio Bermudez Corrales 2020-11-13 09:26:35 -08:00
  • c5916e5e39 Merge pull request #924 from splunk/dependabot/pip/botocore-1.19.17 dependabot[bot] 2020-11-13 14:16:27 +00:00
  • 87063ab3f4 Bump botocore from 1.19.16 to 1.19.17 dependabot[bot] 2020-11-13 14:12:39 +00:00
  • 09a53ac858 Merge pull request #925 from splunk/dependabot/pip/urllib3-1.26.2 dependabot[bot] 2020-11-13 14:11:50 +00:00
  • c4d56ca596 Bump urllib3 from 1.26.1 to 1.26.2 dependabot[bot] 2020-11-13 14:07:53 +00:00
  • 48f4e53bab Merge pull request #923 from splunk/dependabot/pip/boto3-1.16.17 dependabot[bot] 2020-11-13 14:07:18 +00:00
  • 3a8e95e49e Bump boto3 from 1.16.16 to 1.16.17 dependabot[bot] 2020-11-13 14:03:13 +00:00
  • 5dd176f7a4 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-12 22:00:24 -08:00
  • ed484f6932 testing conf files bpatel 2020-11-12 17:19:38 -08:00
  • cbd3706b69 Merge pull request #922 from splunk/TR-293 Ignacio 2020-11-12 15:37:00 -08:00
  • 3d88fe1b15 Fixes for SSA 11/12/20 v3.9.0 v3.8.1 TR-293 Ignacio Bermudez Corrales 2020-11-12 15:03:29 -08:00
  • 8c85e10375 default is null TR_207 bpatel 2020-11-12 14:29:19 -08:00
  • 52d456fa33 detection update and scheduling bpatel 2020-11-12 13:51:55 -08:00
  • 398ee5f947 Merge pull request #843 from splunk/ransomwares3 Bhavin Patel 2020-11-12 11:51:39 -08:00
  • 757941e42e Merge branch 'develop' into minor_mispelling Bhavin Patel 2020-11-12 11:49:40 -08:00
  • 85f6925d9b Merge pull request #920 from splunk/TR-290 jzsplunk 2020-11-12 11:46:05 -08:00
  • c79a1b06c6 Dowloads Humvee fat jar only if local checksum doesnt match repository latest Ignacio Bermudez Corrales 2020-11-12 11:29:47 -08:00
  • 042b0c97e6 Merge pull request #918 from splunk/dependabot/pip/requests-2.25.0 Jose Enrique Hernandez 2020-11-12 13:55:28 -05:00
  • 78840e6d0a Merge branch 'develop' into dependabot/pip/requests-2.25.0 Jose Enrique Hernandez 2020-11-12 13:55:21 -05:00
  • 745fee6e90 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-12 08:55:15 -08:00
  • 8c4dfdaac7 Merge pull request #855 from inspired/mbjerkeland-develop Jose Enrique Hernandez 2020-11-12 11:08:23 -05:00
  • 70586e7916 Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-11-12 10:51:37 -05:00
  • 899df941e4 Merge branch 'develop' into detection_testing_part_one Jose Enrique Hernandez 2020-11-12 10:51:21 -05:00
  • 2c36edb66f Bump requests from 2.24.0 to 2.25.0 dependabot[bot] 2020-11-12 15:18:24 +00:00
  • 4c45add964 Merge pull request #917 from splunk/dependabot/pip/botocore-1.19.16 dependabot[bot] 2020-11-12 15:17:35 +00:00
  • a874999185 Merge branch 'develop' into detection_testing_part_one Jose Enrique Hernandez 2020-11-12 10:16:47 -05:00
  • ae843bc38c Merge branch 'develop' into mbjerkeland-develop P4T12ICK 2020-11-12 16:15:07 +01:00
  • 908350584a Bump botocore from 1.19.15 to 1.19.16 dependabot[bot] 2020-11-12 15:01:28 +00:00
  • 2d30b68407 Merge pull request #916 from splunk/dependabot/pip/boto3-1.16.16 dependabot[bot] 2020-11-12 15:00:19 +00:00
  • 0bcafe29bc Merge branch 'develop' into mbjerkeland-develop P4T12ICK 2020-11-12 15:35:38 +01:00
  • 7ba9a7d3d4 Bump boto3 from 1.16.15 to 1.16.16 dependabot[bot] 2020-11-12 14:33:55 +00:00
  • f07c3f9147 Merge pull request #919 from splunk/dependabot/pip/urllib3-1.26.1 dependabot[bot] 2020-11-12 14:33:01 +00:00
  • 4d12fae7c0 Bump urllib3 from 1.26.0 to 1.26.1 dependabot[bot] 2020-11-12 14:02:33 +00:00
  • 3e1b445765 Update detect_traffic_mirroring.yml P4T12ICK 2020-11-12 11:58:04 +01:00
  • 077de7769a Update detect_ipv6_network_infrastructure_threats.yml P4T12ICK 2020-11-12 11:50:34 +01:00
  • 4549464b9d Merge branch 'develop' into inspired-mbjerkeland-develop inspired-mbjerkeland-develop P4T12ICK 2020-11-12 10:28:10 +01:00
  • e815166426 Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-11-11 22:29:03 -08:00
  • 3e9513f4b8 Merge branch 'develop' into develop Jose Enrique Hernandez 2020-11-11 22:04:16 -05:00
  • 4acc8c3efb Merge branch 'develop' into mbjerkeland-develop Jose Enrique Hernandez 2020-11-11 22:03:44 -05:00
  • 5b06532f3e Merge pull request #892 from splunk/TR-249 Jose Enrique Hernandez 2020-11-11 21:58:54 -05:00
  • c26ba95347 Merge branch 'develop' into TR-249 Jose Enrique Hernandez 2020-11-11 21:58:44 -05:00
  • ffae539c00 Merge pull request #817 from splunk/TR162 Jose Enrique Hernandez 2020-11-11 20:39:02 -05:00
  • 2a23b6e764 Merge branch 'develop' into TR-249 Jose Enrique Hernandez 2020-11-11 20:35:00 -05:00
  • 3650ca926d Merge branch 'ransomwares3' of https://github.com/splunk/security-content into ransomwares3 bpatel 2020-11-11 16:45:57 -08:00
  • 46143f262d updating text bpatel 2020-11-11 16:45:41 -08:00
  • e185ca89ba Merge branch 'develop' into ransomwares3 Bhavin Patel 2020-11-11 16:36:34 -08:00
  • 8112beb887 asset type update bpatel 2020-11-11 16:34:55 -08:00
  • 9685be48a3 final detection bpatel 2020-11-11 16:33:20 -08:00
  • 86ed420e3a Merge branch 'develop' into minor_mispelling Bhavin Patel 2020-11-11 15:44:57 -08:00
  • e7e659e882 Merge branch 'develop' of github.com:splunk/security-content into TR162 Xiao Lin 2020-11-11 23:25:18 +00:00
  • 5a590068f8 Merge pull request #882 from splunk/issue_#850 Bhavin Patel 2020-11-11 12:54:34 -08:00
  • def37e1249 removed the converter since we do not use it anymore and updated reqs to avoid errors divious1 2020-11-11 15:32:53 -05:00
  • cdb274547f Merge pull request #900 from splunk/ssa-coverage Jose Enrique Hernandez 2020-11-11 15:03:18 -05:00
  • f0e99eb7ce Merge branch 'develop' into ssa-coverage Jose Enrique Hernandez 2020-11-11 14:50:16 -05:00
  • a591beea84 Merge pull request #911 from splunk/dependabot/pip/urllib3-1.26.0 Jose Enrique Hernandez 2020-11-11 14:29:34 -05:00
  • 5a8992d8c1 Merge branch 'develop' into dependabot/pip/urllib3-1.26.0 Jose Enrique Hernandez 2020-11-11 14:26:42 -05:00
  • f0cf21da9d Merge pull request #908 from splunk/misko_illegal_management Jose Enrique Hernandez 2020-11-11 14:26:15 -05:00
  • 29ee838a50 Merge branch 'develop' into misko_illegal_management misko_illegal_management Jose Enrique Hernandez 2020-11-11 13:32:53 -05:00