Commit Graph

  • a348cf6f0b Merge branch 'develop' into ssa-coverage Ignacio 2020-11-04 11:48:41 -08:00
  • db0e7bd862 Merge branch 'develop' into misko_apply_set_stolen_credentials Jose Enrique Hernandez 2020-11-04 14:40:49 -05:00
  • f4f86b2aa1 Merge pull request #881 from splunk/TR-275 Jose Enrique Hernandez 2020-11-04 14:30:36 -05:00
  • b925f68f2f Merge branch 'develop' into TR-275 Jose Enrique Hernandez 2020-11-04 14:22:37 -05:00
  • 6f74b00b43 Changed cicd image to use cached repository Ignacio Bermudez Corrales 2020-11-04 11:19:17 -08:00
  • 907cca4ff8 Merge branch 'develop' into ssa-coverage Jose Enrique Hernandez 2020-11-04 14:06:46 -05:00
  • c7b8e7166f Merge pull request #816 from splunk/misko_cred_extract_APIs_and_Filenames Jose Enrique Hernandez 2020-11-04 14:03:02 -05:00
  • 546ddff4c7 Merge branch 'develop' into ssa-coverage Jose Enrique Hernandez 2020-11-04 13:59:26 -05:00
  • 3a0bd10c23 Merge pull request #864 from splunk/new_test_file_format Jose Enrique Hernandez 2020-11-04 13:58:14 -05:00
  • 7391a565d2 Merge pull request #856 from splunk/remove_commuunity_branch Jose Enrique Hernandez 2020-11-04 13:57:40 -05:00
  • cfadee1d7a Merge branch 'develop' into misko_apply_set_stolen_credentials jzsplunk 2020-11-04 10:15:19 -08:00
  • 7281215fc3 Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames Jose Enrique Hernandez 2020-11-04 13:14:03 -05:00
  • bea2c6292e Merge pull request #862 from splunk/kubernetes_gcp_detect_most_active_service_accounts_by_pod-minor-bug-fix Bhavin Patel 2020-11-04 10:12:10 -08:00
  • 7434975199 Merge branch 'develop' into misko_apply_set_stolen_credentials jzsplunk 2020-11-04 10:03:17 -08:00
  • b46acc0d4f Fix SPL in the Mimikatz module detection Stanislav Miskovic 2020-11-04 09:28:38 -08:00
  • c25465c174 Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames Jose Enrique Hernandez 2020-11-04 12:26:48 -05:00
  • c0b6899745 Merge branch 'develop' into remove_commuunity_branch remove_commuunity_branch P4T12ICK 2020-11-04 17:58:44 +01:00
  • ac27485034 Merge branch 'develop' into new_test_file_format P4T12ICK 2020-11-04 17:58:26 +01:00
  • 5d6054f743 Merge pull request #838 from splunk/TR-251 Jose Enrique Hernandez 2020-11-04 11:56:55 -05:00
  • 6ac43cd591 Merge branch 'develop' into TR-251 Jose Enrique Hernandez 2020-11-04 11:34:57 -05:00
  • 18c66b9959 Merge branch 'develop' into misko_apply_set_stolen_credentials jzsplunk 2020-11-04 08:29:58 -08:00
  • 6e32a81527 Merge branch 'develop' into remove_commuunity_branch Jose Enrique Hernandez 2020-11-04 11:15:11 -05:00
  • e5daa666d9 Merge pull request #852 from splunk/dependabot/pip/cryptography-3.2.1 Jose Enrique Hernandez 2020-11-04 11:14:53 -05:00
  • 0993dbbb8c Bump cryptography from 3.2 to 3.2.1 dependabot[bot] 2020-11-04 16:14:47 +00:00
  • 85cb5103f6 Merge pull request #857 from splunk/dependabot/pip/pytest-6.1.2 Jose Enrique Hernandez 2020-11-04 11:14:32 -05:00
  • f64b8c1f6c Merge branch 'develop' into dependabot/pip/pytest-6.1.2 Jose Enrique Hernandez 2020-11-04 11:14:25 -05:00
  • 1a37ae49fa Merge pull request #860 from splunk/dependabot/pip/importlib-resources-3.3.0 Jose Enrique Hernandez 2020-11-04 11:14:12 -05:00
  • 4db84c6e48 Merge branch 'develop' into dependabot/pip/importlib-resources-3.3.0 Jose Enrique Hernandez 2020-11-04 11:14:05 -05:00
  • d45b0acbca Bump pytest from 6.1.1 to 6.1.2 dependabot[bot] 2020-11-04 16:14:00 +00:00
  • 421c9bfcd8 Bump importlib-resources from 3.2.0 to 3.3.0 dependabot[bot] 2020-11-04 16:13:58 +00:00
  • 21883675f3 Merge pull request #866 from splunk/dependabot/pip/more-itertools-8.6.0 Jose Enrique Hernandez 2020-11-04 11:13:51 -05:00
  • 471788266d Merge branch 'develop' into dependabot/pip/more-itertools-8.6.0 Jose Enrique Hernandez 2020-11-04 11:13:44 -05:00
  • 1b832bfff5 Merge pull request #868 from splunk/dependabot/pip/toml-0.10.2 Jose Enrique Hernandez 2020-11-04 11:13:30 -05:00
  • 9f4114f7f8 Merge branch 'develop' into dependabot/pip/toml-0.10.2 Jose Enrique Hernandez 2020-11-04 11:13:22 -05:00
  • facf8c413f Merge pull request #878 from splunk/dependabot/pip/identify-1.5.9 Jose Enrique Hernandez 2020-11-04 11:13:10 -05:00
  • 05c33b87cc Bump toml from 0.10.1 to 0.10.2 dependabot[bot] 2020-11-04 16:01:49 +00:00
  • fb55ed0778 Bump more-itertools from 8.5.0 to 8.6.0 dependabot[bot] 2020-11-04 16:01:46 +00:00
  • 558cffef98 Merge branch 'develop' into dependabot/pip/identify-1.5.9 Jose Enrique Hernandez 2020-11-04 11:01:08 -05:00
  • a9eb65996e Merge pull request #879 from splunk/dependabot/pip/ansible-2.10.2 Jose Enrique Hernandez 2020-11-04 11:00:54 -05:00
  • 89778a87cf Merge branch 'develop' into dependabot/pip/ansible-2.10.2 Jose Enrique Hernandez 2020-11-04 10:58:19 -05:00
  • b3141ea03f Merge branch 'develop' into misko_apply_set_stolen_credentials jzsplunk 2020-11-04 07:52:06 -08:00
  • 511c75b0eb Merge pull request #880 from splunk/dependabot_auto_merges jzsplunk 2020-11-04 07:51:42 -08:00
  • 9f554b022e Merge branch 'develop' into misko_apply_set_stolen_credentials jzsplunk 2020-11-04 07:36:16 -08:00
  • 2960c5c5f4 Merge branch 'develop' into remove_commuunity_branch P4T12ICK 2020-11-04 16:16:00 +01:00
  • 937defcc56 Merge branch 'develop' into dependabot_auto_merges Jose Enrique Hernandez 2020-11-04 10:12:06 -05:00
  • f946f3eed2 updating token divious1 2020-11-04 10:11:34 -05:00
  • 77c68e7c93 Merge branch 'develop' into new_test_file_format P4T12ICK 2020-11-04 15:50:51 +01:00
  • 6a99d4b656 Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format P4T12ICK 2020-11-04 15:44:50 +01:00
  • 50b0900b77 testing detections P4T12ICK 2020-11-04 15:44:02 +01:00
  • 56923d6b5b Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:40:53 +00:00
  • f672f16394 Added detection testing service results inWindows Event Log Cleared root 2020-11-04 14:40:52 +00:00
  • f109b391bd Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:39:27 +00:00
  • e2c5a533f3 Added detection testing service results inUnload Sysmon Filter Driver root 2020-11-04 14:39:25 +00:00
  • a36a1fc169 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:38:35 +00:00
  • 5b7dc4049b Added detection testing service results inSystem Information Discovery Detection root 2020-11-04 14:38:34 +00:00
  • 9cfde6bc75 Added detection testing service results inProcess execution via wmi root 2020-11-04 14:37:23 +00:00
  • 7fdaddbff4 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:09:58 +00:00
  • 2bf7919b52 Added detection testing service results inShort Lived Windows Accounts root 2020-11-04 14:09:57 +00:00
  • 0745dba18e Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:09:45 +00:00
  • a101c1a5b1 Added detection testing service results inSchtasks scheduling job on remote system root 2020-11-04 14:09:44 +00:00
  • 5c5eda70b2 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 14:08:39 +00:00
  • 912b990e01 Added detection testing service results inSuspicious Reg exe Process root 2020-11-04 14:08:38 +00:00
  • bbd0a2cdf1 Bump ansible from 2.10.1 to 2.10.2 dependabot[bot] 2020-11-04 14:03:38 +00:00
  • 5243cbcd24 Bump identify from 1.5.7 to 1.5.9 dependabot[bot] 2020-11-04 14:03:36 +00:00
  • 6859627fdc Added detection testing service results inMalicious PowerShell Process - Encoded Command root 2020-11-04 13:58:12 +00:00
  • 4f5bcacd5a Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 13:08:59 +00:00
  • 5d8f3f9ed4 Added detection testing service results inDump LSASS via comsvcs DLL root 2020-11-04 13:08:57 +00:00
  • c1ee613a59 Added detection testing service results inDetect Path Interception By Creation Of program exe root 2020-11-04 13:07:50 +00:00
  • 3842a15221 Added detection testing service results inCredential Dumping via Symlink to Shadow Copy root 2020-11-04 12:38:04 +00:00
  • a7ba6afe57 Merge branch 'new_test_file_format' of https://github.com/splunk/security-content into new_test_file_format Detection Testing Service 2020-11-04 12:12:28 +00:00
  • ee9330e03f Added detection testing service results inCreation of Shadow Copy root 2020-11-04 12:12:26 +00:00
  • df7b7b2230 Added detection testing service results inCredential Dumping via Copy Command from Shadow Copy root 2020-11-04 12:08:51 +00:00
  • b39e0d0967 Merge pull request #869 from splunk/dependabot/pip/pre-commit-2.8.2 P4T12ICK 2020-11-04 12:39:02 +01:00
  • f2baa5ca54 Added detection testing service results inCreation of Shadow Copy with wmic and powershell root 2020-11-04 11:10:33 +00:00
  • cfbc3fee26 Merge branch 'develop' into dependabot/pip/pre-commit-2.8.2 P4T12ICK 2020-11-04 11:06:51 +01:00
  • 30eca709f2 Merge pull request #874 from splunk/dependabot/pip/boto3-1.16.10 P4T12ICK 2020-11-04 11:06:36 +01:00
  • 64710a93c1 Added detection testing service results inCreate local admin accounts using net exe root 2020-11-04 09:16:50 +00:00
  • 17509bd038 Merge branch 'develop' into dependabot/pip/boto3-1.16.10 P4T12ICK 2020-11-04 10:03:13 +01:00
  • 5cf4f70611 Merge pull request #873 from splunk/dependabot_auto_merges P4T12ICK 2020-11-04 10:02:53 +01:00
  • 16821b72b8 Applying and setting stolen cresentials - detections via PowerSploit, Mimikatz and DSInternals APIs Stanislav Miskovic 2020-11-04 01:02:47 -08:00
  • eb21bbc377 Merge branch 'develop' into dependabot_auto_merges P4T12ICK 2020-11-04 09:41:34 +01:00
  • 38b2289a57 Bump pre-commit from 2.7.1 to 2.8.2 dependabot[bot] 2020-11-04 08:41:06 +00:00
  • 193fc587be Bump boto3 from 1.16.6 to 1.16.10 dependabot[bot] 2020-11-04 08:40:41 +00:00
  • e8b5dc278b Merge pull request #875 from splunk/dependabot/pip/botocore-1.19.10 P4T12ICK 2020-11-04 09:40:09 +01:00
  • 3415b9e414 Added detection testing service results inAttempted Credential Dump From Registry via Reg exe root 2020-11-04 08:34:58 +00:00
  • 7f76d43d1b Merge branch 'develop' into dependabot_auto_merges P4T12ICK 2020-11-04 09:24:00 +01:00
  • e71e4b338a Merge branch 'develop' into dependabot/pip/botocore-1.19.10 P4T12ICK 2020-11-04 09:21:45 +01:00
  • 38b65d148e Merge pull request #876 from splunk/dependabot/pip/identify-1.5.7 P4T12ICK 2020-11-04 09:21:28 +01:00
  • 7e6f92e6ed Merge branch 'develop' of github.com:splunk/security-content into TR162 Xiao Lin 2020-11-04 00:27:33 +00:00
  • 0cee900ae3 Added detection testing service results inAttempt To Add Certificate To Untrusted Store root 2020-11-03 16:29:27 +00:00
  • 15d866e2fa Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format P4T12ICK 2020-11-03 17:05:11 +01:00
  • 15a3dfed60 detection tests P4T12ICK 2020-11-03 17:04:53 +01:00
  • 8bec983392 Bump identify from 1.5.6 to 1.5.7 dependabot[bot] 2020-11-03 14:04:40 +00:00
  • 5b70b0ce9d Added detection testing service results inCreate local admin accounts using net exe root 2020-11-03 12:30:01 +00:00
  • b58799902f Merge branch 'new_test_file_format' of github.com:splunk/security-content into new_test_file_format P4T12ICK 2020-11-03 08:58:01 +01:00
  • ea57d72261 removed tmp.py P4T12ICK 2020-11-03 08:57:40 +01:00
  • cf690c86b0 Merge branch 'develop' into new_test_file_format Jose Enrique Hernandez 2020-11-02 21:24:50 -05:00
  • b3f451c3c1 Bump botocore from 1.19.6 to 1.19.10 dependabot[bot] 2020-11-03 02:23:18 +00:00
  • 101bc9ca05 Merge pull request #872 from splunk/dependabot/pip/pytz-2020.4 Jose Enrique Hernandez 2020-11-02 21:22:20 -05:00
  • 36f18aa2ca adding dependabot automerge with git workflows divious1 2020-11-02 21:19:19 -05:00