Commit Graph

  • 82c0d8977f added debugging information Ignacio Bermudez Corrales 2020-10-22 15:54:14 -07:00
  • c53e9124d0 Merge pull request #820 from splunk/dependabot/pip/boto3-1.16.3 dependabot-preview[bot] 2020-10-22 22:30:24 +00:00
  • 9ef42f5c43 Merge branch 'develop' of github.com:splunk/security-content into TR162 Xiao Lin 2020-10-22 22:13:48 +00:00
  • 26d3d3e00d Bump boto3 from 1.16.2 to 1.16.3 dependabot-preview[bot] 2020-10-22 22:00:11 +00:00
  • b113f4b1e7 Merge pull request #821 from splunk/dependabot/pip/importlib-resources-3.1.0 dependabot-preview[bot] 2020-10-22 21:58:54 +00:00
  • 65875af20d Bump importlib-resources from 3.0.0 to 3.1.0 dependabot-preview[bot] 2020-10-22 21:34:21 +00:00
  • 9d139764bf fixed tests Ignacio Bermudez Corrales 2020-10-22 14:30:14 -07:00
  • 45f67bc365 add test data Xiao Lin 2020-10-22 21:09:27 +00:00
  • 4b933ff9ef add test notebooks Xiao Lin 2020-10-22 20:54:31 +00:00
  • bd76baace0 Final report of passed and failed Ignacio Bermudez Corrales 2020-10-22 13:51:28 -07:00
  • 68c3830a88 Merge branch 'develop' of github.com:splunk/security-content into TR162 Xiao Lin 2020-10-22 20:49:45 +00:00
  • 67b13d7ca3 skip-errors option added to run all tests without stop Ignacio Bermudez Corrales 2020-10-22 13:31:19 -07:00
  • fe11f93dd2 Merge pull request #819 from splunk/dependabot/pip/botocore-1.19.3 dependabot-preview[bot] 2020-10-22 19:54:47 +00:00
  • cf117d78fb minor fix bpatel 2020-10-22 12:48:51 -07:00
  • 51c8df5f21 multiple tests supported + output validation Ignacio Bermudez Corrales 2020-10-22 12:47:15 -07:00
  • 4cabe9af56 remove mitre id from filename Xiao Lin 2020-10-22 19:43:06 +00:00
  • 112bf977c2 remove mitre id from filename Xiao Lin 2020-10-22 19:41:56 +00:00
  • 593a39f523 Merge branch 'develop' of github.com:splunk/security-content into TR162 Xiao Lin 2020-10-22 19:37:17 +00:00
  • 84a7fa98e9 Bump botocore from 1.19.2 to 1.19.3 dependabot-preview[bot] 2020-10-22 19:30:44 +00:00
  • f84dd4ad4a Merge branch 'develop' into misko_cred_extract_APIs_and_Filenames Jose Enrique Hernandez 2020-10-22 14:13:07 -04:00
  • 0e28e78b5f pass_condition to the end of the pipeline Ignacio Bermudez Corrales 2020-10-22 10:04:28 -07:00
  • 5d1a18f015 Merge pull request #811 from splunk/dependabot/pip/botocore-1.19.2 dependabot-preview[bot] 2020-10-22 16:17:47 +00:00
  • 989496ff18 Bump botocore from 1.19.1 to 1.19.2 dependabot-preview[bot] 2020-10-22 16:12:26 +00:00
  • 4df02c5957 Merge pull request #812 from splunk/dependabot/pip/boto3-1.16.2 dependabot-preview[bot] 2020-10-22 16:11:14 +00:00
  • 82047dfb97 Bump boto3 from 1.16.1 to 1.16.2 dependabot-preview[bot] 2020-10-22 16:07:03 +00:00
  • 4a9ec6c437 Merge pull request #815 from splunk/tf23 xlinsplunk 2020-10-22 09:05:41 -07:00
  • fc62a736fa Merge branch 'develop' into add_gitlab_ci Jose Enrique Hernandez 2020-10-22 11:30:42 -04:00
  • 022ead83ff update Xiao Lin 2020-10-22 11:07:58 +00:00
  • 1f51317037 update Xiao Lin 2020-10-22 10:22:33 +00:00
  • 54d12d03c1 add two lateral movement detections Xiao Lin 2020-10-22 09:03:21 +00:00
  • bfcf77fc8a update training notebook Xiao Lin 2020-10-22 01:07:09 -07:00
  • edd0dcfc70 update test notebook Xiao Lin 2020-10-21 17:30:46 -07:00
  • 54829289f2 Merge pull request #809 from splunk/develop Bhavin Patel 2020-10-21 17:12:05 -07:00
  • edec14ae4a testing multiple risk scores multiple_risk_scores bpatel 2020-10-21 17:08:29 -07:00
  • 68f2b1f3d1 jinja test bpatel 2020-10-21 16:47:28 -07:00
  • 1b9910b2c6 Credentail Extraction detected via common exploit modules embedded in Mimikatz, PowerSploit and DSInternals Stanislav Miskovic 2020-10-21 16:41:54 -07:00
  • 853c788f3b jinja test bpatel 2020-10-21 16:16:00 -07:00
  • 524f148b6f testing on exegol bpatel 2020-10-21 16:06:29 -07:00
  • 779e9e1555 updated .gitlab-ci Ignacio Bermudez Corrales 2020-10-21 15:22:02 -07:00
  • 96892d3e4e added more output for debugging Ignacio Bermudez Corrales 2020-10-21 15:12:39 -07:00
  • c05d8c07cc command line parsing Ignacio Bermudez Corrales 2020-10-21 15:01:18 -07:00
  • 597af60b05 added dependencies that by mistake I removed Ignacio Bermudez Corrales 2020-10-21 14:48:03 -07:00
  • 9f0ea179aa First test end to end Ignacio Bermudez Corrales 2020-10-21 14:34:05 -07:00
  • 91240efdab Merge branch 'develop' of github.com:splunk/security-content into tf23 Xiao Lin 2020-10-21 13:09:22 -07:00
  • 089d08bd84 updating docs and package bits [ci skip] research bot 2020-10-20 22:29:07 +00:00
  • ddf9d107f4 Merge pull request #806 from splunk/misko_category_fixes_cred_extract v3.0.8 peter 2020-10-20 15:08:18 -07:00
  • e541880a7f Merge branch 'develop' into misko_category_fixes_cred_extract peter 2020-10-20 14:55:03 -07:00
  • c62d2f0c6c Merge pull request #808 from splunk/dependabot/pip/botocore-1.19.1 dependabot-preview[bot] 2020-10-20 20:43:44 +00:00
  • 4c03676136 Bump botocore from 1.19.0 to 1.19.1 dependabot-preview[bot] 2020-10-20 20:39:13 +00:00
  • 434e0e03b1 Merge pull request #807 from splunk/dependabot/pip/boto3-1.16.1 dependabot-preview[bot] 2020-10-20 20:38:04 +00:00
  • a8c65aeffc Bump boto3 from 1.16.0 to 1.16.1 dependabot-preview[bot] 2020-10-20 20:34:02 +00:00
  • 3984d0e5b4 Fixing detection categories and polishing some descriptions in Credential Extraction detections. Stanislav Miskovic 2020-10-20 13:20:25 -07:00
  • d6e268ee86 Merge pull request #631 from splunk/response_phases Bhavin Patel 2020-10-20 11:48:24 -07:00
  • 990c4134f8 Merge branch 'develop' into response_phases Bhavin Patel 2020-10-20 11:42:26 -07:00
  • e94b358a88 blank references bpatel 2020-10-20 11:39:00 -07:00
  • 9000dd4e23 tags and ascii fixes bpatel 2020-10-20 11:24:37 -07:00
  • 8fef4fe2fe Merge pull request #775 from splunk/improved_kerberoasting_attack Bhavin Patel 2020-10-20 11:01:40 -07:00
  • 7a45ca7143 Merge pull request #774 from splunk/pass_the_hash_detection Bhavin Patel 2020-10-20 10:55:43 -07:00
  • 8210804332 Merge branch 'develop' into improved_kerberoasting_attack Bhavin Patel 2020-10-20 10:54:22 -07:00
  • c27c1b9a9c Merge pull request #791 from splunk/misko_cred_extract_ssa Bhavin Patel 2020-10-20 10:53:52 -07:00
  • 6838cbc393 Merge branch 'develop' into misko_cred_extract_ssa Jose Enrique Hernandez 2020-10-20 13:21:13 -04:00
  • 836c2a0c3b Merge branch 'develop' into response_phases Bhavin Patel 2020-10-20 10:20:12 -07:00
  • f78268de5e Merge pull request #805 from splunk/dependabot/pip/pyparsing-2.4.7 dependabot-preview[bot] 2020-10-20 14:18:35 +00:00
  • c0189b0409 Bump pyparsing from 2.4.6 to 2.4.7 dependabot-preview[bot] 2020-10-20 14:13:35 +00:00
  • 822d26dceb Merge branch 'develop' into misko_cred_extract_ssa peter 2020-10-19 16:24:52 -07:00
  • 64e6680aca Fixed a couple typos peter-cg 2020-10-19 16:23:48 -07:00
  • b3586064f1 Merge pull request #804 from splunk/update_credump_notebooks peter 2020-10-19 15:07:20 -07:00
  • dba3722795 Updating credential dumping notebooks peter-cg 2020-10-19 12:56:27 -07:00
  • ecc99f2455 Merge pull request #734 from splunk/add_gitlab_ci peter 2020-10-19 14:31:50 -07:00
  • ca119d7cb5 Merge branch 'develop' into improved_kerberoasting_attack Jose Enrique Hernandez 2020-10-19 17:29:03 -04:00
  • ff2ee69853 Merge branch 'develop' into add_gitlab_ci Jose Enrique Hernandez 2020-10-19 17:27:50 -04:00
  • 38aecd9114 Merge pull request #770 from splunk/lolbas-fixes Jose Enrique Hernandez 2020-10-19 17:27:34 -04:00
  • ade78957f1 Merge branch 'develop' into lolbas-fixes Jose Enrique Hernandez 2020-10-19 17:19:18 -04:00
  • ad0b9eb9b0 Merge pull request #803 from splunk/dependabot/pip/boto3-1.16.0 dependabot-preview[bot] 2020-10-19 19:43:04 +00:00
  • ee112491e2 Merge branch 'develop' into mustang_beta Bhavin Patel 2020-10-19 12:37:10 -07:00
  • 2fd0c55f4c Bump boto3 from 1.15.18 to 1.16.0 dependabot-preview[bot] 2020-10-19 19:37:04 +00:00
  • 064a4dc1d5 Merge pull request #802 from splunk/dependabot/pip/botocore-1.19.0 dependabot-preview[bot] 2020-10-19 19:35:48 +00:00
  • 45f1b31891 Bump botocore from 1.18.18 to 1.19.0 dependabot-preview[bot] 2020-10-19 19:31:16 +00:00
  • 7ccbf4b171 deleting old files bpatel 2020-10-19 11:42:59 -07:00
  • 0cce001a42 merge with develop bpatel 2020-10-19 11:19:41 -07:00
  • ec881ec61d Merge pull request #801 from splunk/dependabot/pip/virtualenv-20.0.35 dependabot-preview[bot] 2020-10-19 18:08:41 +00:00
  • 56b06d2246 Bump virtualenv from 20.0.33 to 20.0.35 dependabot-preview[bot] 2020-10-19 18:04:13 +00:00
  • 4f417cb867 Merge pull request #732 from splunk/gcploit Bhavin Patel 2020-10-19 10:34:46 -07:00
  • 988d123704 reorg dir bpatel 2020-10-19 10:10:09 -07:00
  • 029f0afff3 Merge branch 'develop' into gcploit Bhavin Patel 2020-10-19 10:08:21 -07:00
  • 3a65129f5c Removed non-alphanumeric characters from detection names Stanislav Miskovic 2020-10-19 09:47:34 -07:00
  • 5b2710e684 Merge pull request #796 from splunk/dependabot/pip/ansible-2.10.1 dependabot-preview[bot] 2020-10-19 15:09:25 +00:00
  • 7eb89f7e83 Bump ansible from 2.9.2 to 2.10.1 dependabot-preview[bot] 2020-10-19 15:03:39 +00:00
  • 53748d2da0 Merge pull request #799 from splunk/dependabot/pip/jmespath-0.10.0 dependabot-preview[bot] 2020-10-19 15:02:14 +00:00
  • f74eac4531 Bump jmespath from 0.9.4 to 0.10.0 dependabot-preview[bot] 2020-10-19 14:57:23 +00:00
  • df33414571 Merge pull request #800 from splunk/dependabot/pip/urllib3-1.25.11 dependabot-preview[bot] 2020-10-19 14:56:05 +00:00
  • fa3f0c2b99 Bump urllib3 from 1.25.10 to 1.25.11 dependabot-preview[bot] 2020-10-19 14:51:52 +00:00
  • f3dad40e97 Merge pull request #793 from splunk/dependabot/pip/packaging-20.4 dependabot-preview[bot] 2020-10-19 14:50:31 +00:00
  • f8151f705f Bump packaging from 19.2 to 20.4 dependabot-preview[bot] 2020-10-19 14:46:21 +00:00
  • 26cc474dfb Merge pull request #797 from splunk/dependabot/pip/tabulate-0.8.7 dependabot-preview[bot] 2020-10-19 14:45:03 +00:00
  • 1f83645b6b Bump tabulate from 0.8.6 to 0.8.7 dependabot-preview[bot] 2020-10-19 14:40:37 +00:00
  • 643247cba3 Merge pull request #790 from splunk/dependabot/pip/mysql-connector-python-8.0.22 dependabot-preview[bot] 2020-10-19 14:39:18 +00:00
  • 815ef33688 Bump mysql-connector-python from 8.0.21 to 8.0.22 dependabot-preview[bot] 2020-10-19 14:35:03 +00:00
  • bf387e1219 Merge pull request #794 from splunk/dependabot/pip/cffi-1.14.3 dependabot-preview[bot] 2020-10-19 14:33:39 +00:00
  • 3a42601426 Bump cffi from 1.13.2 to 1.14.3 dependabot-preview[bot] 2020-10-19 14:29:22 +00:00