Commit Graph

  • 470eed170a Merge pull request #792 from splunk/dependabot/pip/pexpect-4.8.0 dependabot-preview[bot] 2020-10-19 14:28:03 +00:00
  • 734a24a595 Bump pexpect from 4.7.0 to 4.8.0 dependabot-preview[bot] 2020-10-19 14:23:57 +00:00
  • d65fdedb5b Merge pull request #798 from splunk/dependabot/pip/splunk-sdk-1.6.14 dependabot-preview[bot] 2020-10-19 14:22:41 +00:00
  • 246fefb4b8 Bump splunk-sdk from 1.6.12 to 1.6.14 dependabot-preview[bot] 2020-10-19 14:18:54 +00:00
  • d007b60456 Merge pull request #795 from splunk/dependabot/pip/cryptography-3.1.1 dependabot-preview[bot] 2020-10-19 14:17:36 +00:00
  • 1daaefe1a3 Bump cryptography from 2.8 to 3.1.1 dependabot-preview[bot] 2020-10-19 14:14:08 +00:00
  • 8aa5392c50 Adding SSA detections for credential extraction from dumped secure stores or live Windows systems. Stanislav Miskovic 2020-10-19 01:42:14 -07:00
  • 6d76a4d268 Fix: 1) Adding both long and short name registry section names for Security, SAM and System 2) Adding a condition that command line marameter is not null (faster exit in case customer is not logging command lines) Stanislav Miskovic 2020-10-18 22:46:39 -07:00
  • c457ba1ce2 We need to do 2 fixes here: Stanislav Miskovic 2020-10-18 22:23:18 -07:00
  • 172b5e7d67 update to TF2.3 Xiao Lin 2020-10-17 00:21:28 -07:00
  • 14b88aa2af Merge branch 'develop' into lolbas-fixes Ignacio 2020-10-16 15:46:58 -07:00
  • fcc005121c Merge pull request #789 from splunk/add_time Ignacio 2020-10-16 15:46:28 -07:00
  • 7a9be3fa01 add Xiao Lin 2020-10-16 15:34:26 -07:00
  • 864c8f42bc Merge pull request #788 from splunk/adding-ssa-tests Ignacio 2020-10-16 15:10:03 -07:00
  • 43392488ee Merge remote-tracking branch 'origin/develop' into lolbas-fixes Ignacio Bermudez Corrales 2020-10-16 14:59:31 -07:00
  • 98be589890 Merge remote-tracking branch 'origin/develop' into adding-ssa-tests Ignacio Bermudez Corrales 2020-10-16 14:16:42 -07:00
  • ebb0554cea test files for ssa detections Ignacio Bermudez Corrales 2020-10-16 14:08:23 -07:00
  • 3f8b95f6cd adding tests per detection Ignacio Bermudez Corrales 2020-10-16 12:45:14 -07:00
  • 1c2746eb80 Merge pull request #786 from splunk/dependabot/pip/botocore-1.18.18 dependabot-preview[bot] 2020-10-16 19:45:05 +00:00
  • b990631363 Bump botocore from 1.18.17 to 1.18.18 dependabot-preview[bot] 2020-10-16 19:39:08 +00:00
  • d901104709 Merge pull request #787 from splunk/dependabot/pip/boto3-1.15.18 dependabot-preview[bot] 2020-10-16 19:37:55 +00:00
  • cf2294a9d0 Bump boto3 from 1.15.17 to 1.15.18 dependabot-preview[bot] 2020-10-16 19:31:54 +00:00
  • 4bf812c9f6 Merge pull request #751 from splunk/TR-193 peter 2020-10-16 11:43:13 -07:00
  • 02f8891e3b Merge remote-tracking branch 'origin/develop' into TR-193 peter-cg 2020-10-16 11:33:17 -07:00
  • d857af2a0a Merge branch 'develop' into lolbas-fixes Ignacio 2020-10-16 10:01:17 -07:00
  • ca6d1c381a Merge pull request #777 from splunk/dependabot/pip/mock-4.0.2 dependabot-preview[bot] 2020-10-16 15:04:44 +00:00
  • 17efc12d0f Bump mock from 3.0.5 to 4.0.2 dependabot-preview[bot] 2020-10-16 15:00:21 +00:00
  • 3f1f21577a Merge pull request #785 from splunk/dependabot/pip/mysql-connector-python-8.0.21 dependabot-preview[bot] 2020-10-16 14:58:59 +00:00
  • 09cb8120bb Bump mysql-connector-python from 8.0.19 to 8.0.21 dependabot-preview[bot] 2020-10-16 14:55:07 +00:00
  • 7913e7cb34 Merge pull request #784 from splunk/dependabot/pip/ntlm-auth-1.5.0 dependabot-preview[bot] 2020-10-16 14:54:03 +00:00
  • d9ab4d6464 Bump ntlm-auth from 1.4.0 to 1.5.0 dependabot-preview[bot] 2020-10-16 14:50:17 +00:00
  • ed47764d4b Merge pull request #780 from splunk/dependabot/pip/path-15.0.0 dependabot-preview[bot] 2020-10-16 14:48:58 +00:00
  • bac818aa86 Bump path from 13.1.0 to 15.0.0 dependabot-preview[bot] 2020-10-16 14:44:45 +00:00
  • 649ec4222a Merge pull request #779 from splunk/dependabot/pip/bcrypt-3.2.0 dependabot-preview[bot] 2020-10-16 14:43:25 +00:00
  • 3a1981a24c Bump bcrypt from 3.1.7 to 3.2.0 dependabot-preview[bot] 2020-10-16 14:39:36 +00:00
  • 9b5253a6e7 Merge pull request #778 from splunk/dependabot/pip/py-1.9.0 dependabot-preview[bot] 2020-10-16 14:38:30 +00:00
  • 7a2476823c Bump py from 1.8.1 to 1.9.0 dependabot-preview[bot] 2020-10-16 14:35:01 +00:00
  • 183e5e61e3 Merge pull request #782 from splunk/dependabot/pip/pygithub-1.53 dependabot-preview[bot] 2020-10-16 14:33:42 +00:00
  • 240b50f7c6 Bump pygithub from 1.51 to 1.53 dependabot-preview[bot] 2020-10-16 14:30:07 +00:00
  • 98fda42d42 Merge pull request #781 from splunk/dependabot/pip/pytest-6.1.1 dependabot-preview[bot] 2020-10-16 14:28:45 +00:00
  • 753974645e Bump pytest from 5.3.2 to 6.1.1 dependabot-preview[bot] 2020-10-16 14:25:02 +00:00
  • 8995ffb39a Merge pull request #783 from splunk/dependabot/pip/protobuf-3.13.0 dependabot-preview[bot] 2020-10-16 14:23:47 +00:00
  • bfc0db070e Bump protobuf from 3.6.1 to 3.13.0 dependabot-preview[bot] 2020-10-16 14:19:57 +00:00
  • 097f1c6501 Merge pull request #776 from splunk/dependabot/pip/pycparser-2.20 dependabot-preview[bot] 2020-10-16 14:18:33 +00:00
  • 8d0129e1fe Bump pycparser from 2.19 to 2.20 dependabot-preview[bot] 2020-10-16 14:13:37 +00:00
  • 85146bd2b8 Added detection testing service results inKerberoasting spn request with RC4 encryption root 2020-10-16 09:57:44 +00:00
  • d788863bca fixed kerberoasting detection P4T12ICK 2020-10-16 11:29:46 +02:00
  • 6555e32674 Added detection testing service results inDetect Activity Related to Pass the Hash Attacks root 2020-10-16 08:43:40 +00:00
  • 7fe760cf54 rebased with develop P4T12ICK 2020-10-16 09:52:08 +02:00
  • 1e392e631c improvment pth detection P4T12ICK 2020-10-16 09:49:11 +02:00
  • 93c0682f43 Merge branch 'master' of https://github.com/inspired/security-content into mbjerkeland-develop Mikael Bjerkeland 2020-10-16 08:40:49 +02:00
  • 2c75381945 Merge pull request #772 from splunk/dependabot/pip/zipp-3.3.1 dependabot-preview[bot] 2020-10-16 02:25:25 +00:00
  • b6a76897b3 Bump zipp from 3.3.0 to 3.3.1 dependabot-preview[bot] 2020-10-16 02:21:27 +00:00
  • 948975d16e Merge branch 'mustang_beta_develop_test' of https://github.com/splunk/security-content into mustang_beta_develop_test mustang_beta_develop_test bpatel 2020-10-15 15:34:53 -07:00
  • c604e555f3 uuid errors bpatel 2020-10-15 15:34:40 -07:00
  • f9bafb846c Merge branch 'develop' into mustang_beta_develop_test Bhavin Patel 2020-10-15 15:32:50 -07:00
  • 09e83f3b71 testing the re org of directories bpatel 2020-10-15 15:28:54 -07:00
  • 7981684b5f Merge branch 'lolbas-fixes' of github.com:splunk/security-content into lolbas-fixes Ignacio Bermudez Corrales 2020-10-15 14:54:18 -07:00
  • e04592401b unusual lolbas short time period Ignacio Bermudez Corrales 2020-10-15 14:53:59 -07:00
  • e498927d41 Merge pull request #752 from splunk/suspcious_cloud_user_activites_spl_bugs mustang_beta1 Bhavin Patel 2020-10-15 14:27:14 -07:00
  • 7fb76cac60 Merge pull request #769 from splunk/unit_test_prohibited_apps_spawning_cmdprompt jzsplunk 2020-10-15 14:19:11 -07:00
  • 8520f3a281 Merge branch 'develop' into lolbas-fixes Jose Enrique Hernandez 2020-10-15 17:14:34 -04:00
  • 5da1fde8cf Added notebook Ignacio Bermudez Corrales 2020-10-15 13:15:17 -07:00
  • 78784320fd Merge branch 'develop' into unit_test_prohibited_apps_spawning_cmdprompt Jose Enrique Hernandez 2020-10-15 16:04:26 -04:00
  • 3113cff22c updating a mistake in sysmon divious1 2020-10-15 16:04:01 -04:00
  • cbeb486b20 Merge pull request #753 from splunk/update_unit_test Jose Enrique Hernandez 2020-10-15 15:58:24 -04:00
  • 3a384454ac updated to point to the right file divious1 2020-10-15 15:55:36 -04:00
  • a035e6311f change single quotation mark to back single quotation update_unit_test Xiao Lin 2020-10-15 19:33:45 +00:00
  • 98b7aa83dd update Xiao Lin 2020-10-15 09:28:23 +00:00
  • 9db448a52e update unit test Xiao Lin 2020-10-15 09:23:46 +00:00
  • 015514ee1e notebook for prohibited apps spawning divious1 2020-10-15 15:43:22 -04:00
  • a6d62e36ab Merge pull request #768 from splunk/dependabot/pip/boto3-1.15.17 dependabot-preview[bot] 2020-10-15 19:43:19 +00:00
  • f5eeb1b7bc Bump boto3 from 1.11.0 to 1.15.17 dependabot-preview[bot] 2020-10-15 19:39:33 +00:00
  • acb3c08239 Merge pull request #767 from splunk/dependabot/pip/botocore-1.18.17 dependabot-preview[bot] 2020-10-15 19:38:18 +00:00
  • deafd88b2a Bump botocore from 1.14.0 to 1.18.17 dependabot-preview[bot] 2020-10-15 19:33:33 +00:00
  • 8650bf3f31 changed default value for macros P4T12ICK 2020-10-15 17:40:52 +02:00
  • 3bef413caa Merge pull request #754 from splunk/dependabot/pip/gitpython-3.1.9 dependabot-preview[bot] 2020-10-15 15:14:24 +00:00
  • e60b8c6279 Bump gitpython from 3.1.7 to 3.1.9 dependabot-preview[bot] 2020-10-15 15:09:50 +00:00
  • f0f4a719d7 Merge pull request #758 from splunk/dependabot/pip/psutil-5.7.2 dependabot-preview[bot] 2020-10-15 15:08:34 +00:00
  • b4b5fa07b2 Bump psutil from 5.6.7 to 5.7.2 dependabot-preview[bot] 2020-10-15 15:02:51 +00:00
  • 432d364085 Merge pull request #762 from splunk/dependabot/pip/paramiko-2.7.2 dependabot-preview[bot] 2020-10-15 15:01:36 +00:00
  • edd18e9027 Bump paramiko from 2.7.1 to 2.7.2 dependabot-preview[bot] 2020-10-15 14:57:17 +00:00
  • 05c29b2b38 Merge pull request #761 from splunk/dependabot/pip/ansible-runner-1.4.6 dependabot-preview[bot] 2020-10-15 14:56:00 +00:00
  • 44aa058408 Bump ansible-runner from 1.4.4 to 1.4.6 dependabot-preview[bot] 2020-10-15 14:51:37 +00:00
  • 7bdb27c916 Merge pull request #764 from splunk/dependabot/pip/dnspython-2.0.0 dependabot-preview[bot] 2020-10-15 14:50:11 +00:00
  • 2f7d016811 Bump dnspython from 1.16.0 to 2.0.0 dependabot-preview[bot] 2020-10-15 14:45:47 +00:00
  • 33d495a1ac Merge pull request #763 from splunk/dependabot/pip/atomicwrites-1.4.0 dependabot-preview[bot] 2020-10-15 14:44:31 +00:00
  • 96a802ba62 Bump atomicwrites from 1.3.0 to 1.4.0 dependabot-preview[bot] 2020-10-15 14:40:55 +00:00
  • 6d46112d08 Merge pull request #760 from splunk/dependabot/pip/path-py-12.5.0 dependabot-preview[bot] 2020-10-15 14:39:26 +00:00
  • 725ff8d5c8 Bump path-py from 12.4.0 to 12.5.0 dependabot-preview[bot] 2020-10-15 14:35:22 +00:00
  • 8b0f5e896a Merge pull request #756 from splunk/dependabot/pip/s3transfer-0.3.3 dependabot-preview[bot] 2020-10-15 14:34:07 +00:00
  • 5aec86adc5 Bump s3transfer from 0.3.0 to 0.3.3 dependabot-preview[bot] 2020-10-15 14:30:07 +00:00
  • f2ab7d0b9c Merge pull request #755 from splunk/dependabot/pip/docutils-0.16 dependabot-preview[bot] 2020-10-15 14:28:55 +00:00
  • 2d8e27679e Bump docutils from 0.15.2 to 0.16 dependabot-preview[bot] 2020-10-15 14:24:39 +00:00
  • 8e9cfc79a2 Merge pull request #759 from splunk/dependabot/pip/pynacl-1.4.0 dependabot-preview[bot] 2020-10-15 14:23:27 +00:00
  • bf649b5d82 Bump pynacl from 1.3.0 to 1.4.0 dependabot-preview[bot] 2020-10-15 14:19:32 +00:00
  • 5fe700db55 Merge pull request #757 from splunk/dependabot/pip/wcwidth-0.2.5 dependabot-preview[bot] 2020-10-15 14:18:15 +00:00
  • f636d00ffe Bump wcwidth from 0.1.7 to 0.2.5 dependabot-preview[bot] 2020-10-15 14:14:24 +00:00
  • bf806838a4 Merge pull request #750 from splunk/automated_detection_service Jose Enrique Hernandez 2020-10-15 10:08:40 -04:00
  • 2f9fe75f9c Improved and tested pass the hash detection P4T12ICK 2020-10-15 14:35:53 +02:00