Commit Graph

  • 2ee93f0075 Bump typing from 3.7.4.1 to 3.7.4.3 dependabot-preview[bot] 2020-07-13 23:32:08 +00:00
  • 3b1e639db2 rename file bpatel 2020-07-13 16:30:28 -07:00
  • da9ecd71fa Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml Bhavin Patel 2020-07-13 16:12:47 -07:00
  • a8c021a41e Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml Bhavin Patel 2020-07-13 16:06:17 -07:00
  • 71032608db Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches Rod Soto 2020-07-13 19:03:08 -04:00
  • 6dbc996d9c fixbackticks Rod Soto 2020-07-13 19:01:57 -04:00
  • 62ab2b89e9 Merge branch 'develop' into gcpk8plussearches Bhavin Patel 2020-07-13 15:47:35 -07:00
  • 57fbe00de0 fixednamesmacros Rod Soto 2020-07-13 18:45:46 -04:00
  • 7fe2b89386 fixedsrctypewithmacro Rod Soto 2020-07-13 18:20:38 -04:00
  • b504edb561 fixedsourcetypeissue Rod Soto 2020-07-13 18:19:06 -04:00
  • 2c27c80c8a Merge pull request #552 from splunk/netsh-fix Bhavin Patel 2020-07-13 09:59:29 -07:00
  • 186196684d Update processes_launching_netsh.yml Bhavin Patel 2020-07-13 09:53:43 -07:00
  • f0fe477413 k8sgcpkubectlcallssarch Rod Soto 2020-07-11 23:38:08 -04:00
  • c32b00dc7b k8sgcpservaccforbiddenfailure Rod Soto 2020-07-11 22:50:41 -04:00
  • 4895d18619 k8sgcpsensitiverole Rod Soto 2020-07-11 21:26:00 -04:00
  • 4935f2a095 k8sgcpsenobjaccess Rod Soto 2020-07-11 20:55:48 -04:00
  • ce8d85ad06 gcpRBACdetection Rod Soto 2020-07-11 19:40:46 -04:00
  • 046d8ab015 Merge branch 'develop' into mitre_maps Jose Enrique Hernandez 2020-07-10 23:18:59 -04:00
  • e9cf649460 fixing merge error divious1 2020-07-10 23:10:02 -04:00
  • 6f54e15d91 Changed WHERE clause to fix broken search and renamed values(Processes.process) to Processes.process to match other field names for readability. jkuepker 2020-07-10 22:11:09 -04:00
  • 4d9f634adf k8sgcpmactivesabypod Rod Soto 2020-07-10 19:39:21 -04:00
  • 074955617d Merge pull request #549 from splunk/dependabot/pip/identify-1.4.23 dependabot-preview[bot] 2020-07-10 18:59:36 +00:00
  • 0bb83f89ec Bump identify from 1.4.21 to 1.4.23 dependabot-preview[bot] 2020-07-10 18:53:44 +00:00
  • 3f79168731 addedgcpscansearch T1526detections Rod Soto 2020-07-10 08:35:59 -04:00
  • 3a41964a07 Merge pull request #543 from splunk/new_testing_file jzsplunk 2020-07-10 01:06:52 -07:00
  • 5cc42f10de Merge branch 'develop' into new_testing_file jzsplunk 2020-07-10 00:57:35 -07:00
  • 1db067750d Merge pull request #546 from splunk/T1526detections Jose Enrique Hernandez 2020-07-10 02:02:35 -04:00
  • 2ab82579b5 tiny bit better message printing generate_fix divious1 2020-07-10 01:44:45 -04:00
  • 5fd3f63947 fixed but with actors divious1 2020-07-10 01:35:55 -04:00
  • 274fb0e9dc updating files to use latest release divious1 2020-07-09 23:50:30 -04:00
  • f88f696b3c minor path bug divious1 2020-07-09 23:08:41 -04:00
  • 04e8a8291e Merge branch 'develop' into T1526detections divious1 2020-07-09 22:55:00 -04:00
  • 7693f9fbe2 added a way to generate a mitre map on every release that matches what we have tagged in our detections divious1 2020-07-09 22:47:32 -04:00
  • e4a0589a4b addedmitretechnique Rod Soto 2020-07-09 22:24:16 -04:00
  • 553625f860 Merge pull request #545 from splunk/CRL-1770 Bhavin Patel 2020-07-09 12:26:16 -07:00
  • 12f9b68ec0 Merge branch 'develop' into CRL-1770 Bhavin Patel 2020-07-09 11:39:11 -07:00
  • da9aa3de41 Removed data model module name from output David Dorsey 2020-07-09 11:42:51 -05:00
  • e9159978da Merge pull request #541 from splunk/dependabot/pip/virtualenv-20.0.26 dependabot-preview[bot] 2020-07-09 16:06:15 +00:00
  • 6a40255c1f Bump virtualenv from 20.0.25 to 20.0.26 dependabot-preview[bot] 2020-07-09 16:00:26 +00:00
  • 354d4052cb Merge pull request #544 from splunk/dependabot/pip/stix2-patterns-1.3.1 dependabot-preview[bot] 2020-07-09 15:59:14 +00:00
  • 67439ff037 Bump stix2-patterns from 1.3.0 to 1.3.1 dependabot-preview[bot] 2020-07-09 15:54:03 +00:00
  • 350ecdb648 new pass condition handling Patrick Bareiss 2020-07-09 14:33:33 +02:00
  • 37e6f6f7c0 new pass condition handling Patrick Bareiss 2020-07-09 14:29:53 +02:00
  • 6f77dbd20c new pass condition handling Patrick Bareiss 2020-07-09 14:21:33 +02:00
  • 4caa3c5cb1 detection tested testing_detection_detect_new_loca_admin_account Patrick Bareiss 2020-07-08 15:10:45 +02:00
  • 49d98cfc45 detection tested Patrick Bareiss 2020-07-08 15:09:05 +02:00
  • 5c885b15b2 Merge pull request #538 from splunk/testing_detections jzsplunk 2020-07-07 09:34:30 -07:00
  • 594e1e1351 Merge branch 'develop' into testing_detections Patrick Bareiss 2020-07-07 16:17:22 +02:00
  • 0190e39fe0 Merge pull request #531 from splunk/api_bug P4T12ICK 2020-07-07 16:16:46 +02:00
  • eafec36bbe Merge branch 'develop' into api_bug Patrick Bareiss 2020-07-07 16:09:49 +02:00
  • 99dc6677e2 Merge branch 'develop' into testing_detections Patrick Bareiss 2020-07-07 16:08:01 +02:00
  • 1677be5abc Merge pull request #540 from splunk/dependabot/pip/stix2-2.0.2 dependabot-preview[bot] 2020-07-07 13:59:20 +00:00
  • deee54dd9b Bump stix2 from 2.0.1 to 2.0.2 dependabot-preview[bot] 2020-07-07 13:54:51 +00:00
  • 4124e326f0 updated detection Patrick Bareiss 2020-07-07 15:49:20 +02:00
  • cd96e40b0b updated detection Patrick Bareiss 2020-07-07 15:45:59 +02:00
  • 96090d34be Merge pull request #539 from splunk/dependabot/pip/stix2-2.0.1 dependabot-preview[bot] 2020-07-06 20:52:38 +00:00
  • 70acf7e1c7 Bump stix2 from 1.4.0 to 2.0.1 dependabot-preview[bot] 2020-07-06 20:47:21 +00:00
  • 6c36c57f33 tetsing detection Patrick Bareiss 2020-07-06 17:03:00 +02:00
  • bf51f994ec tested detection testing_windows_event_logs_cleared Patrick Bareiss 2020-07-06 16:07:49 +02:00
  • 0584f68059 tested detection Patrick Bareiss 2020-07-06 16:04:47 +02:00
  • eb8d3ab4ad Merge branch 'develop' into testing_detection_path_interception testing_detection_path_interception Patrick Bareiss 2020-07-03 17:09:42 +02:00
  • 249a6b940f updated ci-generate Patrick Bareiss 2020-07-03 17:09:02 +02:00
  • e095c36874 updated ci-generate Patrick Bareiss 2020-07-03 17:07:14 +02:00
  • 16903203d0 testing of detection Patrick Bareiss 2020-07-03 16:59:30 +02:00
  • 62a210ca4c Merge pull request #535 from splunk/dependabot/pip/taxii2-client-2.2.0 dependabot-preview[bot] 2020-07-02 22:42:58 +00:00
  • 5a871e105b Bump taxii2-client from 2.1.0 to 2.2.0 dependabot-preview[bot] 2020-07-02 22:38:02 +00:00
  • 8d3b2b5aa6 Merge pull request #534 from splunk/dependabot/pip/pre-commit-2.6.0 dependabot-preview[bot] 2020-07-01 20:00:30 +00:00
  • 7ac2b2f370 Bump pre-commit from 2.5.1 to 2.6.0 dependabot-preview[bot] 2020-07-01 19:53:47 +00:00
  • 56372463d2 Merge pull request #516 from splunk/automated_detection_testing P4T12ICK 2020-07-01 16:10:12 +02:00
  • b285bad982 merged with develop Patrick Bareiss 2020-07-01 10:56:33 +02:00
  • 92648a7cd0 merged with develop Patrick Bareiss 2020-07-01 10:55:53 +02:00
  • 0c686f2c58 automated testing pipeline Patrick Bareiss 2020-07-01 10:52:48 +02:00
  • 9d01abfd68 testing Patrick Bareiss 2020-07-01 10:13:50 +02:00
  • 68f19b626f Merge tag 'v3.0.3' divious1 2020-06-30 21:38:34 -04:00
  • 1f7c425a1c Merge pull request #533 from splunk/dependabot/pip/identify-1.4.21 dependabot-preview[bot] 2020-07-01 00:58:21 +00:00
  • bf10619c21 Bump identify from 1.4.20 to 1.4.21 dependabot-preview[bot] 2020-07-01 00:53:19 +00:00
  • 124dd1224a Merge pull request #532 from splunk/dependabot/pip/importlib-resources-3.0.0 dependabot-preview[bot] 2020-06-30 23:10:29 +00:00
  • 8a09baa30e Bump importlib-resources from 2.0.1 to 3.0.0 dependabot-preview[bot] 2020-06-30 23:04:53 +00:00
  • 5852450f94 test detections Patrick Bareiss 2020-06-30 11:25:54 +02:00
  • 234f4216b7 new test Patrick Bareiss 2020-06-30 10:57:52 +02:00
  • 322697fdd0 more renames base on upper case divious1 2020-06-29 17:39:38 -04:00
  • 067e5e7e85 API expects name to be lower case divious1 2020-06-29 15:21:12 -04:00
  • 3eaf010d5c testing Patrick Bareiss 2020-06-29 16:15:19 +02:00
  • 4314ea7fb5 testing Patrick Bareiss 2020-06-29 14:41:51 +02:00
  • e3df0e94a4 testing Patrick Bareiss 2020-06-29 14:33:25 +02:00
  • e654478f9d testing Patrick Bareiss 2020-06-29 14:26:17 +02:00
  • c43718f23e testing Patrick Bareiss 2020-06-29 14:13:37 +02:00
  • 6b246b30c1 testing Patrick Bareiss 2020-06-29 13:44:50 +02:00
  • 1da9f91b75 testing Patrick Bareiss 2020-06-29 13:21:17 +02:00
  • 3b84f18145 _testing_ Patrick Bareiss 2020-06-29 09:21:47 +02:00
  • bc93a1fac9 Merge pull request #526 from splunk/dependabot/pip/idna-2.10 dependabot-preview[bot] 2020-06-28 00:04:29 +00:00
  • f6392e3690 Bump idna from 2.9 to 2.10 dependabot-preview[bot] 2020-06-27 23:57:37 +00:00
  • 89e731de20 Merge pull request #525 from splunk/dependabot/pip/importlib-metadata-1.7.0 dependabot-preview[bot] 2020-06-26 21:56:34 +00:00
  • 8c3ffa1ccf Bump importlib-metadata from 1.6.1 to 1.7.0 dependabot-preview[bot] 2020-06-26 21:51:01 +00:00
  • 0648c52e6a Merge pull request #523 from splunk/first_time_windows_service_bug Bhavin Patel 2020-06-26 12:50:07 -07:00
  • 3a82c218bb incorrect field name Bhavin Patel 2020-06-26 12:44:43 -07:00
  • 967c1d7974 small change Patrick Bareiss 2020-06-26 17:28:39 +02:00
  • 92d6b66ffd small change Patrick Bareiss 2020-06-26 16:45:42 +02:00
  • f4783eaec6 small change Patrick Bareiss 2020-06-26 16:43:05 +02:00
  • d6f576658a small change Patrick Bareiss 2020-06-26 16:18:44 +02:00