Commit Graph

  • 94b939e576 Merge pull request #303 from splunk/dependabot/pip/pyyaml-5.3 dependabot-preview[bot] 2020-01-18 02:46:05 +00:00
  • cb34f780a5 Update requirements.txt Jose Enrique Hernandez 2020-01-17 21:41:52 -05:00
  • 9232992989 Merge pull request #308 from splunk/dependabot/pip/importlib-metadata-1.4.0 dependabot-preview[bot] 2020-01-18 02:40:17 +00:00
  • db943d560f Merge pull request #284 from splunk/dependabot/pip/virtualenv-16.7.9 dependabot-preview[bot] 2020-01-18 02:40:01 +00:00
  • e3d5f9bbf2 Merge branch 'develop' into dependabot/pip/pyyaml-5.3 Jose Enrique Hernandez 2020-01-17 20:39:28 -06:00
  • 3f48f5a96d Merge pull request #305 from splunk/dependabot/pip/pyrsistent-0.15.7 dependabot-preview[bot] 2020-01-18 02:38:38 +00:00
  • a2bec0bdb4 Bump virtualenv from 16.7.8 to 16.7.9 dependabot-preview[bot] 2020-01-18 02:35:45 +00:00
  • cfe4c7f09c Merge pull request #311 from splunk/dependabot/pip/zipp-1.0.0 dependabot-preview[bot] 2020-01-18 02:34:31 +00:00
  • 2ed19c7cf2 Bump importlib-metadata from 1.3.0 to 1.4.0 dependabot-preview[bot] 2020-01-18 02:32:40 +00:00
  • 6b7f260a4b Merge pull request #312 from splunk/dependabot/pip/identify-1.4.10 dependabot-preview[bot] 2020-01-18 02:31:26 +00:00
  • 56e7182720 CRL-1717 - Added "search *" definitions to the macros without definitions. Jason Brewer 2020-01-17 17:09:01 -08:00
  • 5383117f1c CRL-1716 - Fixing by clause to allow searching Processes.process for obfuscation chars. Jason Brewer 2020-01-17 16:48:27 -08:00
  • 7881b4fcd9 CRL-1652 - Saving progress so far on MLTK part 2 stuff so it will not interfere. CRL-1652-jcbMLTKround2 Jason Brewer 2020-01-17 16:39:37 -08:00
  • 79833ac948 Bump pyrsistent from 0.15.6 to 0.15.7 dependabot-preview[bot] 2020-01-16 21:39:50 +00:00
  • d4a1ca38b4 Bump pyyaml from 5.2 to 5.3 dependabot-preview[bot] 2020-01-16 21:39:49 +00:00
  • c854500ede Merge pull request #313 from splunk/dependabot/pip/six-1.14.0 dependabot-preview[bot] 2020-01-16 21:38:32 +00:00
  • 6a4d42f582 Merge pull request #310 from splunk/CRL-1715 Jose Enrique Hernandez 2020-01-16 15:36:19 -06:00
  • bc33e55a85 Merge pull request #307 from splunk/CRL-1714_new_version_lateral_movement Bhavin Patel 2020-01-16 12:13:41 -08:00
  • 4a9b1fceea Bump six from 1.13.0 to 1.14.0 dependabot-preview[bot] 2020-01-16 14:12:58 +00:00
  • 5c510dd987 Bump identify from 1.4.9 to 1.4.10 dependabot-preview[bot] 2020-01-15 14:12:48 +00:00
  • 629badf7e7 macros file, still not liking this practice bpatel 2020-01-14 15:58:38 -08:00
  • 69a35f1c16 macros bpatel 2020-01-14 15:40:45 -08:00
  • 52f5a71060 new search unload sysmon filter bpatel 2020-01-14 15:27:57 -08:00
  • ee8c952e98 Bump zipp from 0.6.0 to 1.0.0 dependabot-preview[bot] 2020-01-14 14:12:45 +00:00
  • a899938a07 Revert "Remove data-toggle="tab"" divious1 2020-01-13 18:23:49 -05:00
  • 54c9bc9c38 updated search/metadata, tested in attack_range bpatel 2020-01-13 12:42:35 -08:00
  • 2ed86283c8 Merge pull request #306 from splunk/sooshie_pr_to_community community Jose Enrique Hernandez 2020-01-13 13:08:03 -05:00
  • 4a0bf015e8 tested and updates searches for lateral movement story Patrick Bareiss 2020-01-13 11:18:54 +01:00
  • 71241e566f tested and updates searches for lateral movement story Patrick Bareiss 2020-01-13 10:39:57 +01:00
  • 904bf9445b Merge pull request #302 from splunk/fix_ci_job Bhavin Patel 2020-01-10 12:37:34 -08:00
  • ce3b152832 WIP: testing lateral movement analytics story Patrick Bareiss 2020-01-10 12:47:12 +01:00
  • 96f9a8945e adding sooshie detectinos, minor mods and ascii check in generate bpatel 2020-01-09 15:46:14 -08:00
  • f178e41e12 updated create hidden shares updating_hidden_cobra divious1 2020-01-09 16:59:04 -05:00
  • d9b196fab9 updating docs and package bits [ci skip] research bot 2020-01-07 22:20:52 +00:00
  • 3b2e6fcd53 fixing error where attack range failed to build due to a private ESCU package divious1 2020-01-07 17:12:46 -05:00
  • 40bafedb58 updating docs and package bits [ci skip] research bot 2020-01-07 20:09:41 +00:00
  • d9bed0e87e updating docs and package bits [ci skip] research bot 2020-01-07 17:07:02 +00:00
  • 4575820ec7 missing a cd to a dir divious1 2020-01-07 11:13:37 -05:00
  • 37e8d5884e updating docs and package bits [ci skip] research bot 2020-01-07 01:04:06 +00:00
  • 7ffff9f2d4 fixing incorrect path divious1 2020-01-06 19:57:52 -05:00
  • a220772572 updating docs and package bits [ci skip] research bot 2020-01-07 00:55:54 +00:00
  • f1d08fc986 added logic to setup aws command was missing divious1 2020-01-06 19:47:40 -05:00
  • 08fe1d8c04 updating docs and package bits [ci skip] research bot 2020-01-07 00:35:50 +00:00
  • fc6bb5dce5 this should be a copy divious1 2020-01-06 19:25:26 -05:00
  • 71ec936940 updating docs and package bits [ci skip] research bot 2020-01-06 23:31:03 +00:00
  • 984d4b17b2 removed unecessary persist divious1 2020-01-06 18:17:09 -05:00
  • d157137d29 updating docs and package bits [ci skip] research bot 2020-01-06 22:58:18 +00:00
  • 026682718f minor adjustments to path, bug persists divious1 2020-01-06 17:02:09 -05:00
  • 0d3f8e166f updating docs and package bits [ci skip] research bot 2020-01-06 22:00:04 +00:00
  • dc032a8779 fixing bug where CI crashed when publishing the package divious1 2020-01-06 16:44:03 -05:00
  • fa8cfffa69 updating docs and package bits [ci skip] research bot 2020-01-06 19:38:28 +00:00
  • 9b7ab872ff Merge pull request #301 from splunk/mitre_technique_id Bhavin Patel 2020-01-06 11:01:12 -08:00
  • 78397edbf9 fixing a bug in generate due to intro of new field divious1 2020-01-06 13:34:53 -05:00
  • 0abf721c3f introduced mitre technique id to detection spec divious1 2020-01-06 13:31:43 -05:00
  • 6e7a7d0936 Merge pull request #300 from splunk/auto_sync_release_with_attack_range P4T12ICK 2020-01-06 10:37:09 +01:00
  • 8d8866ab52 Merge pull request #295 from splunk/dependabot/pip/identify-1.4.9 dependabot-preview[bot] 2020-01-06 02:33:58 +00:00
  • 0a35a78074 Merge pull request #294 from splunk/dependabot/pip/semantic-version-2.8.4 dependabot-preview[bot] 2020-01-06 02:30:59 +00:00
  • bf63ea8931 Bump identify from 1.4.8 to 1.4.9 dependabot-preview[bot] 2020-01-06 02:29:01 +00:00
  • 2bbe78eb63 Merge pull request #297 from splunk/dependabot/pip/pre-commit-1.21.0 dependabot-preview[bot] 2020-01-06 02:28:06 +00:00
  • c239af3073 Merge pull request #277 from splunk/dependabot/pip/importlib-metadata-1.3.0 dependabot-preview[bot] 2020-01-06 02:27:46 +00:00
  • 4f64978f41 fixed workflow divious1 2020-01-05 21:09:13 -05:00
  • 22cbc19061 updating docs and package bits [ci skip] research bot 2020-01-03 20:19:52 +00:00
  • bb1fdd370e Merge pull request #299 from splunk/fixing_relese_bug Bhavin Patel 2020-01-03 12:14:48 -08:00
  • e0188625a7 correcting release bug divious1 2020-01-03 15:09:00 -05:00
  • d73c71602a updating docs and package bits [ci skip] research bot 2020-01-03 20:00:04 +00:00
  • 6227e66869 updating README testing_community bpatel 2020-01-03 11:36:19 -08:00
  • bc06fee634 Merge pull request #296 from splunk/community Bhavin Patel 2020-01-03 11:33:11 -08:00
  • 411ce91e45 was in wrong dir divious1 2020-01-03 12:42:34 -05:00
  • 968fcbf125 Merge branch 'community' of github.com:splunk/security-content into community divious1 2020-01-03 12:30:26 -05:00
  • 8366f5c137 reverting divious1 2020-01-03 12:30:08 -05:00
  • 2eba6c99e6 updating docs and package bits [ci skip] research bot 2020-01-03 17:24:04 +00:00
  • b2b139711f simplifying logic of workflows divious1 2020-01-03 12:18:51 -05:00
  • 59634b3dd8 worked out bugs in ci job divious1 2020-01-03 12:13:06 -05:00
  • 9b87d6d9c9 Bump pre-commit from 1.20.0 to 1.21.0 dependabot-preview[bot] 2020-01-03 14:12:53 +00:00
  • 257dd7642c prep for community branch divious1 2020-01-02 11:46:29 -05:00
  • 616ed5bbbe update ymls in s3 buckets divious1 2020-01-01 22:11:20 -05:00
  • 34c13333cd changed syntax around divious1 2020-01-01 21:55:40 -05:00
  • b272f03d06 list dir test divious1 2020-01-01 21:53:07 -05:00
  • ffc9bef29f testing aws cli orb divious1 2020-01-01 21:28:23 -05:00
  • 103df5f8c1 Bump semantic-version from 2.8.3 to 2.8.4 dependabot-preview[bot] 2019-12-23 14:12:31 +00:00
  • ef904c2dc8 Merge pull request #293 from splunk/briannablacet-patch-2 Bhavin Patel 2019-12-19 13:24:58 -08:00
  • 5f43e47c2d Update README.md briannablacet 2019-12-19 13:19:35 -08:00
  • e0020c24e6 updating docs and package bits [ci skip] research bot 2019-12-19 20:16:06 +00:00
  • 46f2591375 Merge pull request #291 from splunk/cred_dumping_bug v1.0.48 Bhavin Patel 2019-12-19 11:55:04 -08:00
  • 3ab384a191 Update README.md Jose Enrique Hernandez 2019-12-19 14:33:14 -05:00
  • fe8ff90e4e updating how to implement and readme bpatel 2019-12-19 11:22:44 -08:00
  • 652d7f3fd0 updating macros to use sourcetype bpatel 2019-12-18 17:49:09 -08:00
  • 2701ad2049 remove def key from macro yml bpatel 2019-12-18 16:15:51 -08:00
  • 142d74b174 remove def key from macro yml bpatel 2019-12-18 14:54:48 -08:00
  • 9afa020d06 empty defs bpatel 2019-12-18 14:48:24 -08:00
  • 151be9217b removing index and keeping source bpatel 2019-12-18 14:21:36 -08:00
  • 9ec4514bfa updating docs and package bits [ci skip] research bot 2019-12-18 20:12:57 +00:00
  • f52c0209c2 Merge pull request #289 from splunk/CRL-1698_new_version_credential_dumping P4T12ICK 2019-12-18 20:35:53 +01:00
  • c81f9f7fb2 Merge remote-tracking branch 'origin/CRL-1698_new_version_credential_dumping' into CRL-1698_new_version_credential_dumping Patrick Bareiss 2019-12-18 20:28:08 +01:00
  • 4f0a6a0cb7 Error fixes briannablacet 2019-12-18 11:12:23 -08:00
  • 5c775ec15a Worked on the feedback Patrick Bareiss 2019-12-18 20:08:10 +01:00
  • 4e42f955ed fixing broken sentences and dreams briannablacet 2019-12-18 11:07:33 -08:00
  • 7ced058b9b Update creation_of_shadow_copy_with_wmic_and_powershell.yml briannablacet 2019-12-18 11:04:12 -08:00
  • 3a278eaabe Merge remote-tracking branch 'origin/CRL-1698_new_version_credential_dumping' into CRL-1698_new_version_credential_dumping Patrick Bareiss 2019-12-18 20:03:38 +01:00
  • 1cdf09802c Worked on the feedback Patrick Bareiss 2019-12-18 20:03:19 +01:00