Updating Github with Content from ESCU - v4.27.0

splunk · Mar 20, 2024 · 90249f4 · 90249f4
2 parents bbaffe1 + b32c1a6
commit 90249f4
Show file tree

Hide file tree

Showing 17 changed files with 199 additions and 151 deletions.
diff --git a/.gitmodules b/.gitmodules
@@ -1,4 +1,4 @@
 [submodule "contentctl"]
 	path = contentctl
 	url = https://github.com/splunk/contentctl.git
-        ignore = all
+	ignore = all
diff --git a/CODEOWNERS b/CODEOWNERS
diff --git a/contentctl b/contentctl
diff --git a/dist/DA-ESS-ContentUpdate/default/analyticstories.conf b/dist/DA-ESS-ContentUpdate/default/analyticstories.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/app.conf b/dist/DA-ESS-ContentUpdate/default/app.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############
@@ -10,7 +10,7 @@
 is_configured = false
 state = enabled
 state_change_requires_restart = false
-build = 20240320221223
+build = 20240320224914
 
 [triggers]
 reload.analytic_stories = simple

diff --git a/dist/DA-ESS-ContentUpdate/default/collections.conf b/dist/DA-ESS-ContentUpdate/default/collections.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/content-version.conf b/dist/DA-ESS-ContentUpdate/default/content-version.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/es_investigations.conf b/dist/DA-ESS-ContentUpdate/default/es_investigations.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/macros.conf b/dist/DA-ESS-ContentUpdate/default/macros.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/savedsearches.conf b/dist/DA-ESS-ContentUpdate/default/savedsearches.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/transforms.conf b/dist/DA-ESS-ContentUpdate/default/transforms.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/DA-ESS-ContentUpdate/default/workflow_actions.conf b/dist/DA-ESS-ContentUpdate/default/workflow_actions.conf
@@ -1,6 +1,6 @@
 #############
 # Automatically generated by generator.py in splunk/security_content
-# On Date: 2024-03-20T22:14:38 UTC
+# On Date: 2024-03-20T22:50:47 UTC
 # Author: Splunk Threat Research Team - Splunk
 # Contact: research@splunk.com
 #############

diff --git a/dist/api/macros.json b/dist/api/macros.json
diff --git a/dist/api/stories.json b/dist/api/stories.json
diff --git a/dist/api/version.json b/dist/api/version.json
@@ -1 +1 @@
-{"version": {"name": "v4.26.0", "published_at": "2024-03-20T22:18:03Z"}}
+{"version": {"name": "v4.26.0", "published_at": "2024-03-20T22:53:52Z"}}
diff --git a/docs/mitre-map/coverage.json b/docs/mitre-map/coverage.json
diff --git a/requirements.txt b/requirements.txt
@@ -1,20 +1,20 @@
 attackcti==0.3.9
 docker==6.1.3
-GitPython==3.1.37
-Jinja2==3.1.2
-jsonschema==4.19.1
+GitPython==3.1.42
+Jinja2==3.1.3
+jsonschema==4.21.1
 mock==4.0.3
-psutil==5.9.5
+psutil==5.9.8
 pycvesearch==1.2
 pydantic==1.10.8
-pysigma==0.9.8
-pysigma-backend-splunk==1.0.2
-pytest==7.4.2
+pysigma==0.11.3
+pysigma-backend-splunk==1.1.0
+pytest==7.4.4
 PyYAML>=5.4.1
 questionary==1.10.0
 requests==2.31.0
 six==1.16.0
 splunk-sdk==1.7.4
-wrapt-timeout-decorator==1.3.12.2
+wrapt-timeout-decorator==1.5.1
 xmltodict==0.13.0