security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,036 Commits 1 Branch 57 Tags
77cd0bf6c0a250877244f7a07e1ad2edc19fa196
Commit Graph

156 Commits

Author SHA1 Message Date
Nasreddine Bencherchali 2883c2e714 fix: test errors 2023-03-07 14:23:44 +01:00
Nasreddine Bencherchali 05adb156e7 feat: update test 2023-03-07 14:14:21 +01:00
Nasreddine Bencherchali f0afc4cce6 fix: apply suggestions from code review 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2023-02-20 12:06:37 +01:00
Nasreddine Bencherchali 6a0b38291f fix: fp found in baseline 2023-02-17 23:16:42 +01:00
Nasreddine Bencherchali 82d0b9e10c fix: add missing modified and improve test 2023-02-10 00:56:07 +01:00
Thomas Patzke ef9d4f702d Merge pull request #3878 from DCSO/rule_test_add_re_escape_tests 
Test: Check 're' rules against unwanted/unneeded escapes
 2023-02-04 08:59:16 +01:00
Nasreddine Bencherchali f2643c6043 Merge pull request #3940 from mbabinski/master 
feat: add external remote service logon from public IP rule.
 2023-01-31 11:04:50 +01:00
Nasreddine Bencherchali 2817c6085c feat: add cidr modifier to the test 2023-01-31 10:58:29 +01:00
Nasreddine Bencherchali 6de8009c88 fix: update metadata and prefix test 2023-01-30 10:23:13 +01:00
Nasreddine Bencherchali 8b38e3ac2c fix: assertion logic 2023-01-12 12:36:33 +01:00
Nasreddine Bencherchali dca48fc125 fix: assert function in test 2023-01-12 12:29:38 +01:00
Nasreddine Bencherchali 30c658e2a4 fix: broken logic in test 
- Fix ` test_duplicate_detections` test
- Add new test `test_broken_thor_logsource_config` to test for broken Windows eventlog sources
 2023-01-12 12:21:58 +01:00
Hendrik Baecker 874032c2bf Test: Check 're' rules against unwanted/unneeded escapes 2023-01-06 16:25:27 +01:00
Hendrik Baecker 9985905f54 rule_tests: Rule directory relative to test_* file 2023-01-04 16:25:07 +01:00
Hendrik Baecker c998945b34 test-rules: use cti directory relative to test file 
This little change will use 'cti/' relative to the executing
test_*.py file and doesn't care if the testfile is executed
from sigma/ or sigma/tests/.
 2023-01-04 16:02:57 +01:00
Hendrik Baecker 3da07164ce test-rules: Execute get_mitre_data() as part of unittest 
Catching the data as part of the unittest class is more
IDE friendly cause they won't call __main__ but using the
test methods directly.
 2023-01-04 15:58:35 +01:00
Nasreddine Bencherchali 3bd12552bb feat: add bitlocker channel 2023-01-02 22:19:32 +01:00
frack113 014684ddcd add win_dns_analytic_ prefix 2023-01-02 12:16:09 +01:00
frack113 4a0b571598 add new test 2022-12-30 16:31:41 +01:00
Nasreddine Bencherchali 58f47b9875 fix: add known children appvlp 2022-12-30 10:24:25 +01:00
Nasreddine Bencherchali 964da01186 fix: test logic 2022-12-29 18:27:58 +01:00
Nasreddine Bencherchali c2e8283806 fix: add missing try/except 2022-12-29 17:30:26 +01:00
Nasreddine Bencherchali d0920f0931 fix: small error in deletion 2022-12-29 17:23:38 +01:00
Nasreddine Bencherchali e20cb470cc fix: enhance element deletion 
Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
 2022-12-29 17:19:01 +01:00
Nasreddine Bencherchali 123202f112 feat: add file_access case in test 2022-12-29 15:30:57 +01:00
Nasreddine Bencherchali 03cc78e916 feat: filename test enhancements (#3812) 2022-12-23 09:25:16 +01:00
frack113 a27dc6c43a Check for issue 3724 2022-12-22 08:46:25 +01:00
frack113 44a25df15f Check for issue 3724 2022-12-22 08:41:37 +01:00
Florian Roth b157bef3de fix: link to correct issue 2022-12-21 08:59:24 +01:00
Nasreddine Bencherchali ba3e985bed feat: multiple update and enhancements 2022-12-19 17:41:40 +01:00
Nasreddine Bencherchali 972720d42c fix: apply code review suggestion 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-12-19 10:17:49 +01:00
Nasreddine Bencherchali 1ccee514e2 feat: add duplicate titles test 2022-12-18 20:55:32 +01:00
Nasreddine Bencherchali a0e8019780 fix: issue raised by PR #3769 2022-12-09 10:33:33 +01:00
Nasreddine Bencherchali fa318243c2 Merge branch 'SigmaHQ:master' into nasbench-rule-devel 2022-12-08 19:22:11 +01:00
Nasreddine Bencherchali c560baf673 feat: enhance test 2022-12-08 16:23:48 +01:00
Nasreddine Bencherchali 2506d29bc9 feat: add more checks for the test 2022-12-08 11:57:26 +01:00
Nasreddine Bencherchali 9a5a0fed20 feat: update test to include more cases 2022-12-07 22:21:05 +01:00
Nasreddine Bencherchali 0d3cb52266 feat: enhance typos test 2022-12-07 01:04:25 +01:00
Nasreddine Bencherchali e343d016e9 feat: change check to lower 2022-12-05 00:31:51 +01:00
Nasreddine Bencherchali 25c41ea73c fix: update error message 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-11-30 10:21:24 +01:00
Nasreddine Bencherchali c2e85f4080 feat: update the test to test for lowercase 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-11-30 10:06:10 +01:00
Nasreddine Bencherchali 18d974c751 feat: new test for references case 2022-11-29 23:29:38 +01:00
Nasreddine Bencherchali 1d7ee1cd19 feat: enhance duplicate test (#3736) 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-11-29 13:47:09 +01:00
Nasreddine Bencherchali 7804decd2d feat: add more clarification to the test (#3710) 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-11-18 11:15:50 +01:00
Nasreddine Bencherchali efe5babae5 fix: beautify regex 
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
 2022-11-11 10:07:57 +01:00
Nasreddine Bencherchali f8e74858ae fix: add other letters 2022-11-11 09:49:53 +01:00
Nasreddine Bencherchali 8632b8ab17 fix: enhance mitre tag regex 2022-11-10 19:39:20 +01:00
phantinuss b44bced5ca enhance sigma rules tests 2022-10-21 17:29:34 +02:00
phantinuss b426785ba8 chore: new test for unknown value modifier 2022-10-11 16:25:03 +02:00
Tobias Michalski 0b93aea4d0 chore: Offline Tests 2022-08-12 14:19:08 +02:00