admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

detection testing

Browse Source
This commit is contained in:
P4T12ICK
2021-01-18 15:46:53 +01:00
parent 44bf41a678
commit 477221da99
6 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/network/dns_query_requests_resolved_by_unauthorized_dns_servers.yml → detections/deprecated/dns_query_requests_resolved_by_unauthorized_dns_servers.yml
View File
detections/cloud/high_number_of_login_failures_from_a_single_source.yml → detections/deprecated/high_number_of_login_failures_from_a_single_source.yml
+1 -1
View File
@@ -2,7 +2,7 @@ name: High Number of Login Failures from a single source
id: 7f398cfb-918d-41f4-8db8-2e2474e02222
version: 1
date: '2020-12-16'
description: This search will detect more than 5 login failures in Office365 Azure Active Directory from a single source IP address. Please adjust the threshold value of 5 as suited for your environment.
description: This search will detect more than 5 login failures in Office365 Azure Active Directory from a single source IP address. Please adjust the threshold value of 5 as suited for your environment. Deprecated because duplicate.
type: ESCU
author: Bhavin Patel, Splunk
search: '`o365_management_activity` Operation=UserLoginFailed record_type=AzureActiveDirectoryStsLogon app=AzureActiveDirectory
detections/application/open_redirect_in_splunk_web.yml → detections/deprecated/open_redirect_in_splunk_web.yml
View File
detections/application/splunk_enterprise_information_disclosure.yml → detections/deprecated/splunk_enterprise_information_disclosure.yml
View File
detections/network/excessive_dns_failures.yml → detections/experimental/network/excessive_dns_failures.yml
View File
detections/network/large_volume_of_dns_any_queries.yml → detections/experimental/network/large_volume_of_dns_any_queries.yml
View File