admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
Bhavin Patel
2024-08-23 11:19:51 +05:30
committed by GitHub
parent 041c0f92ab 6286e66a54
commit 5cd31d8c8a
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/cloud/o365_sharepoint_malware_detection.yml
+2 -2
View File
@@ -38,7 +38,7 @@ tags:
- name: file_name
type: File Name
role:
- Victim
- Victim
- name: signature
type: Other
role:
@@ -63,4 +63,4 @@ tests:
attack_data:
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566/o365_various_alerts/o365_various_alerts.log
sourcetype: o365:management:activity
source: o365
source: o365
detections/cloud/o365_zap_activity_detection.yml
+2 -2
View File
@@ -48,7 +48,7 @@ tags:
- name: src_user
type: User
role:
- Attacker
- Attacker
product:
- Splunk Enterprise
- Splunk Enterprise Security
@@ -67,4 +67,4 @@ tests:
attack_data:
- data: https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1566/o365_various_alerts/o365_various_alerts.log
sourcetype: o365:management:activity
source: o365
source: o365