admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

minor desc change in .yml file

Browse Source
This commit is contained in:
Namratha Sreekanta
2022-09-28 15:24:43 -07:00
parent 84ae1743fe
commit 70753ea779
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/experimental/network/detect_dga_domains_using_pretrained_model_in_dsdl.yml
+1 -1
View File
@@ -12,7 +12,7 @@ search: '| tstats `security_content_summariesonly` values(DNS.answer) as IPs min
how_to_implement: "
* Steps to deploy DGA detection model into Splunk App DSDL. This detection depends on the Splunk app for Data Science and Deep Learning which can be found here - https://splunkbase.splunk.com/app/4607/ and the Network Resolution datamodel which can be found here - https://splunkbase.splunk.com/app/1621/. The detection uses a pre-trained deep learning model that needs to be deployed in DSDL app. Follow the steps for deployment here - https://github.com/splunk/security_content/wiki/How-to-deploy-Deep-Learning-models-for-ESCU.
* Download the artifacts .tar.gz file from S3 bucket https://splunk-seal.s3.us-west-2.amazonaws.com/pretrained_dga_model_dsdl.tar.gz
* Download pretrained_<detection_name>_model_dsdl.ipynb from https://github.com/splunk/security_content/notebooks
* Download pretrained_dga_model_dsdl.ipynb from https://github.com/splunk/security_content/notebooks
* Below steps need to be followed inside Jupyter lab
* Upload the pretrained_dga_model_dsdl.tar.gz file into app/model/data path using the upload option in the jupyter notebook.
* Untar the artifact pretrained_dga_model_dsdl.tar.gz using tar -xf app/model/data/pretrained_dga_model_dsdl.tar.gz -C app/model/data