admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Small updates

Browse Source
This commit is contained in:
David Dorsey
2020-09-10 20:49:00 -05:00
committed by jzsplunk
parent 182c4116c9
commit 7cefe3179d
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployments/30_long_running_baseline_searches.yml
+1 -2
View File
@@ -4,9 +4,8 @@ date: '2020-06-24'
description: This configuration file applies to all baselines with tag deployments Long Running Baseline
author: Bhavin Patel
scheduling:
cron_schedule: '0 4 * * *'
earliest_time: -90d@d
latest_time: -10m@m
latest_time: -1d@d
schedule_window: auto
tags:
deployments:
detections/detect_spike_in_network_acl_activity.yml
+2
View File
@@ -36,6 +36,8 @@ known_false_positives: The false-positive rate may vary based on the values of`d
tags:
analytics_story:
- AWS Network ACL Activity
mitre_attack_id:
- T1562.007
kill_chain_phases:
- Actions on Objectives
cis20: