admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updating more missing datasets

Browse Source
This commit is contained in:
pyth0n1c
2022-03-11 11:49:22 -08:00
committed by GitHub
parent 99c5547667
commit 9dc8da332f
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/cloud/aws_ecr_container_scanning_findings_high.yml
+2
View File
@@ -31,6 +31,8 @@ tags:
confidence: 100
deployments:
- Slack Alert
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1204.003/aws_ecr_image_scanning/aws_ecr_scanning_findings_events.json
impact: 70
kill_chain_phases:
- Actions on Objectives
detections/endpoint/sam_database_file_access_attempt.yml
+2
View File
@@ -37,6 +37,8 @@ tags:
- Stage:Credential Access
cve:
- CVE-2021-36934
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1003.002/serioussam/windows-security.log
impact: 80
kill_chain_phases:
- Exploitation