admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

add missing eol

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2025-01-23 15:25:13 +01:00
parent 8b128feb63
commit aa1c8fab2d
18 changed files with 17 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/linux_auditd_add_user_account.yml
+1 -1
View File
@@ -73,4 +73,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1136.001/linux_auditd_add_user/linux_auditd_add_user.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_add_user_account_type.yml
+1 -1
View File
@@ -72,4 +72,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1136.001/linux_auditd_add_user_type/linux_auditd_add_user_type.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_at_application_execution.yml
+1 -1
View File
@@ -78,4 +78,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1053.002/linux_auditd_at/linux_auditd_at_execution.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_auditd_service_stop.yml
+1 -1
View File
@@ -72,4 +72,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1489/linux_auditd_auditd_service_stop/linux_auditd_auditd_service_stop.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_base64_decode_files.yml
+1 -1
View File
@@ -76,4 +76,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1053.002/linux_auditd_chown_root/linux_auditd_chown_root.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_data_transfer_size_limits_via_split_syscall.yml
+1 -1
View File
@@ -74,4 +74,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1030/linux_auditd_split_syscall/linux_auditd_split_syscall.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_dd_file_overwrite.yml
+1 -1
View File
@@ -73,4 +73,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1485/linux_auditd_dd_overwrite/linux_auditd_dd_overwrite.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_disable_or_modify_system_firewall.yml
+1 -1
View File
@@ -74,4 +74,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1562.004/linux_auditd_disable_firewall/linux_auditd_disable_firewall.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_doas_conf_file_creation.yml
+1 -1
View File
@@ -73,4 +73,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1548.003/linux_audited_doas_conf/linux_audited_doas_conf.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_doas_tool_execution.yml
+1 -1
View File
@@ -74,4 +74,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1548.003/linux_auditd_doas/linux_auditd_doas.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_edit_cron_table_parameter.yml
+1 -1
View File
@@ -76,4 +76,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1053.003/linux_auditd_crontab_edit/linux_auditd_crontab_edit.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_kernel_module_using_rmmod_utility.yml
+1 -1
View File
@@ -75,4 +75,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1547.006/linux_auditd_rmmod/linux_auditd_rmmod.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_nopasswd_entry_in_sudoers_file.yml
+1 -1
View File
@@ -75,4 +75,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1548.003/linux_auditd_nopasswd/linux_auditd_nopasswd.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_osquery_service_stop.yml
+1 -1
View File
@@ -74,4 +74,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1489/linux_auditd_osquerd_service_stop/linux_auditd_osquerd_service_stop.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_possible_access_or_modification_of_sshd_config_file.yml
+1 -1
View File
@@ -76,4 +76,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1098.004/linux_auditd_nopasswd/linux_auditd_ssh_config.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_possible_access_to_credential_files.yml
+1 -1
View File
@@ -77,4 +77,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1003.008/linux_auditd_access_credential/linux_auditd_access_credential.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit
detections/endpoint/linux_auditd_possible_access_to_sudoers_file.yml
-1
View File
@@ -75,4 +75,3 @@ tests:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1548.003/linux_auditd_sudoers_access/linux_auditd_sudoers_access.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
detections/endpoint/linux_auditd_private_keys_and_certificate_enumeration.yml
+1 -1
View File
@@ -76,4 +76,4 @@ tests:
- data:
https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1547.006/linux_auditd_modprobe/linux_auditd_modprobe.log
source: /var/log/audit/audit.log
sourcetype: linux:audit
sourcetype: linux:audit