admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

add risk scores

Browse Source
This commit is contained in:
bpatel
2020-10-27 16:19:50 -07:00
parent caea9b2567
commit cad99d8dfb
3 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/cloud/abnormally_high_number_of_cloud_infrastructure_api_calls.yml
+4
View File
@@ -42,3 +42,7 @@ tags:
- PR.AC
security_domain: network
asset_type: AWS Instance
risk_score: 25
risk_object_type: user
risk_object: user
detections/cloud/abnormally_high_number_of_cloud_security_group_api_calls.yml
+4
View File
@@ -42,3 +42,7 @@ tags:
- PR.AC
security_domain: network
asset_type: AWS Instance
risk_score: 25
risk_object_type: user
risk_object: user
detections/cloud/cloud_api_calls_from_previously_unseen_user_roles.yml
+3
View File
@@ -40,3 +40,6 @@ tags:
- T1078
security_domain: endpoint
asset_type: AWS Instance
risk_score: 25
risk_object_type: user
risk_object: user