admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update potential_password_in_username.yml

Browse Source 
add JIRA
This commit is contained in:
Bhavin Patel
2025-06-30 11:58:48 -07:00
committed by GitHub
parent e876b8dee5
commit ccc1946e64
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/potential_password_in_username.yml
+1 -1
View File
@@ -51,7 +51,7 @@ tags:
- Splunk Enterprise Security
- Splunk Cloud
security_domain: access
manual_test: Due to an existing bug with eventtypes/tags in the splunk-add-on-for-unix-and-linux TA, this detection does not work with the latest version of the TA 10.0.0. You can refer to the following link for more information - https://github.com/splunk/splunk-add-on-for-unix-and-linux/issues/608. This detection works as expected with TAs prior to 10.0.0.
manual_test: Due to an existing bug with eventtypes/tags in the splunk-add-on-for-unix-and-linux TA, this detection does not work with the latest version of the TA 10.0.0. You can refer to the following link for more information - https://splunk.atlassian.net/browse/ADDON-81872. This detection works as expected with TAs prior to 10.0.0.
tests:
- name: True Positive Test
attack_data: