admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2023-05-01 11:59:11 -07:00
committed by GitHub
parent c6a50e7c7a 3907ef5572
commit d3b2ecb5cd
3 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
baselines/baseline_of_command_line_length___mltk.yml
+7
View File
@@ -48,4 +48,11 @@ tags:
- Processes.process_name
- Processes.process
security_domain: endpoint
deployment:
scheduling:
cron_schedule: 0 0 1 * *
earliest_time: -30d@d
latest_time: -1d@d
schedule_window: auto
baselines/baseline_of_dns_query_length___mltk.yml
+6
View File
@@ -41,3 +41,9 @@ tags:
- DNS.query
- DNS.record_type
security_domain: network
deployment:
scheduling:
cron_schedule: 0 0 */30 * *
earliest_time: -30d@d
latest_time: -1d@d
schedule_window: auto
baselines/previously_seen_cloud_compute_creations_by_user___initial.yml
+3 -3
View File
@@ -33,7 +33,7 @@ tags:
security_domain: network
deployment:
scheduling:
cron_schedule: 55 * * * *
earliest_time: -70m@m
latest_time: -10m@m
cron_schedule: 0 2 * * 0
earliest_time: -90d@d
latest_time: -1d@d
schedule_window: auto