admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2023-03-20 09:18:03 -07:00
committed by GitHub
parent bca3e6a1fb 96efd77478
commit e903372431
2 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dist/escu/default/transforms.conf
Vendored
+2
View File
@@ -338,6 +338,7 @@ case_sensitive_match = false
# description = A list of file extensions that are associated with ransomware
match_type = WILDCARD(Extensions)
min_matches = 1
case_sensitive_match = false
[ransomware_notes_lookup]
filename = ransomware_notes.csv
@@ -345,6 +346,7 @@ default_match = false
# description = A list of file names that are ransomware note files
match_type = WILDCARD(ransomware_notes)
min_matches = 1
case_sensitive_match = false
[remote_access_software]
filename = remote_access_software.csv
lookups/ransomware_notes_lookup.yml
+1
View File
@@ -4,3 +4,4 @@ filename: ransomware_notes.csv
match_type: WILDCARD(ransomware_notes)
min_matches: 1
name: ransomware_notes_lookup
case_sensitive_match: 'false'