mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Branch was auto-updated.
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
import sys
|
||||
import argparse
|
||||
import os
|
||||
import os
|
||||
|
||||
from bin.contentctl_project.contentctl_core.domain.entities.link_validator import LinkValidator
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: G Suite for GMail Message Identifier Activity Analysis
|
||||
id: 5299d6dd-e9c4-4afa-b051-928ace0ff816d
|
||||
id: 5299d6dd-e9c4-4afa-b051-928ace0ff816
|
||||
version: 1
|
||||
date: '2023-05-12'
|
||||
author: Lou Stella, Splunk
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
name: Splunk_Attack_Analyzer_Dynamic_Analysis
|
||||
name: Splunk Attack Analyzer Dynamic Analysis
|
||||
id: c77faffe-1339-43b0-b870-86582da9063e
|
||||
version: 1
|
||||
date: '2023-03-24'
|
||||
@@ -26,4 +26,4 @@ tags:
|
||||
- Enrichment
|
||||
- Phishing
|
||||
- Endpoint
|
||||
defend_technique_id: D3-DA
|
||||
defend_technique_id: D3-DA
|
||||
|
||||
@@ -22,7 +22,7 @@ tags:
|
||||
- Curl Download and Bash Execution
|
||||
- Wget Download and Bash Execution
|
||||
- Linux Java Spawning Shell
|
||||
- Windows Java Spawning Shell
|
||||
- Windows Java Spawning Shells
|
||||
- Java Class File download by Java User Agent
|
||||
- Outbound Network Connection from Java Using Default Ports
|
||||
- Log4Shell JNDI Payload Injection Attempt
|
||||
|
||||
@@ -22,7 +22,7 @@ tags:
|
||||
- Curl Download and Bash Execution
|
||||
- Wget Download and Bash Execution
|
||||
- Linux Java Spawning Shell
|
||||
- Windows Java Spawning Shell
|
||||
- Windows Java Spawning Shells
|
||||
- Java Class File download by Java User Agent
|
||||
- Outbound Network Connection from Java Using Default Ports
|
||||
- Log4Shell JNDI Payload Injection Attempt
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Block Indicators
|
||||
id: rn0edc96-ff2b-48b0-9f6f-83da3783fd63
|
||||
id: 000edc96-ff2b-48b0-9f6f-83da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Enrich
|
||||
id: rn0edc96-ff2b-48b0-9f6f-43da3783fd63
|
||||
id: 010edc96-ff2b-48b0-9f6f-43da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Import Data
|
||||
id: rn0edc96-ff2b-48b0-9f6f-23da3783fd63
|
||||
id: 020edc96-ff2b-48b0-9f6f-23da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Investigate
|
||||
id: rn0edc96-ff2b-48b0-9f6f-03da3783fd63
|
||||
id: 030edc96-ff2b-48b0-9f6f-03da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Merge Events
|
||||
id: rn0edc96-ff2b-48b0-9f6f-53da3783fd63
|
||||
id: 040edc96-ff2b-48b0-9f6f-53da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Mitigate
|
||||
id: rn0edc96-ff2b-48b0-9f6f-63da3783fd63
|
||||
id: 050edc96-ff2b-48b0-9f6f-63da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Preprocess
|
||||
id: rn0edc96-ff2b-48b0-9f6f-13da3783fd63
|
||||
id: 060edc96-ff2b-48b0-9f6f-13da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Protect Assets and Users
|
||||
id: rn0edc96-ff2b-48b0-9f6f-93da3783fd63
|
||||
id: 070edc96-ff2b-48b0-9f6f-93da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Review Indicators
|
||||
id: rn0edc96-ff2b-48b0-9f6f-73da3783fd63
|
||||
id: 080edc96-ff2b-48b0-9f6f-73da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: Risk Notable Verdict
|
||||
id: rn0edc96-ff2b-48b0-9f6f-33da3783fd63
|
||||
id: 090edc96-ff2b-48b0-9f6f-33da3783fd63
|
||||
version: 1
|
||||
date: "2021-10-22"
|
||||
author: Kelby Shelton, Splunk
|
||||
|
||||
Reference in New Issue
Block a user