Branch was auto-updated.

This commit is contained in:
srv-rr-gh-researchbt
2023-10-09 16:02:25 -07:00
committed by GitHub
15 changed files with 16 additions and 16 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
import sys
import argparse
import os
import os
from bin.contentctl_project.contentctl_core.domain.entities.link_validator import LinkValidator
@@ -1,5 +1,5 @@
name: G Suite for GMail Message Identifier Activity Analysis
id: 5299d6dd-e9c4-4afa-b051-928ace0ff816d
id: 5299d6dd-e9c4-4afa-b051-928ace0ff816
version: 1
date: '2023-05-12'
author: Lou Stella, Splunk
@@ -1,4 +1,4 @@
name: Splunk_Attack_Analyzer_Dynamic_Analysis
name: Splunk Attack Analyzer Dynamic Analysis
id: c77faffe-1339-43b0-b870-86582da9063e
version: 1
date: '2023-03-24'
@@ -26,4 +26,4 @@ tags:
- Enrichment
- Phishing
- Endpoint
defend_technique_id: D3-DA
defend_technique_id: D3-DA
+1 -1
View File
@@ -22,7 +22,7 @@ tags:
- Curl Download and Bash Execution
- Wget Download and Bash Execution
- Linux Java Spawning Shell
- Windows Java Spawning Shell
- Windows Java Spawning Shells
- Java Class File download by Java User Agent
- Outbound Network Connection from Java Using Default Ports
- Log4Shell JNDI Payload Injection Attempt
+1 -1
View File
@@ -22,7 +22,7 @@ tags:
- Curl Download and Bash Execution
- Wget Download and Bash Execution
- Linux Java Spawning Shell
- Windows Java Spawning Shell
- Windows Java Spawning Shells
- Java Class File download by Java User Agent
- Outbound Network Connection from Java Using Default Ports
- Log4Shell JNDI Payload Injection Attempt
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Block Indicators
id: rn0edc96-ff2b-48b0-9f6f-83da3783fd63
id: 000edc96-ff2b-48b0-9f6f-83da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Enrich
id: rn0edc96-ff2b-48b0-9f6f-43da3783fd63
id: 010edc96-ff2b-48b0-9f6f-43da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Import Data
id: rn0edc96-ff2b-48b0-9f6f-23da3783fd63
id: 020edc96-ff2b-48b0-9f6f-23da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Investigate
id: rn0edc96-ff2b-48b0-9f6f-03da3783fd63
id: 030edc96-ff2b-48b0-9f6f-03da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Merge Events
id: rn0edc96-ff2b-48b0-9f6f-53da3783fd63
id: 040edc96-ff2b-48b0-9f6f-53da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Mitigate
id: rn0edc96-ff2b-48b0-9f6f-63da3783fd63
id: 050edc96-ff2b-48b0-9f6f-63da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Preprocess
id: rn0edc96-ff2b-48b0-9f6f-13da3783fd63
id: 060edc96-ff2b-48b0-9f6f-13da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
@@ -1,5 +1,5 @@
name: Risk Notable Protect Assets and Users
id: rn0edc96-ff2b-48b0-9f6f-93da3783fd63
id: 070edc96-ff2b-48b0-9f6f-93da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Review Indicators
id: rn0edc96-ff2b-48b0-9f6f-73da3783fd63
id: 080edc96-ff2b-48b0-9f6f-73da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk
+1 -1
View File
@@ -1,5 +1,5 @@
name: Risk Notable Verdict
id: rn0edc96-ff2b-48b0-9f6f-33da3783fd63
id: 090edc96-ff2b-48b0-9f6f-33da3783fd63
version: 1
date: "2021-10-22"
author: Kelby Shelton, Splunk