admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
AutoMerge-Token-Update
splunk-security_content/detections/experimental/cloud
T
History
P4T12ICK 1fca39be77 updated generate
2021-07-20 16:41:53 +02:00
..
.untested
detection/experimental folder for untested detections
2020-11-06 10:37:11 -08:00
abnormally_high_cloud_instances_destroyed.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
abnormally_high_cloud_instances_launched.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
amazon_eks_kubernetes_cluster_scan_detection.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
amazon_eks_kubernetes_pod_scan_detection.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
aws_detect_attach_to_role_policy.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
aws_detect_permanent_key_creation.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
aws_detect_role_creation.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
aws_detect_sts_assume_role_abuse.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
aws_detect_sts_get_session_token_abuse.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_gcp_storage_access_from_a_new_ip.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_new_open_gcp_storage_buckets.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_s3_access_from_a_new_ip.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_spike_in_aws_security_hub_alerts_for_user.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_spike_in_blocked_outbound_traffic_from_your_aws.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
detect_spike_in_s3_bucket_deletion.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
gcp_detect_gcploit_framework.yml
updated generate
2021-07-20 16:41:53 +02:00
gcp_kubernetes_cluster_pod_scan_detection.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
high_number_of_login_failures_from_a_single_source.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
kubernetes_aws_detect_suspicious_kubectl_calls.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00
new_container_uploaded_to_aws_ecr.yml
add analytic types to detections
2021-07-19 17:41:22 +02:00