splunk-security_content/lookups/csv/malware_user_agents.yml at develop - splunk-security_content - Github MalDev Mirror

admin/splunk-security_content

mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00

Files

T

Eric McGinnis db8c7c8509 Initial commit of modified objects. A small set of 5 kvstore lookups could not be git moved AND updated in the same operation because git instead interpreted this as deleting the old file and creating a new one. To preserve git history, the files have been moved in this commit and will be updated in the next commit.

2026-05-13 14:02:27 -07:00

13 lines

332 B

YAML

Raw Permalink Blame History

 name: malware_user_agents
 id: 3a1a501c-d65f-4a6c-95a3-3d2b9a8c43c3
 version: 2
 creation_date: '2026-01-06'
 modification_date: '2026-05-13'
 author: Raven Tait, Splunk
 lookup_type: csv
 description: A list of user agents used with known malware.
 match_type:
     - WILDCARD(malware_user_agents)
 min_matches: 1
 case_sensitive_match: true