admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
nuke_deprecated
splunk-security_content/stories
T
History
research-bot f5cc9deade stock values for deprecation
2025-01-17 15:31:56 -08:00
..
3cx_supply_chain_attack.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
abnormal_kubernetes_behavior_using_splunk_infrastructure_monitoring.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
acidpour.yml
updating spl and story file
2024-07-25 10:48:12 -05:00
acidrain.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
active_directory_discovery.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
active_directory_kerberos_attacks.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
active_directory_lateral_movement.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
active_directory_password_spraying.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
active_directory_privilege_escalation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
adobe_coldfusion_arbitrary_code_execution_cve_2023_29298_cve_2023_26360.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
agenttesla.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
amadey.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
apache_struts_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
apt29_diplomatic_deceptions_with_wineloader.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
asset_tracking.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
asyncrat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
atlassian_confluence_server_and_data_center_cve_2022_26134.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
awfulshred.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_cross_account_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_defense_evasion.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_iam_privilege_escalation.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
aws_identity_and_access_management_account_takeover.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_network_acl_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_security_hub_alerts.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
aws_user_monitoring.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
azorult.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
azure_active_directory_account_takeover.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
azure_active_directory_persistence.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
azure_active_directory_privilege_escalation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
baron_samedit_cve_2021_3156.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
bishopfox_sliver_adversary_emulation_framework.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
bits_jobs.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
blackbyte_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
blacklotus_campaign.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
blackmatter_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
blacksuit_ransomware.yml
No More Haag-gling with BlackSuit: A Tailored Analytic Story
2024-08-26 13:27:08 -06:00
brand_monitoring.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
braodo_stealer.yml
Fix date so its not in the future
2024-11-13 18:28:51 -06:00
brute_ratel_c4.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
caddy_wiper.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
chaos_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cisa_aa22_257a.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cisa_aa22_264a.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cisa_aa22_277a.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cisa_aa22_320a.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cisa_aa23_347a.yml
additional autologger analytic
2024-12-09 15:20:18 +01:00
cisa_aa24_241a.yml
Update cisa_aa24_241a.yml
2024-10-07 14:31:49 -07:00
cisco_ios_xe_software_web_management_user_interface_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
citrix_netscaler_adc_and_netscaler_gateway_cve_2023_4966.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
citrix_netscaler_adc_cve_2023_3519.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
citrix_sharefile_rce_cve_2023_24489.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cleo_file_transfer_software.yml
The Haag Papyrus: Secrets of Cleo
2024-12-11 12:42:58 -07:00
clop_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cloud_cryptomining.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cloud_federated_credential_abuse.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cobalt_strike.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
coldroot_macos_rat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
collection_and_staging.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
command_and_control.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
compromised_linux_host.yml
linux_auditd_detection
2024-08-27 10:42:47 +02:00
compromised_user_account.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
compromised_windows_host.yml
update narrative
2024-08-05 17:33:49 -07:00
confluence_data_center_and_confluence_server_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
connectwise_screenconnect_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
credential_dumping.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
critical_alerts.yml
fix misisng version for one analytic story
2024-10-15 18:50:32 -04:00
crushftp_vulnerabilities.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
cve_2022_40684_fortinet_appliance_auth_bypass.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cve_2023_21716_word_rtf_heap_corruption.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cve_2023_22515_privilege_escalation_vulnerability_confluence_data_center_and_server.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cve_2023_23397_outlook_elevation_of_privilege.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cve_2023_36884_office_and_windows_html_rce_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
cyclops_blink.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
darkcrystal_rat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
darkgate_malware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
darkside_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
data_destruction.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
data_exfiltration.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
data_protection.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
defense_evasion_or_unauthorized_access_via_sddl_tampering.yml
tag more content
2024-12-06 16:09:30 +01:00
deobfuscate_decode_files_or_information.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
detect_zerologon_attack.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
dev_sec_ops.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
dhs_report_ta18_074a.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
disabling_security_tools.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
dns_amplification_attacks.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
dns_hijacking.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
domain_trust_discovery.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
double_zero_destructor.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
dynamic_dns.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
emotet_malware_dhs_report_ta18_201a.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
f5_authentication_bypass_with_tmui.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
f5_big_ip_vulnerability_cve_2022_1388.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
f5_tmui_rce_cve_2020_5902.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
fin7.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
flax_typhoon.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
forest_blizzard.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
fortinet_fortinac_cve_2022_39952.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
gcp_account_takeover.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
gcp_cross_account_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
gomir.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
gozi_malware.yml
remove /n
2024-07-26 10:26:00 -05:00
graceful_wipe_out_attack.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
hafnium_group.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
handala_wiper.yml
handala_wiper
2024-07-31 10:04:07 +02:00
hermetic_wiper.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
hidden_cobra_malware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
icedid.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
iis_components.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
industroyer2.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
information_sabotage.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ingress_tool_transfer.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
insider_threat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ivanti_connect_secure_vpn_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ivanti_epm_vulnerabilities.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
ivanti_epmm_remote_unauthenticated_access.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ivanti_sentry_authentication_bypass_cve_2023_38035.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ivanti_virtual_traffic_manager_cve_2024_7593.yml
Guardians of the Haaglaxy
2024-08-20 10:53:01 -06:00
jboss_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
jenkins_server_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
jetbrains_teamcity_unauthenticated_rce.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
jetbrains_teamcity_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
juniper_junos_remote_code_execution.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
kubernetes_scanning_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
kubernetes_security.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
kubernetes_sensitive_object_access_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
linux_living_off_the_land.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
linux_persistence_techniques.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
linux_post_exploitation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
linux_privilege_escalation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
linux_rootkit.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
living_off_the_land.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
local_privilege_escalation_with_krbrelayup.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
lockbit_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
log4shell_cve_2021_44228.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
lumma_stealer.yml
final tags
2024-11-20 10:05:19 -07:00
malicious_powershell.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
masquerading___rename_system_utilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
meduza_stealer.yml
small typo fixes
2024-12-03 19:24:13 +01:00
metasploit.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
meterpreter.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
microsoft_mshtml_remote_code_execution_cve_2021_40444.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
microsoft_sharepoint_server_elevation_of_privilege_cve_2023_29357.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
microsoft_support_diagnostic_tool_vulnerability_cve_2022_30190.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
monitor_for_updates.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
moonpeak.yml
moon_peak_coverage
2024-08-21 16:38:52 +02:00
moveit_transfer_authentication_bypass.yml
The Haag Returns
2024-07-24 12:16:25 -06:00
moveit_transfer_critical_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
netsh_abuse.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
network_discovery.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
njrat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
nobelium_group.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
office_365_account_takeover.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
office_365_collection_techniques.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
office_365_persistence_mechanisms.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
okta_account_takeover.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
okta_mfa_exhaustion.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
openssl_cve_2022_3602.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
orangeworm_attack_group.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
outlook_rce_cve_2024_21378.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
papercut_mf_ng_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
petitpotam_ntlm_relay_on_active_directory_certificate_services.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
phemedrone_stealer.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
plugx.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
prestige_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
printnightmare_cve_2021_34527.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
prohibited_traffic_allowed_or_protocol_mismatch.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
proxynotshell.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
proxyshell.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
pxa_stealer.yml
improve grammer
2024-11-19 14:39:24 -08:00
qakbot.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ransomware_cloud.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
redline_stealer.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
remcos.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
reverse_network_proxy.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
revil_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
rhysida_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
router_and_infrastructure_security.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ryuk_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
samaccountname_spoofing_and_domain_controller_impersonation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
samsam_ransomware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
sandworm_tools.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
scheduled_tasks.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
shrinklocker.yml
shrink locker updates
2024-07-25 10:59:38 -05:00
signed_binary_proxy_execution_installutil.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
silver_sparrow.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
snake_keylogger.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
snake_malware.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
sneaky_active_directory_persistence_tricks.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
spearphishing_attachments.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
spring4shell_cve_2022_22965.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
sql_injection.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
subvert_trust_controls_sip_and_trust_provider_hijacking.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_aws_login_activities.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
suspicious_aws_s3_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_aws_traffic.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_cloud_authentication_activities.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
suspicious_cloud_instance_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_cloud_provisioning_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_cloud_user_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_command_line_executions.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_compiled_html_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_dns_traffic.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_emails.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_gcp_storage_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_mshta_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_okta_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_regsvcs_regasm_activity.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
suspicious_regsvr32_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_rundll32_activity.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_windows_registry_activities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_wmi_use.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
suspicious_zoom_child_processes.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
swift_slicer.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
sysaid_on_prem_software_cve_2023_47246_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
text4shell_cve_2022_42889.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
trickbot.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
trusted_developer_utilities_proxy_execution_msbuild.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
trusted_developer_utilities_proxy_execution.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
unusual_processes.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
use_of_cleartext_protocols.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
valleyrat.yml
valleyrat
2024-09-17 09:47:33 +02:00
vmware_aria_operations_vrealize_cve_2023_20887.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
vmware_esxi_ad_integration_authentication_bypass_cve_2024_37085.yml
Create vmware_esxi_ad_integration_authentication_bypass_cve_2024_37085.yml
2024-07-30 10:44:37 -06:00
vmware_server_side_injection_and_privilege_escalation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
volt_typhoon.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
warzone_rat.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
whispergate.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_applocker.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_attack_surface_reduction.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_bootkits.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_certificate_services.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_defense_evasion_tactics.yml
Final round of fixes to fields with
2024-09-24 21:46:38 -07:00
windows_discovery_techniques.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_dns_sigred_cve_2020_1350.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_drivers.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_error_reporting_service_elevation_of_privilege_vulnerability.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_file_extension_and_association_abuse.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_log_manipulation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_persistence_techniques.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_post_exploitation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_privilege_escalation.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_registry_abuse.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_service_abuse.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
windows_system_binary_proxy_execution_msiexec.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
winrar_spoofing_attack_cve_2023_38831.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
winter_vivern.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
wordpress_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
ws_ftp_server_critical_vulnerabilities.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
xmrig.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00
xorddos.yml
xorddos
2024-12-17 19:34:54 +01:00
zscaler_browser_proxy_threats.yml
ESCU Release v4.31.0
2024-05-08 16:05:40 +00:00