admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
remove_ssa
splunk-security_content/dist/DA-ESS-ContentUpdate/lookups
T
History
research bot fb20d895a8 Updating Github with Content from ESCU - v4.35.0
2024-07-01 17:41:46 +00:00
..
__mlspl_detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
__mlspl_detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
__mlspl_detect_suspicious_processnames_using_pretrained_model_in_dsdl.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
__mlspl_pretrained_dga_model_dsdl.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
__mlspl_risky_spl_pre_trained_model.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
__mlspl_unusual_commandline_detection.mlmodel
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
3cx_ioc_domains.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
advanced_audit_policy_guids.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
applockereventcodes.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
asr_rules.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
attacker_tools.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
aws_service_accounts.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
baseline_blocked_outbound_connections.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
brand_monitoring.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
browser_app_list.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
char_conversion_matrix.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
discovered_dns_records.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
domain_admins.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
domains.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
dynamic_dns_providers_default.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
dynamic_dns_providers_local.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
hijacklibs_loaded.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
hijacklibs.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
images_to_repository.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
is_net_windows_file20231221.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
is_nirsoft_software20231221.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
is_suspicious_file_extension_lookup.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
is_windows_system_file20231221.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
legit_domains.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
linux_tool_discovery_process.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
local_file_inclusion_paths.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
lolbas_file_path.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
loldrivers.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
mandatory_job_for_workflow.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
mandatory_step_for_job.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
mitre_enrichment.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
network_acl_activity_baseline.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
previously_seen_cmd_line_arguments.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
previously_seen_ec2_modifications_by_user.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
privileged_azure_ad_roles.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
prohibited_apps_launching_cmd20231221.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
prohibited_processes.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
ransomware_extensions_20231219.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
ransomware_extensions.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
ransomware_notes_20231219.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
ransomware_notes.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
rare_process_allow_list_default.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
rare_process_allow_list_local.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
remote_access_software.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
security_services.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
splunk_risky_command_20240601.csv
Updating Github with Content from ESCU - v4.35.0
2024-07-01 17:41:46 +00:00
suspicious_files.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
uncommon_processes_default.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
uncommon_processes_local.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00
windows_protocol_handlers.csv
Auto-update dist/* files for ESCU,BA,API via release job for tag v4.34.0 [skip ci]
2024-06-26 20:13:38 +00:00