mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
pyth0n1c
732aec3f95
logic and documentation to risky command lookup file. Update macro to point to new risky command csv. Fiox some opservables.
8 lines
256 B
YAML
8 lines
256 B
YAML
description: A list of Risky Splunk Command that are candidates for abuse
|
|
filename: splunk_risky_command_20231003.csv
|
|
name: splunk_risky_command
|
|
default_match: 'false'
|
|
match_type: WILDCARD(splunk_risky_command)
|
|
min_matches: 1
|
|
case_sensitive_match: 'false'
|