admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
10c25b20149fcf0c5258c1f5ecf110f80b6642cd
splunk-security_content/docs/_stories
T
History
P4T12ICK 10c25b2014 Refactored security content
2022-03-10 10:27:29 +01:00
..
active_directory_discovery.md
Refactored security content
2022-03-10 10:27:29 +01:00
active_directory_kerberos_attacks.md
Refactored security content
2022-03-10 10:27:29 +01:00
active_directory_lateral_movement.md
Refactored security content
2022-03-10 10:27:29 +01:00
active_directory_password_spraying.md
Refactored security content
2022-03-10 10:27:29 +01:00
apache_struts_vulnerability.md
Refactored security content
2022-03-10 10:27:29 +01:00
asset_tracking.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_cross_account_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_cryptomining.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_iam_privilege_escalation.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_network_acl_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_privilege_escalation.md
added analytic stories, cleaned up view a bit
2021-09-12 20:39:15 -04:00
aws_security_hub_alerts.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_suspicious_provisioning_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
aws_user_monitoring.md
Refactored security content
2022-03-10 10:27:29 +01:00
baron_samedit_cve-2021-3156.md
Refactored security content
2022-03-10 10:27:29 +01:00
bits_jobs.md
Refactored security content
2022-03-10 10:27:29 +01:00
blackmatter_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
brand_monitoring.md
Refactored security content
2022-03-10 10:27:29 +01:00
clop_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
cloud_cryptomining.md
Refactored security content
2022-03-10 10:27:29 +01:00
cloud_federated_credential_abuse.md
Refactored security content
2022-03-10 10:27:29 +01:00
cobalt_strike.md
Refactored security content
2022-03-10 10:27:29 +01:00
coldroot_macos_rat.md
Refactored security content
2022-03-10 10:27:29 +01:00
collection_and_staging.md
Refactored security content
2022-03-10 10:27:29 +01:00
command_and_control.md
Refactored security content
2022-03-10 10:27:29 +01:00
common_phishing_frameworks.md
Refactored security content
2022-03-10 10:27:29 +01:00
container_implantation_monitoring_and_investigation.md
Refactored security content
2022-03-10 10:27:29 +01:00
credential_dumping.md
Refactored security content
2022-03-10 10:27:29 +01:00
darkside_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
data_destruction.md
Refactored security content
2022-03-10 10:27:29 +01:00
data_exfiltration.md
Refactored security content
2022-03-10 10:27:29 +01:00
data_protection.md
Refactored security content
2022-03-10 10:27:29 +01:00
deobfuscate-decode_files_or_information.md
Refactored security content
2022-03-10 10:27:29 +01:00
detect_zerologon_attack.md
Refactored security content
2022-03-10 10:27:29 +01:00
dev_sec_ops.md
Refactored security content
2022-03-10 10:27:29 +01:00
dhs_report_ta18-074a.md
Refactored security content
2022-03-10 10:27:29 +01:00
disabling_security_tools.md
Refactored security content
2022-03-10 10:27:29 +01:00
dns_amplification_attacks.md
Refactored security content
2022-03-10 10:27:29 +01:00
dns_hijacking.md
Refactored security content
2022-03-10 10:27:29 +01:00
domain_trust_discovery.md
Refactored security content
2022-03-10 10:27:29 +01:00
dynamic_dns.md
Refactored security content
2022-03-10 10:27:29 +01:00
emotet_malware__dhs_report_ta18-201a_.md
Refactored security content
2022-03-10 10:27:29 +01:00
f5_tmui_rce_cve-2020-5902.md
Refactored security content
2022-03-10 10:27:29 +01:00
fin7.md
Refactored security content
2022-03-10 10:27:29 +01:00
gcp_cross_account_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
hafnium_group.md
Refactored security content
2022-03-10 10:27:29 +01:00
hermetic_wiper.md
Refactored security content
2022-03-10 10:27:29 +01:00
hidden_cobra_malware.md
Refactored security content
2022-03-10 10:27:29 +01:00
host_redirection.md
Refactored security content
2022-03-10 10:27:29 +01:00
icedid.md
Refactored security content
2022-03-10 10:27:29 +01:00
information_sabotage.md
Refactored security content
2022-03-10 10:27:29 +01:00
ingress_tool_transfer.md
Refactored security content
2022-03-10 10:27:29 +01:00
jboss_vulnerability.md
Refactored security content
2022-03-10 10:27:29 +01:00
kubernetes_scanning_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
kubernetes_sensitive_object_access_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
kubernetes_sensitive_role_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
lateral_movement.md
updating docs and package bits [ci skip]
2021-12-02 18:50:01 +00:00
linux_persistence_techniques.md
Refactored security content
2022-03-10 10:27:29 +01:00
linux_post-exploitation.md
Refactored security content
2022-03-10 10:27:29 +01:00
linux_privilege_escalation.md
Refactored security content
2022-03-10 10:27:29 +01:00
living_off_the_land.md
Refactored security content
2022-03-10 10:27:29 +01:00
log4shell_cve-2021-44228.md
Refactored security content
2022-03-10 10:27:29 +01:00
malicious_powershell.md
Refactored security content
2022-03-10 10:27:29 +01:00
masquerading_-_rename_system_utilities.md
Refactored security content
2022-03-10 10:27:29 +01:00
meterpreter.md
Refactored security content
2022-03-10 10:27:29 +01:00
microsoft_mshtml_remote_code_execution_cve-2021-40444.md
Refactored security content
2022-03-10 10:27:29 +01:00
monitor_backup_solution.md
Refactored security content
2022-03-10 10:27:29 +01:00
monitor_for_unauthorized_software.md
Refactored security content
2022-03-10 10:27:29 +01:00
monitor_for_updates.md
Refactored security content
2022-03-10 10:27:29 +01:00
netsh_abuse.md
Refactored security content
2022-03-10 10:27:29 +01:00
network_discovery.md
Refactored security content
2022-03-10 10:27:29 +01:00
nobelium_group.md
Refactored security content
2022-03-10 10:27:29 +01:00
office_365_detections.md
Refactored security content
2022-03-10 10:27:29 +01:00
orangeworm_attack_group.md
Refactored security content
2022-03-10 10:27:29 +01:00
petitpotam_ntlm_relay_on_active_directory_certificate_services.md
Refactored security content
2022-03-10 10:27:29 +01:00
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md
Refactored security content
2022-03-10 10:27:29 +01:00
printnightmare_cve-2021-34527.md
Refactored security content
2022-03-10 10:27:29 +01:00
prohibited_traffic_allowed_or_protocol_mismatch.md
Refactored security content
2022-03-10 10:27:29 +01:00
proxyshell.md
Refactored security content
2022-03-10 10:27:29 +01:00
ransomware_cloud.md
Refactored security content
2022-03-10 10:27:29 +01:00
ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
remcos.md
Refactored security content
2022-03-10 10:27:29 +01:00
revil_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
router_and_infrastructure_security.md
Refactored security content
2022-03-10 10:27:29 +01:00
ryuk_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
samaccountname_spoofing_and_domain_controller_impersonation.md
Refactored security content
2022-03-10 10:27:29 +01:00
samsam_ransomware.md
Refactored security content
2022-03-10 10:27:29 +01:00
signed_binary_proxy_execution_installutil.md
Refactored security content
2022-03-10 10:27:29 +01:00
silver_sparrow.md
Refactored security content
2022-03-10 10:27:29 +01:00
spearphishing_attachments.md
Refactored security content
2022-03-10 10:27:29 +01:00
spectre_and_meltdown_vulnerabilities.md
Refactored security content
2022-03-10 10:27:29 +01:00
splunk_enterprise_vulnerability_cve-2018-11409.md
Refactored security content
2022-03-10 10:27:29 +01:00
splunk_enterprise_vulnerability.md
Refactored security content
2022-03-10 10:27:29 +01:00
sql_injection.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_aws_ec2_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_aws_login_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_aws_s3_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_aws_traffic.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_cloud_authentication_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_cloud_instance_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_cloud_provisioning_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_cloud_user_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_command-line_executions.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_compiled_html_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_dns_traffic.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_emails.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_gcp_storage_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_mshta_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_okta_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_regsvcs_regasm_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_regsvr32_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_rundll32_activity.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_windows_registry_activities.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_wmi_use.md
Refactored security content
2022-03-10 10:27:29 +01:00
suspicious_zoom_child_processes.md
Refactored security content
2022-03-10 10:27:29 +01:00
trickbot.md
Refactored security content
2022-03-10 10:27:29 +01:00
trusted_developer_utilities_proxy_execution_msbuild.md
Refactored security content
2022-03-10 10:27:29 +01:00
trusted_developer_utilities_proxy_execution.md
Refactored security content
2022-03-10 10:27:29 +01:00
unusual_aws_ec2_modifications.md
Refactored security content
2022-03-10 10:27:29 +01:00
unusual_processes.md
Refactored security content
2022-03-10 10:27:29 +01:00
use_of_cleartext_protocols.md
Refactored security content
2022-03-10 10:27:29 +01:00
web_fraud_detection.md
Refactored security content
2022-03-10 10:27:29 +01:00
whispergate.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_defense_evasion_tactics.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_discovery_techniques.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_dns_sigred_cve-2020-1350.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_file_extension_and_association_abuse.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_log_manipulation.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_persistence_techniques.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_privilege_escalation.md
Refactored security content
2022-03-10 10:27:29 +01:00
windows_service_abuse.md
Refactored security content
2022-03-10 10:27:29 +01:00
xmrig.md
Refactored security content
2022-03-10 10:27:29 +01:00