admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
405ebb4dae129fa759eefc9acbed6af4c2bc4813
splunk-security_content/stories
T
History
Bhavin Patel 33af6dfb13 Merge branch 'develop' into cloudfederationcredentialabuse
2021-02-08 11:29:49 -08:00
..
apache_struts_vulnerability.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
asset_tracking.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_cross_account_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_cryptomining.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_network_acl_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_security_hub_alerts.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_suspicious_provisioning_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
aws_user_monitoring.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
baron_samedit_cve_2021_3156.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
brand_monitoring.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
cloud_cryptomining.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
cloud_federated_credential_abuse.yml
storyandfirstsearchcloudfederatedcredentialabuse
2021-01-26 15:03:53 -05:00
coldroot_macos_rat.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
collection_and_staging.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
command_and_control.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
common_phishing_frameworks.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
container_implantation_monitoring_and_investigation.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
credential_dumping.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
data_exfiltration.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
data_protection.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
detect_zerologon_attack.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
dhs_report_ta18_074a.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
disabling_security_tools.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
dns_amplification_attacks.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
dns_hijacking.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
dynamic_dns.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
emotet_malware__dhs_report_ta18_201a_.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
f5_tmui_rce_cve_2020_5902.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
gcp_cross_account_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
hidden_cobra_malware.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
host_redirection.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
jboss_vulnerability.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
kubernetes_scanning_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
kubernetes_sensitive_object_access_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
kubernetes_sensitive_role_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
lateral_movement.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
malicious_powershell.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
monitor_backup_solution.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
monitor_for_unauthorized_software.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
monitor_for_updates.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
netsh_abuse.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
office_365_detections.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
orangeworm_attack_group.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
phishing_payloads.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
prohibited_traffic_allowed_or_protocol_mismatch.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
ransomware_cloud.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
ransomware_ryuk.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
ransomware_samsam.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
ransomware.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
router_and_infrastructure_security.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
spectre_and_meltdown_vulnerabilities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
splunk_enterprise_vulnerability_cve_2018_11409.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
splunk_enterprise_vulnerability.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
sql_injection.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
sunburst_malware.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_aws_ec2_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_aws_login_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_aws_s3_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_aws_traffic.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_cloud_authentication_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_cloud_instance_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_cloud_provisioning_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_cloud_user_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_command_line_executions.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_dns_traffic.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_emails.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_gcp_storage_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_mshta_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_okta_activity.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_windows_registry_activities.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_wmi_use.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
suspicious_zoom_child_processes.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
trusted_developer_utilities_proxy_execution_msbuild.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
trusted_developer_utilities_proxy_execution.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
unusual_aws_ec2_modifications.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
unusual_processes.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
use_of_cleartext_protocols.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
web_fraud_detection.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_defense_evasion_tactics.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_dns_sigred_cve_2020_1350.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_file_extension_and_association_abuse.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_log_manipulation.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_persistence_techniques.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_privilege_escalation.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00
windows_service_abuse.yml
updated stories with product tags
2021-02-04 10:54:26 -05:00