admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
61990be03f60a60b71bbaedbfaf1614d059ef6dd
splunk-security_content/baselines
T
History
David Dorsey 85a637b149 Merge branch 'develop' into cloud_cryptominig
2019-10-07 22:59:06 -05:00
..
add_prohibited_processes_to_es.json
removing html tags
2019-09-04 12:20:27 -04:00
approved_aws_service_accounts.json
removing html tags
2019-09-04 12:20:27 -04:00
assets_sorted_by_category.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_api_calls_per_user_arn.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_aws_regions.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_blocked_vpc_traffic.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_cloud_compute_regions.json
Files for new cloud cryptominig story.
2019-10-03 17:42:40 -07:00
baseline_network_acl_modifications.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_s3_deletion_by_arn.json
removing html tags
2019-09-04 12:20:27 -04:00
baseline_security_group_activity_by_arn.json
removing html tags
2019-09-04 12:20:27 -04:00
brand_abuse_dnstwist_domains.json
removing html tags
2019-09-04 12:20:27 -04:00
discover_dns_records.json
removing html tags
2019-09-04 12:20:27 -04:00
identify_ports_on_network.json
removing html tags
2019-09-04 12:20:27 -04:00
identify_systems_creating_rdp_traffic.json
removing html tags
2019-09-04 12:20:27 -04:00
identify_systems_receiving_rdp_traffic.json
removing html tags
2019-09-04 12:20:27 -04:00
identify_systems_using_remote_desktop.json
removing html tags
2019-09-04 12:20:27 -04:00
monitor_successful_backups.json
removing html tags
2019-09-04 12:20:27 -04:00
monitor_successful_windows_updates.json
removing html tags
2019-09-04 12:20:27 -04:00
monitor_unsuccessful_backups.json
removing html tags
2019-09-04 12:20:27 -04:00
monitor_unsuccessful_windows_updates.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_aws_cross_account_activity.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_aws_users.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_cloud_compute_creations_by_user.json
Files for new cloud cryptominig story.
2019-10-03 17:42:40 -07:00
previously_seen_cloud_compute_images.json
Files for new cloud cryptominig story.
2019-10-03 17:42:40 -07:00
previously_seen_cloud_compute_instance_types.json
Files for new cloud cryptominig story.
2019-10-03 17:42:40 -07:00
previously_seen_cmd_arguments.json
Fixed issue inside of where clause
2019-09-30 16:17:29 -07:00
previously_seen_ec2_amis.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_ec2_instance_types.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_ec2_launches_by_user.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_ec2_modifications.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_provisioning_activity_src.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_s3_remote_ip.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_user_roles.json
removing html tags
2019-09-04 12:20:27 -04:00
previously_seen_windows_service_starts.json
removing html tags
2019-09-04 12:20:27 -04:00
systems_ready_for_spectre_meltdown_patch.json
removing html tags
2019-09-04 12:20:27 -04:00
train_dns_query_length.json
removing html tags
2019-09-04 12:20:27 -04:00
train_smb_traffic_spike.json
removing html tags
2019-09-04 12:20:27 -04:00
train_unusually_long_commandlines.json
removing html tags
2019-09-04 12:20:27 -04:00
update_previously_seen_aws_users.json
removing html tags
2019-09-04 12:20:27 -04:00