admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
63851246830faafe8586bc8ff7f101366d650e21
splunk-security_content/detections/experimental/cloud
T
History
divious1 b58843ca9f added datamodels as an array
2021-02-10 22:35:58 -05:00
..
.untested
detection/experimental folder for untested detections
2020-11-06 10:37:11 -08:00
amazon_eks_kubernetes_cluster_scan_detection.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
amazon_eks_kubernetes_pod_scan_detection.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
aws_detect_attach_to_role_policy.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
aws_detect_permanent_key_creation.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
aws_detect_role_creation.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
aws_detect_sts_assume_role_abuse.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
aws_detect_sts_get_session_token_abuse.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_detect_accounts_with_high_risk_roles_by_project.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_detect_gcploit_framework.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_detect_high_risk_permissions_by_resource_and_account.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_detect_oauth_token_abuse.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_kubernetes_cluster_pod_scan_detection.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
gcp_kubernetes_cluster_scan_detection.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_most_active_service_accounts_by_pod.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_rbac_authorizations_by_account.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_sensitive_object_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_sensitive_role_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_service_accounts_forbidden_failure_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_aws_detect_suspicious_kubectl_calls.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_most_active_service_accounts_by_pod_namespace.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_rbac_authorization_by_account.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_sensitive_object_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_sensitive_role_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_service_accounts_forbidden_failure_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_detect_suspicious_kubectl_calls.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_pod_scan_fingerprint.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_azure_scan_fingerprint.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_RBAC_authorizations_by_account.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_sensitive_object_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_sensitive_role_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_service_accounts_forbidden_failure_access.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
kubernetes_gcp_detect_suspicious_kubectl_calls.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00