admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
7c7eb484dec88f3c6daa1bfbb7fdfe1daa7de4eb
splunk-security_content/detections/web
T
History
Michael Haag 93d7a12e33 Citrix Bleed
2023-10-26 18:06:47 +00:00
..
adobe_coldfusion_access_control_bypass.yml
Update adobe_coldfusion_access_control_bypass.yml
2023-08-29 10:24:49 -07:00
adobe_coldfusion_unauthenticated_arbitrary_file_read.yml
updating to gist
2023-09-01 14:14:48 -07:00
cisco_ios_xe_implant_access.yml
Merge branch 'cve202320198' of https://github.com/splunk/security_content into cve202320198
2023-10-17 11:24:15 -06:00
citrix_adc_and_gateway_unauthorized_data_disclosure.yml
Citrix Bleed
2023-10-26 18:06:47 +00:00
citrix_adc_exploitation_cve_2023_3519.yml
Update citrix_adc_exploitation_cve_2023_3519.yml
2023-10-13 07:06:16 -06:00
citrix_sharefile_exploitation_cve_2023_24489.yml
Update citrix_sharefile_exploitation_cve_2023_24489.yml
2023-07-26 13:37:34 -06:00
confluence_cve_2023_22515_trigger_vulnerability.yml
Update confluence_cve_2023_22515_trigger_vulnerability.yml
2023-10-13 13:00:33 -06:00
confluence_data_center_and_server_privilege_escalation.yml
Update confluence_data_center_and_server_privilege_escalation.yml
2023-10-12 09:10:58 -06:00
confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
detect_attackers_scanning_for_vulnerable_jboss_servers.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
detect_f5_tmui_rce_cve_2020_5902.yml
merged with develop
2023-03-03 12:40:16 +01:00
detect_malicious_requests_to_exploit_jboss_servers.yml
merged with develop
2023-03-03 12:40:16 +01:00
exploit_public_facing_application_via_apache_commons_text.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
exploit_public_facing_fortinet_fortinac_cve_2022_39952.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
fortinet_appliance_auth_bypass.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
hunting_for_log4shell.yml
Fixed a handful of issues with observables and messages and spacing in content.
2023-10-23 19:49:17 +00:00
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35082.yml
Ivanti CVE-2023-35082
2023-08-08 10:23:50 -06:00
ivanti_epmm_remote_unauthenticated_api_access.yml
Update ivanti_epmm_remote_unauthenticated_api_access.yml
2023-07-31 14:25:44 -07:00
ivanti_sentry_authentication_bypass.yml
Update ivanti_sentry_authentication_bypass.yml
2023-08-29 10:23:19 -07:00
jetbrains_teamcity_rce_attempt.yml
adding Attacker obs
2023-10-02 08:55:43 -07:00
juniper_networks_remote_code_execution_exploit_detection.yml
Update juniper_networks_remote_code_execution_exploit_detection.yml
2023-09-20 12:06:59 -06:00
log4shell_jndi_payload_injection_attempt.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
log4shell_jndi_payload_injection_with_outbound_connection.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
microsoft_sharepoint_server_elevation_of_privilege.yml
minor
2023-10-17 16:58:32 -07:00
monitor_web_traffic_for_brand_abuse.yml
merged with develop
2023-03-03 12:40:16 +01:00
papercut_ng_remote_web_access_attempt.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
proxyshell_proxynotshell_behavior_detected.yml
blackbyte_campaign
2023-07-10 12:55:29 +02:00
spring4shell_payload_url_request.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
sql_injection_with_long_urls.yml
updated with proper format
2023-10-13 13:32:37 -07:00
supernova_webshell.yml
updated with proper format
2023-10-13 13:32:37 -07:00
vmware_aria_operations_exploit_attempt.yml
Update vmware_aria_operations_exploit_attempt.yml
2023-06-21 13:33:54 -07:00
vmware_server_side_template_injection_hunt.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
vmware_workspace_one_freemarker_server_side_template_injection.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
web_jsp_request_via_url.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
web_spring4shell_http_request_class_module.yml
updating the remainder of yamls
2023-08-21 15:58:35 -07:00
web_spring_cloud_function_functionrouter.yml
T1133 Tags + description updates
2023-06-01 13:44:32 -06:00
windows_exchange_autodiscover_ssrf_abuse.yml
blackbyte_campaign
2023-07-10 12:55:29 +02:00
ws_ftp_remote_code_execution.yml
new PR with correct yamls
2023-10-13 11:26:26 -07:00