pyth0n1c 3754611943 Fix a number of experimental and ...

deprecated detections so that
they do not raise error when run
out of the box.

2023-04-11 16:27:40 -07:00

..

detect_new_login_attempts_to_routers.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_risky_spl_using_pretrained_ml_model.yml

merged with develop

2023-03-03 12:40:16 +01:00

email_attachments_with_lots_of_spaces.yml

merged with develop

2023-03-03 12:40:16 +01:00

email_files_written_outside_of_the_outlook_directory.yml

merged with develop

2023-03-03 12:40:16 +01:00

email_servers_sending_high_volume_traffic_to_hosts.yml

merged with develop

2023-03-03 12:40:16 +01:00

monitor_email_for_brand_abuse.yml

merged with develop

2023-03-03 12:40:16 +01:00

multiple_okta_users_with_invalid_credentials_from_the_same_ip.yml

merged with develop

2023-03-03 12:40:16 +01:00

no_windows_updates_in_a_time_frame.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_account_locked_out.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_account_lockout_events.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_failed_sso_attempts.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_mfa_exhaustion_hunt.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_mismatch_between_source_and_response_for_verify_push_request.yml

merged with develop

2023-03-23 10:35:34 +01:00

okta_multiple_failed_requests_to_access_applications.yml

Fix a number of experimental and

2023-04-11 16:27:40 -07:00

okta_new_api_token_created.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_new_device_enrolled_on_account.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_phishing_detection_with_fastpass_origin_check.yml

merged with develop

2023-03-23 10:35:34 +01:00

okta_risk_threshold_exceeded.yml

Fix a number of experimental and

2023-04-11 16:27:40 -07:00

okta_suspicious_activity_reported.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_suspicious_use_of_a_session_cookie.yml

merged with develop

2023-03-23 10:35:34 +01:00

okta_threatinsight_login_failure_with_high_unknown_users.yml

merged with develop

2023-03-23 10:35:34 +01:00

okta_threatinsight_suspected_passwordspray_attack.yml

merged with develop

2023-03-23 10:35:34 +01:00

okta_threatinsight_threat_detected.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_two_or_more_rejected_okta_pushes.yml

merged with develop

2023-03-03 12:40:16 +01:00

okta_user_logins_from_multiple_cities.yml

merged with develop

2023-03-03 12:40:16 +01:00

path_traversal_spl_injection.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_account_discovery_drilldown_dashboard_disclosure.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_code_injection_via_custom_dashboard_leading_to_rce.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_command_and_scripting_interpreter_delete_usage.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_command_and_scripting_interpreter_risky_commands.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_command_and_scripting_interpreter_risky_spl_mltk.yml

manual flag for 1 detection

2023-04-10 11:20:41 -07:00

splunk_csrf_in_the_ssg_kvstore_client_endpoint.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_data_exfiltration_from_analytics_workspace_using_sid_query.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_digital_certificates_infrastructure_version.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_digital_certificates_lack_of_encryption.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_dos_via_malformed_s2s_request.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_endpoint_denial_of_service_dos_zip_bomb.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_improperly_formatted_parameter_crashes_splunkd.yml

merged with develop

2023-03-23 10:35:34 +01:00

splunk_list_all_nonstandard_admin_accounts.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_persistent_xss_in_rapiddiag_through_user_interface_views.yml

updated all yml, remove kc,nist,cis, updaated with 3.64.0 new content

2023-04-04 17:15:38 -05:00

splunk_process_injection_forwarder_bundle_downloads.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_protocol_impersonation_weak_encryption_configuration.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_protocol_impersonation_weak_encryption_selfsigned.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_protocol_impersonation_weak_encryption_simplerequest.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_rce_via_splunk_secure_gateway__splunk_mobile_alerts_feature.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_reflected_xss_in_the_templates_lists_radio.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_risky_command_abuse_disclosed_february_2023.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_stored_xss_via_data_model_objectname_field.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_unnecessary_file_extensions_allowed_by_lookup_table_uploads.yml

updated all yml, remove kc,nist,cis, updaated with 3.64.0 new content

2023-04-04 17:15:38 -05:00

splunk_user_enumeration_attempt.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_xss_in_monitoring_console.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_xss_in_save_table_dialog_header_in_search_page.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_xss_via_view.yml

merged with develop

2023-03-03 12:40:16 +01:00

suspicious_email_attachment_extensions.yml

merged with develop

2023-03-03 12:40:16 +01:00

suspicious_java_classes.yml

merged with develop

2023-03-03 12:40:16 +01:00

web_servers_executing_suspicious_processes.yml

merged with develop

2023-03-03 12:40:16 +01:00