admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
8c439d3216520dde37560f13ddbb02ac3e4e6504
splunk-security_content/docs/_stories
T
History
d1vious d5a3670463 adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
..
active_directory_password_spraying.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
apache_struts_vulnerability.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
asset_tracking.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
aws_cross_account_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
aws_iam_privilege_escalation.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
aws_network_acl_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
aws_privilege_escalation.md
added analytic stories, cleaned up view a bit
2021-09-12 20:39:15 -04:00
aws_security_hub_alerts.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
aws_user_monitoring.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
baron_samedit_cve-2021-3156.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
bits_jobs.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
brand_monitoring.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
clop_ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
cloud_cryptomining.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
cloud_federated_credential_abuse.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
cobalt_strike.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
coldroot_macos_rat.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
collection_and_staging.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
command_and_control.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
container_implantation_monitoring_and_investigation.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
credential_dumping.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
darkside_ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
data_exfiltration.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
data_protection.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
deobfuscate-decode_files_or_information.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
detect_zerologon_attack.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
dev_sec_ops.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
dhs_report_ta18-074a.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
disabling_security_tools.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
dns_amplification_attacks.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
dns_hijacking.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
domain_trust_discovery.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
dynamic_dns.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
emotet_malware__dhs_report_ta18-201a_.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
f5_tmui_rce_cve-2020-5902.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
gcp_cross_account_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
hafnium_group.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
hidden_cobra_malware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
icedid.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
ingress_tool_transfer.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
jboss_vulnerability.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
kubernetes_scanning_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
kubernetes_sensitive_object_access_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
lateral_movement.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
malicious_powershell.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
masquerading_-_rename_system_utilities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
meterpreter.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
monitor_for_updates.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
netsh_abuse.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
nobelium_group.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
office_365_detections.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
orangeworm_attack_group.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
petitpotam_ntlm_relay_on_active_directory_certificate_services.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
printnightmare_cve-2021-34527.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
prohibited_traffic_allowed_or_protocol_mismatch.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
proxyshell.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
ransomware_cloud.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
revil_ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
router_and_infrastructure_security.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
ryuk_ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
samsam_ransomware.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
silver_sparrow.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
spearphishing_attachments.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
sql_injection.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_aws_login_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_aws_s3_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_aws_traffic.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_cloud_authentication_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_cloud_instance_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_cloud_provisioning_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_cloud_user_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_command-line_executions.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_compiled_html_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_dns_traffic.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_emails.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_gcp_storage_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_mshta_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_okta_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_regsvcs_regasm_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_regsvr32_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_rundll32_activity.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_windows_registry_activities.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_wmi_use.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
suspicious_zoom_child_processes.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
trickbot.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
trusted_developer_utilities_proxy_execution_msbuild.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
trusted_developer_utilities_proxy_execution.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
unusual_processes.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
use_of_cleartext_protocols.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_defense_evasion_tactics.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_discovery_techniques.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_dns_sigred_cve-2020-1350.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_file_extension_and_association_abuse.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_log_manipulation.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_persistence_techniques.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_privilege_escalation.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
windows_service_abuse.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00
xmrig.md
adding try in splunk cloud button
2021-09-22 14:56:08 -04:00