splunk-security_content/docs/spec/detections-properties-references.md

Untitled array in Detection Schema Schema

#/properties/references#/properties/references

A list of references for this detection

Abstract	Extensible	Status	Identifiable	Custom Properties	Additional Properties	Access Restrictions	Defined In
Can be instantiated	No	Unknown status	Unknown identifiability	Forbidden	Allowed	none	detections.spec.json*

references Type

string[] (The Items Schema)

references Default Value

The default value is:

[]

references Examples

- >-
  https://2017.zeronights.org/wp-content/uploads/materials/ZN17_Kheirkhabarov_Hunting_for_Credentials_Dumping_in_Windows_Environment.pdf