admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9be8315fdca24a6cfedff979f163ea4e690d7521
splunk-security_content/detections/network
T
History
mhaag-spl 51823d81d3 Sunburst malware renamed NOBELIUM Group 
Renaming Sunburst Malware to NOBELIUM Group
2021-03-05 10:30:34 -07:00
..
detect_hosts_connecting_to_dynamic_domain_providers.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_ipv6_network_infrastructure_threats.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_large_outbound_icmp_packets.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_outbound_smb_traffic.yml
Sunburst malware renamed NOBELIUM Group
2021-03-05 10:30:34 -07:00
detect_port_security_violation.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_rogue_dhcp_server.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_snicat_sni_exfiltration.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_software_download_to_network_device.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_traffic_mirroring.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_unauthorized_assets_by_mac_address.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_windows_dns_sigred_via_splunk_stream.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_windows_dns_sigred_via_zeek.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
detect_zerologon_via_zeek.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
dns_query_length_outliers___mltk.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
dns_query_length_with_high_standard_deviation.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
remote_desktop_network_bruteforce.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
remote_desktop_network_traffic.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
smb_traffic_spike___mltk.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
smb_traffic_spike.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00
tor_traffic.yml
Sunburst malware renamed NOBELIUM Group
2021-03-05 10:30:34 -07:00
unusually_long_content_type_length.yml
added datamodels as an array
2021-02-10 22:35:58 -05:00