admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9bff59e484131a8d9bb950df2c8a493bf3cdda5c
splunk-security_content/detections/web
T
History
Bhavin Patel 3b280093f6 Branch was auto-updated.
2024-10-10 14:28:30 -07:00
..
access_to_vulnerable_ivanti_connect_secure_bookmark_endpoint.yml
The Haag Element: Breaking Down AA24-241A
2024-09-03 13:03:21 -06:00
adobe_coldfusion_access_control_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
adobe_coldfusion_unauthenticated_arbitrary_file_read.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
cisco_ios_xe_implant_access.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
citrix_adc_and_gateway_unauthorized_data_disclosure.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
citrix_adc_exploitation_cve_2023_3519.yml
The Haag Element: Breaking Down AA24-241A
2024-09-03 13:03:21 -06:00
citrix_sharefile_exploitation_cve_2023_24489.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
confluence_cve_2023_22515_trigger_vulnerability.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
confluence_data_center_and_server_privilege_escalation.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
confluence_pre_auth_rce_via_ognl_injection_cve_2023_22527.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
connectwise_screenconnect_authentication_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
detect_attackers_scanning_for_vulnerable_jboss_servers.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
detect_f5_tmui_rce_cve_2020_5902.yml
Missed version and date updates
2024-08-16 08:41:51 -05:00
detect_malicious_requests_to_exploit_jboss_servers.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
detect_remote_access_software_usage_url.yml
The Haag Element: Breaking Down AA24-241A
2024-09-03 13:03:21 -06:00
exploit_public_facing_application_via_apache_commons_text.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
exploit_public_facing_fortinet_fortinac_cve_2022_39952.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
f5_tmui_authentication_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
fortinet_appliance_auth_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
high_volume_of_bytes_out_to_url.yml
Updating detections and adding a new one
2024-09-25 13:01:45 +10:00
hunting_for_log4shell.yml
Web detections
2024-08-15 15:38:32 -05:00
ivanti_connect_secure_command_injection_attempts.yml
The Haag Element: Breaking Down AA24-241A
2024-09-03 13:03:21 -06:00
ivanti_connect_secure_ssrf_in_saml_component.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
ivanti_connect_secure_system_information_access_via_auth_bypass.yml
The Haag Element: Breaking Down AA24-241A
2024-09-03 13:03:21 -06:00
ivanti_epm_sql_injection_remote_code_execution.yml
updating file atttrributes
2024-08-23 13:32:49 +05:30
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35078.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35082.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
ivanti_sentry_authentication_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
java_class_file_download_by_java_user_agent.yml
Updating detections and adding a new one
2024-09-25 13:01:45 +10:00
jenkins_arbitrary_file_read_cve_2024_23897.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
jetbrains_teamcity_authentication_bypass_cve_2024_27198.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
jetbrains_teamcity_authentication_bypass_suricata_cve_2024_27198.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
jetbrains_teamcity_limited_auth_bypass_suricata_cve_2024_27199.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
jetbrains_teamcity_rce_attempt.yml
Missed version and date updates
2024-08-16 08:41:51 -05:00
juniper_networks_remote_code_execution_exploit_detection.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
log4shell_jndi_payload_injection_attempt.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
log4shell_jndi_payload_injection_with_outbound_connection.yml
improved data source field
2024-07-16 14:06:31 +02:00
microsoft_sharepoint_server_elevation_of_privilege.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
monitor_web_traffic_for_brand_abuse.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
multiple_archive_files_http_post_traffic.yml
Updating detections and adding a new one
2024-09-25 13:01:45 +10:00
nginx_connectwise_screenconnect_authentication_bypass.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
papercut_ng_remote_web_access_attempt.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
plain_http_post_exfiltrated_data.yml
Updating detections and adding a new one
2024-09-25 13:01:45 +10:00
proxyshell_proxynotshell_behavior_detected.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
spring4shell_payload_url_request.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
sql_injection_with_long_urls.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
supernova_webshell.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
unusually_long_content_type_length.yml
Updating risk object
2024-09-25 14:27:02 +10:00
vmware_aria_operations_exploit_attempt.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
vmware_server_side_template_injection_hunt.yml
Release Branch v4.33.0
2024-06-05 21:05:06 +00:00
vmware_workspace_one_freemarker_server_side_template_injection.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
web_jsp_request_via_url.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
web_remote_shellservlet_access.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
web_spring4shell_http_request_class_module.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
web_spring_cloud_function_functionrouter.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
windows_exchange_autodiscover_ssrf_abuse.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
windows_iis_server_pswa_console_access.yml
PSWA Updates
2024-09-30 10:35:12 -06:00
wordpress_bricks_builder_plugin_rce.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
ws_ftp_remote_code_execution.yml
Missed version and date updates
2024-08-16 08:41:51 -05:00
zscaler_adware_activities_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_behavior_analysis_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_cryptominer_downloaded_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_employment_search_web_activity.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_exploit_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_legal_liability_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_malware_activity_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_phishing_activity_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_potentially_abused_file_download.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_privacy_risk_destinations_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_scam_destinations_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00
zscaler_virus_download_threat_blocked.yml
Release Branch - ESCU v4.34.0
2024-06-26 14:41:53 +00:00