Xiao Lin 5a34e6c633 add risky command abuse ML detection

2022-06-13 10:53:09 -07:00

..

path_traversal_spl_injection.test.yml

detectionsforlocalprivescpathtraversal

2022-04-29 10:17:14 -07:00

splunk_command_and_scripting_interpreter_delete_usage.test.yml

Fixed improperly named macro.

2022-06-08 10:31:53 -07:00

splunk_command_and_scripting_interpreter_risky_commands.test.yml

Fixed improperly named macro.

2022-06-08 10:31:53 -07:00

splunk_digital_certificates_infrastructure_version.test.yml

Fixed improperly named macro.

2022-06-08 10:31:53 -07:00

splunk_digital_certificates_lack_of_encryption.test.yml

Added missing _internal custom_indexes

2022-06-08 11:08:21 -07:00

splunk_dos_via_malformed_s2s_request.test.yml

Updated test

2022-03-28 09:56:00 -05:00

splunk_process_injection_forwarder_bundle_downloads.test.yml

Added missing _internal custom_indexes

2022-06-08 11:08:21 -07:00

splunk_protocol_impersonation_weak_encryption_configuration.test.yml

Fixed improperly named macro.

2022-06-08 10:31:53 -07:00

splunk_protocol_impersonation_weak_encryption_selfsigned.test.yml

wrong detection file linked from

2022-06-08 16:47:56 -07:00

splunk_protocol_impersonation_weak_encryption_simplerequest.test.yml

Wrong sourcetype declared in one

2022-06-08 11:46:42 -07:00

splunk_risky_command_abuse_ml_detection.test.yml

add risky command abuse ML detection

2022-06-13 10:53:09 -07:00

splunk_user_enumeration_attempt.test.yml

Fixed improperly named macro.

2022-06-08 10:31:53 -07:00

splunk_xss_in_monitoring_console.test.yml

CVE-2022-27183

2022-04-27 12:44:48 -05:00