admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
d78bb53baaba90d47d7e35b7967ab630e53f512d
splunk-security_content/docs/_stories
T
History
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
..
active_directory_discovery.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
active_directory_kerberos_attacks.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
active_directory_lateral_movement.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
active_directory_password_spraying.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
apache_struts_vulnerability.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
asset_tracking.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
aws_cross_account_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
aws_iam_privilege_escalation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
aws_network_acl_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
aws_privilege_escalation.md
added analytic stories, cleaned up view a bit
2021-09-12 20:39:15 -04:00
aws_security_hub_alerts.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
aws_user_monitoring.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
baron_samedit_cve-2021-3156.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
bits_jobs.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
blackmatter_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
brand_monitoring.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
clop_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
cloud_cryptomining.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
cloud_federated_credential_abuse.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
cobalt_strike.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
coldroot_macos_rat.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
collection_and_staging.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
command_and_control.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
container_implantation_monitoring_and_investigation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
credential_dumping.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
darkside_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
data_destruction.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
data_exfiltration.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
data_protection.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
deobfuscate-decode_files_or_information.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
detect_zerologon_attack.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
dev_sec_ops.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
dhs_report_ta18-074a.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
disabling_security_tools.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
dns_amplification_attacks.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
dns_hijacking.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
domain_trust_discovery.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
dynamic_dns.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
emotet_malware__dhs_report_ta18-201a_.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
f5_tmui_rce_cve-2020-5902.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
fin7.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
gcp_cross_account_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
hafnium_group.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
hermetic_wiper.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
hidden_cobra_malware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
icedid.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
information_sabotage.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
ingress_tool_transfer.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
jboss_vulnerability.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
kubernetes_scanning_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
kubernetes_sensitive_object_access_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
lateral_movement.md
updating docs and package bits [ci skip]
2021-12-02 18:50:01 +00:00
linux_persistence_techniques.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
linux_post-exploitation.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
linux_privilege_escalation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
living_off_the_land.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
log4shell_cve-2021-44228.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
malicious_powershell.md
docgen ready
2022-02-23 14:46:39 +01:00
masquerading_-_rename_system_utilities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
meterpreter.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
microsoft_mshtml_remote_code_execution_cve-2021-40444.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
monitor_for_updates.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
netsh_abuse.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
network_discovery.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
nobelium_group.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
office_365_detections.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
orangeworm_attack_group.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
petitpotam_ntlm_relay_on_active_directory_certificate_services.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md
docgen ready
2022-02-23 14:46:39 +01:00
printnightmare_cve-2021-34527.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
prohibited_traffic_allowed_or_protocol_mismatch.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
proxyshell.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
ransomware_cloud.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
remcos.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
revil_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
router_and_infrastructure_security.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
ryuk_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
samaccountname_spoofing_and_domain_controller_impersonation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
samsam_ransomware.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
signed_binary_proxy_execution_installutil.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
silver_sparrow.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
spearphishing_attachments.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
sql_injection.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_aws_login_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_aws_s3_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_aws_traffic.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_cloud_authentication_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_cloud_instance_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_cloud_provisioning_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_cloud_user_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_command-line_executions.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_compiled_html_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_dns_traffic.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_emails.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_gcp_storage_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_mshta_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_okta_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_regsvcs_regasm_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_regsvr32_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_rundll32_activity.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_windows_registry_activities.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_wmi_use.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
suspicious_zoom_child_processes.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
trickbot.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
trusted_developer_utilities_proxy_execution_msbuild.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
trusted_developer_utilities_proxy_execution.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
unusual_processes.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
use_of_cleartext_protocols.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
whispergate.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_defense_evasion_tactics.md
updating docs and package bits [ci skip]
2022-03-03 18:22:29 +00:00
windows_discovery_techniques.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_dns_sigred_cve-2020-1350.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_file_extension_and_association_abuse.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_log_manipulation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_persistence_techniques.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_privilege_escalation.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
windows_service_abuse.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00
xmrig.md
Revert "Refactored security content"
2022-03-04 15:13:04 -05:00