d1vious b7e1a5fe94 adding new detections

2022-08-16 11:30:24 -04:00

..

detect_risky_spl_using_pretrained_ml_model.yml

model to detect risky commands

2022-07-14 16:37:47 +02:00

path_traversal_spl_injection.yml

Required Fields

2022-05-02 15:22:41 -05:00

splunk_command_and_scripting_interpreter_delete_usage.yml

updated from karims suggestion

2022-06-14 08:09:20 -04:00

splunk_command_and_scripting_interpreter_risky_commands.yml

fixing tscollect error

2022-06-14 09:17:24 -04:00

splunk_command_and_scripting_interpreter_risky_spl_mltk.yml

fixing tscollect error

2022-06-14 09:17:24 -04:00

splunk_digital_certificates_infrastructure_version.yml

Update splunk_digital_certificates_infrastructure_version.yml

2022-06-14 08:15:36 -04:00

splunk_digital_certificates_lack_of_encryption.yml

Workbook how_to_implement & references

2022-06-13 16:49:49 -05:00

splunk_dos_via_malformed_s2s_request.yml

Removing false positives

2022-04-27 14:13:01 -05:00

splunk_endpoint_denial_of_service_dos_zip_bomb.yml

adding new detections

2022-08-16 11:30:24 -04:00

splunk_process_injection_forwarder_bundle_downloads.yml

Update splunk_process_injection_forwarder_bundle_downloads.yml

2022-06-16 13:08:02 -05:00

splunk_protocol_impersonation_weak_encryption_configuration.yml

Fixed field

2022-06-13 16:50:50 -05:00

splunk_protocol_impersonation_weak_encryption_selfsigned.yml

fixedhosts

2022-06-13 15:47:06 -07:00

splunk_protocol_impersonation_weak_encryption_simplerequest.yml

Update splunk_protocol_impersonation_weak_encryption_simplerequest.yml

2022-06-14 08:17:53 -04:00

splunk_user_enumeration_attempt.yml

Dates & Refs

2022-05-02 09:50:39 -05:00

splunk_xss_in_monitoring_console.yml

Dates & Refs

2022-05-02 09:50:39 -05:00