Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Alphahpla
security_content
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Files
Expand file tree
develop
Breadcrumbs
security_content
/
detections
/
application
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
detections
/
application
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
crushftp_server_side_template_injection.yml
crushftp_server_side_template_injection.yml
detect_distributed_password_spray_attempts.yml
detect_distributed_password_spray_attempts.yml
detect_new_login_attempts_to_routers.yml
detect_new_login_attempts_to_routers.yml
detect_password_spray_attempts.yml
detect_password_spray_attempts.yml
detect_risky_spl_using_pretrained_ml_model.yml
detect_risky_spl_using_pretrained_ml_model.yml
email_attachments_with_lots_of_spaces.yml
email_attachments_with_lots_of_spaces.yml
email_files_written_outside_of_the_outlook_directory.yml
email_files_written_outside_of_the_outlook_directory.yml
email_servers_sending_high_volume_traffic_to_hosts.yml
email_servers_sending_high_volume_traffic_to_hosts.yml
monitor_email_for_brand_abuse.yml
monitor_email_for_brand_abuse.yml
no_windows_updates_in_a_time_frame.yml
no_windows_updates_in_a_time_frame.yml
okta_authentication_failed_during_mfa_challenge.yml
okta_authentication_failed_during_mfa_challenge.yml
okta_idp_lifecycle_modifications.yml
okta_idp_lifecycle_modifications.yml
okta_mfa_exhaustion_hunt.yml
okta_mfa_exhaustion_hunt.yml
okta_mismatch_between_source_and_response_for_verify_push_request.yml
okta_mismatch_between_source_and_response_for_verify_push_request.yml
okta_multi_factor_authentication_disabled.yml
okta_multi_factor_authentication_disabled.yml
okta_multiple_accounts_locked_out.yml
okta_multiple_accounts_locked_out.yml
okta_multiple_failed_mfa_requests_for_user.yml
okta_multiple_failed_mfa_requests_for_user.yml
okta_multiple_failed_requests_to_access_applications.yml
okta_multiple_failed_requests_to_access_applications.yml
okta_multiple_users_failing_to_authenticate_from_ip.yml
okta_multiple_users_failing_to_authenticate_from_ip.yml
okta_new_api_token_created.yml
okta_new_api_token_created.yml
okta_new_device_enrolled_on_account.yml
okta_new_device_enrolled_on_account.yml
okta_phishing_detection_with_fastpass_origin_check.yml
okta_phishing_detection_with_fastpass_origin_check.yml
okta_risk_threshold_exceeded.yml
okta_risk_threshold_exceeded.yml
okta_successful_single_factor_authentication.yml
okta_successful_single_factor_authentication.yml
okta_suspicious_activity_reported.yml
okta_suspicious_activity_reported.yml
okta_suspicious_use_of_a_session_cookie.yml
okta_suspicious_use_of_a_session_cookie.yml
okta_threatinsight_threat_detected.yml
okta_threatinsight_threat_detected.yml
okta_unauthorized_access_to_application.yml
okta_unauthorized_access_to_application.yml
okta_user_logins_from_multiple_cities.yml
okta_user_logins_from_multiple_cities.yml
path_traversal_spl_injection.yml
path_traversal_spl_injection.yml
persistent_xss_in_rapiddiag_through_user_interface_views.yml
persistent_xss_in_rapiddiag_through_user_interface_views.yml
pingid_mismatch_auth_source_and_verification_response.yml
pingid_mismatch_auth_source_and_verification_response.yml
pingid_multiple_failed_mfa_requests_for_user.yml
pingid_multiple_failed_mfa_requests_for_user.yml
pingid_new_mfa_method_after_credential_reset.yml
pingid_new_mfa_method_after_credential_reset.yml
pingid_new_mfa_method_registered_for_user.yml
pingid_new_mfa_method_registered_for_user.yml
splunk_absolute_path_traversal_using_runshellscript.yml
splunk_absolute_path_traversal_using_runshellscript.yml
splunk_account_discovery_drilldown_dashboard_disclosure.yml
splunk_account_discovery_drilldown_dashboard_disclosure.yml
splunk_app_for_lookup_file_editing_rce_via_user_xslt.yml
splunk_app_for_lookup_file_editing_rce_via_user_xslt.yml
splunk_authentication_token_exposure_in_debug_log.yml
splunk_authentication_token_exposure_in_debug_log.yml
splunk_code_injection_via_custom_dashboard_leading_to_rce.yml
splunk_code_injection_via_custom_dashboard_leading_to_rce.yml
splunk_command_and_scripting_interpreter_delete_usage.yml
splunk_command_and_scripting_interpreter_delete_usage.yml
splunk_command_and_scripting_interpreter_risky_commands.yml
splunk_command_and_scripting_interpreter_risky_commands.yml
splunk_command_and_scripting_interpreter_risky_spl_mltk.yml
splunk_command_and_scripting_interpreter_risky_spl_mltk.yml
splunk_csrf_in_the_ssg_kvstore_client_endpoint.yml
splunk_csrf_in_the_ssg_kvstore_client_endpoint.yml
splunk_data_exfiltration_from_analytics_workspace_using_sid_query.yml
splunk_data_exfiltration_from_analytics_workspace_using_sid_query.yml
splunk_digital_certificates_infrastructure_version.yml
splunk_digital_certificates_infrastructure_version.yml
splunk_digital_certificates_lack_of_encryption.yml
splunk_digital_certificates_lack_of_encryption.yml
splunk_dos_using_malformed_saml_request.yml
splunk_dos_using_malformed_saml_request.yml
splunk_dos_via_dump_spl_command.yml
splunk_dos_via_dump_spl_command.yml
splunk_dos_via_malformed_s2s_request.yml
splunk_dos_via_malformed_s2s_request.yml
splunk_dos_via_post_request_datamodel_endpoint.yml
splunk_dos_via_post_request_datamodel_endpoint.yml
splunk_dos_via_printf_search_function.yml
splunk_dos_via_printf_search_function.yml
splunk_edit_user_privilege_escalation.yml
splunk_edit_user_privilege_escalation.yml
splunk_endpoint_denial_of_service_dos_zip_bomb.yml
splunk_endpoint_denial_of_service_dos_zip_bomb.yml
splunk_enterprise_kv_store_incorrect_authorization.yml
splunk_enterprise_kv_store_incorrect_authorization.yml
splunk_enterprise_windows_deserialization_file_partition.yml
splunk_enterprise_windows_deserialization_file_partition.yml
splunk_es_dos_investigations_manager_via_investigation_creation.yml
splunk_es_dos_investigations_manager_via_investigation_creation.yml
splunk_es_dos_through_investigation_attachments.yml
splunk_es_dos_through_investigation_attachments.yml
splunk_http_response_splitting_via_rest_spl_command.yml
splunk_http_response_splitting_via_rest_spl_command.yml
splunk_improperly_formatted_parameter_crashes_splunkd.yml
splunk_improperly_formatted_parameter_crashes_splunkd.yml
splunk_information_disclosure_in_splunk_add_on_builder.yml
splunk_information_disclosure_in_splunk_add_on_builder.yml
splunk_information_disclosure_on_account_login.yml
splunk_information_disclosure_on_account_login.yml
splunk_list_all_nonstandard_admin_accounts.yml
splunk_list_all_nonstandard_admin_accounts.yml
splunk_low_privilege_user_can_view_hashed_splunk_password.yml
splunk_low_privilege_user_can_view_hashed_splunk_password.yml
splunk_path_traversal_in_splunk_app_for_lookup_file_edit.yml
splunk_path_traversal_in_splunk_app_for_lookup_file_edit.yml
splunk_persistent_xss_via_url_validation_bypass_w_dashboard.yml
splunk_persistent_xss_via_url_validation_bypass_w_dashboard.yml
splunk_process_injection_forwarder_bundle_downloads.yml
splunk_process_injection_forwarder_bundle_downloads.yml
splunk_protocol_impersonation_weak_encryption_configuration.yml
splunk_protocol_impersonation_weak_encryption_configuration.yml
splunk_protocol_impersonation_weak_encryption_selfsigned.yml
splunk_protocol_impersonation_weak_encryption_selfsigned.yml
splunk_protocol_impersonation_weak_encryption_simplerequest.yml
splunk_protocol_impersonation_weak_encryption_simplerequest.yml
splunk_rbac_bypass_on_indexing_preview_rest_endpoint.yml
splunk_rbac_bypass_on_indexing_preview_rest_endpoint.yml
splunk_rce_pdfgen_render.yml
splunk_rce_pdfgen_render.yml
splunk_rce_via_external_lookup_copybuckets.yml
splunk_rce_via_external_lookup_copybuckets.yml
splunk_rce_via_serialized_session_payload.yml
splunk_rce_via_serialized_session_payload.yml
splunk_rce_via_splunk_secure_gateway__splunk_mobile_alerts_feature.yml
splunk_rce_via_splunk_secure_gateway__splunk_mobile_alerts_feature.yml
splunk_rce_via_user_xslt.yml
splunk_rce_via_user_xslt.yml
splunk_reflected_xss_in_the_templates_lists_radio.yml
splunk_reflected_xss_in_the_templates_lists_radio.yml
splunk_reflected_xss_on_app_search_table_endpoint.yml
splunk_reflected_xss_on_app_search_table_endpoint.yml
splunk_risky_command_abuse_disclosed_february_2023.yml
splunk_risky_command_abuse_disclosed_february_2023.yml
splunk_stored_xss_conf_web_settings_on_premises.yml
splunk_stored_xss_conf_web_settings_on_premises.yml
splunk_stored_xss_via_data_model_objectname_field.yml
splunk_stored_xss_via_data_model_objectname_field.yml
splunk_stored_xss_via_specially_crafted_bulletin_message.yml
splunk_stored_xss_via_specially_crafted_bulletin_message.yml
splunk_unauthenticated_dos_via_null_pointer_references.yml
splunk_unauthenticated_dos_via_null_pointer_references.yml
splunk_unauthenticated_log_injection_web_service_log.yml
splunk_unauthenticated_log_injection_web_service_log.yml
splunk_unauthenticated_path_traversal_modules_messaging.yml
splunk_unauthenticated_path_traversal_modules_messaging.yml
splunk_unauthorized_experimental_items_creation.yml
splunk_unauthorized_experimental_items_creation.yml
splunk_unauthorized_notification_input_by_user.yml
splunk_unauthorized_notification_input_by_user.yml
splunk_unnecessary_file_extensions_allowed_by_lookup_table_uploads.yml
splunk_unnecessary_file_extensions_allowed_by_lookup_table_uploads.yml
splunk_user_enumeration_attempt.yml
splunk_user_enumeration_attempt.yml
splunk_xss_in_highlighted_json_events.yml
splunk_xss_in_highlighted_json_events.yml
splunk_xss_in_monitoring_console.yml
splunk_xss_in_monitoring_console.yml
splunk_xss_in_save_table_dialog_header_in_search_page.yml
splunk_xss_in_save_table_dialog_header_in_search_page.yml
splunk_xss_privilege_escalation_via_custom_urls_in_dashboard.yml
splunk_xss_privilege_escalation_via_custom_urls_in_dashboard.yml
splunk_xss_via_external_urls_in_dashboards_ssrf.yml
splunk_xss_via_external_urls_in_dashboards_ssrf.yml
splunk_xss_via_view.yml
splunk_xss_via_view.yml
suspicious_email_attachment_extensions.yml
suspicious_email_attachment_extensions.yml
suspicious_java_classes.yml
suspicious_java_classes.yml
web_servers_executing_suspicious_processes.yml
web_servers_executing_suspicious_processes.yml
windows_ad_add_self_to_group.yml
windows_ad_add_self_to_group.yml
windows_increase_in_group_or_object_modification_activity.yml
windows_increase_in_group_or_object_modification_activity.yml
View all files
You can’t perform that action at this time.