Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
PoeBlu
security-content
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
security-content
detections
on
develop
User selector
All users
Datepicker
All time
Commit history
Commits on Aug 4, 2020
Merge pull request #590 from splunk/nocaps
Show description for 6e595aa
patel-bhavin
authored
6e595aa
View commit details
Copy full SHA for 6e595aa
View code at this point
Browse repository at this point
Commits on Jul 29, 2020
Merge branch 'develop' into TR038-create-local-admin-accounts-using-net-exe
Patrick Bareiss
committed
9d7a8c2
View commit details
Copy full SHA for 9d7a8c2
View code at this point
Browse repository at this point
Commits on Jul 28, 2020
[TR-038] update mitre id for detection. add test for net exe specific behavior
jzsplunk
committed
3f93f64
View commit details
Copy full SHA for 3f93f64
View code at this point
Browse repository at this point
anothererrorfixed
rosplk
committed
a4e1a40
View commit details
Copy full SHA for a4e1a40
View code at this point
Browse repository at this point
Merge branch 'develop' into nocaps
rosplk
authored
d597c6f
View commit details
Copy full SHA for d597c6f
View code at this point
Browse repository at this point
fixedsearch
rosplk
committed
182b055
View commit details
Copy full SHA for 182b055
View code at this point
Browse repository at this point
detection tested
Patrick Bareiss
committed
074b782
View commit details
Copy full SHA for 074b782
View code at this point
Browse repository at this point
merged
Patrick Bareiss
committed
004eeb2
View commit details
Copy full SHA for 004eeb2
View code at this point
Browse repository at this point
tested detection
Patrick Bareiss
committed
8db3eda
View commit details
Copy full SHA for 8db3eda
View code at this point
Browse repository at this point
seeifitworks
rosplk
committed
f53f148
View commit details
Copy full SHA for f53f148
View code at this point
Browse repository at this point
fixedsearches
rosplk
committed
9b3a81d
View commit details
Copy full SHA for 9b3a81d
View code at this point
Browse repository at this point
successful tested
Patrick Bareiss
committed
f74a0fe
View commit details
Copy full SHA for f74a0fe
View code at this point
Browse repository at this point
awslm5searches
rosplk
committed
ba11f8f
View commit details
Copy full SHA for ba11f8f
View code at this point
Browse repository at this point
Commits on Jul 27, 2020
awslm3rd
rosplk
committed
1ac5d3f
View commit details
Copy full SHA for 1ac5d3f
View code at this point
Browse repository at this point
2searchstsassumerole
rosplk
committed
9f2c49f
View commit details
Copy full SHA for 9f2c49f
View code at this point
Browse repository at this point
newawslmsearches
rosplk
committed
3584bb4
View commit details
Copy full SHA for 3584bb4
View code at this point
Browse repository at this point
Commits on Jul 24, 2020
Update smb_traffic_spike.yml
josehelps
authored
025a161
View commit details
Copy full SHA for 025a161
View code at this point
Browse repository at this point
Commits on Jul 22, 2020
converted detections to subtechniques
Patrick Bareiss
committed
a38b71f
View commit details
Copy full SHA for a38b71f
View code at this point
Browse repository at this point
converted detections to subtechniques
Patrick Bareiss
committed
e7966e7
View commit details
Copy full SHA for e7966e7
View code at this point
Browse repository at this point
converted detections to subtechniques
Patrick Bareiss
committed
bd0e7ca
View commit details
Copy full SHA for bd0e7ca
View code at this point
Browse repository at this point
Commits on Jul 20, 2020
Update gcp_kubernetes_cluster_pod_scan_detection.yml
Show description for bb906c7
patel-bhavin
authored
bb906c7
View commit details
Copy full SHA for bb906c7
View code at this point
Browse repository at this point
Commits on Jul 18, 2020
newgcpk8podsearch
rosplk
committed
ef98461
View commit details
Copy full SHA for ef98461
View code at this point
Browse repository at this point
Commits on Jul 15, 2020
updating spl and FP
patel-bhavin
committed
73507de
View commit details
Copy full SHA for 73507de
View code at this point
Browse repository at this point
Commits on Jul 14, 2020
adding ffilter, sigh
patel-bhavin
committed
ea717a6
View commit details
Copy full SHA for ea717a6
View code at this point
Browse repository at this point
Commits on Jul 13, 2020
rename file
patel-bhavin
committed
3b1e639
View commit details
Copy full SHA for 3b1e639
View code at this point
Browse repository at this point
Update kubernetes_gcp_detect_most_active_service_accounts_by_pod.yml
patel-bhavin
authored
da9ecd7
View commit details
Copy full SHA for da9ecd7
View code at this point
Browse repository at this point
Update kubernetes_gcp_detect_RBAC_authorizations_by_account.yml
Show description for a8c021a
patel-bhavin
authored
a8c021a
View commit details
Copy full SHA for a8c021a
View code at this point
Browse repository at this point
Merge branch 'gcpk8plussearches' of github.com:splunk/security-content into gcpk8plussearches
rosplk
committed
7103260
View commit details
Copy full SHA for 7103260
View code at this point
Browse repository at this point
fixbackticks
rosplk
committed
6dbc996
View commit details
Copy full SHA for 6dbc996
View code at this point
Browse repository at this point
Merge branch 'develop' into gcpk8plussearches
patel-bhavin
authored
62ab2b8
View commit details
Copy full SHA for 62ab2b8
View code at this point
Browse repository at this point
fixednamesmacros
rosplk
committed
57fbe00
View commit details
Copy full SHA for 57fbe00
View code at this point
Browse repository at this point
fixedsrctypewithmacro
rosplk
committed
7fe2b89
View commit details
Copy full SHA for 7fe2b89
View code at this point
Browse repository at this point
fixedsourcetypeissue
rosplk
committed
b504edb
View commit details
Copy full SHA for b504edb
View code at this point
Browse repository at this point
Update processes_launching_netsh.yml
Show description for 1861966
patel-bhavin
authored
1861966
View commit details
Copy full SHA for 1861966
View code at this point
Browse repository at this point
Commits on Jul 12, 2020
k8sgcpkubectlcallssarch
rosplk
committed
f0fe477
View commit details
Copy full SHA for f0fe477
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.