security_content/docs/_data/navigation.yml at develop · d3tect/security_content · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
main:
  - title: "Detections"
    url: /detections/
  - title: "Analytic Stories"
    url: /stories/
  - title: "Playbooks"
    url: /playbooks/
  - title: "Blog"
    url: https://www.splunk.com/en_us/blog/author/secmrkt-research.html
  - title: "About"
    url: https://www.splunk.com/en_us/cyber-security/threat-research.html
detections:
  - title: "Tactic"
    children:
      - title: Collection
        url: /detections/collection/
      - title: Command And Control
        url: /detections/command_and_control/
      - title: Credential Access
        url: /detections/credential_access/
      - title: Defense Evasion
        url: /detections/defense_evasion/
      - title: Discovery
        url: /detections/discovery/
      - title: Execution
        url: /detections/execution/
      - title: Exfiltration
        url: /detections/exfiltration/
      - title: Impact
        url: /detections/impact/
      - title: Initial Access
        url: /detections/initial_access/
      - title: Lateral Movement
        url: /detections/lateral_movement/
      - title: Persistence
        url: /detections/persistence/
      - title: Privilege Escalation
        url: /detections/privilege_escalation/
      - title: Reconnaissance
        url: /detections/reconnaissance/
      - title: Resource Development
        url: /detections/resource_development/
  - title: "Datamodel"
    children:
      - title: Authentication
        url: /detections/authentication/
      - title: Change
        url: /detections/change/
      - title: Change_Analysis
        url: /detections/change_analysis/
      - title: Email
        url: /detections/email/
      - title: Endpoint
        url: /detections/endpoint/
      - title: Network_Resolution
        url: /detections/network_resolution/
      - title: Network_Sessions
        url: /detections/network_sessions/
      - title: Network_Traffic
        url: /detections/network_traffic/
      - title: Risk
        url: /detections/risk/
      - title: UEBA
        url: /detections/ueba/
      - title: Updates
        url: /detections/updates/
      - title: Vulnerabilities
        url: /detections/vulnerabilities/
      - title: Web
        url: /detections/web/
  - title: "Product"
    children:
      - title: "Splunk Enterprise"
        url: /tags/#splunk-enterprise
      - title: "Splunk Cloud"
        url: /tags/#splunk-cloud
      - title: "Splunk Enterprise Security"
        url: /tags/#splunk-enterprise-security
      - title: "Splunk Behavioral Analytics"
        url: /tags/#splunk-behavioral-analytics
stories:
  - title: "Use Case"
    children:
      - title: Abuse
        url: /stories/abuse/
      - title: Account Compromise
        url: /stories/account_compromise/
      - title: Adversary Tactics
        url: /stories/adversary_tactics/
      - title: Best Practices
        url: /stories/best_practices/
      - title: Cloud Security
        url: /stories/cloud_security/
      - title: Data Destruction
        url: /stories/data_destruction/
      - title: Lateral Movement
        url: /stories/lateral_movement/
      - title: Malware
        url: /stories/malware/
      - title: Privilege Escalation
        url: /stories/privilege_escalation/
      - title: Ransomware
        url: /stories/ransomware/
      - title: Unauthorized Software
        url: /stories/unauthorized_software/
      - title: Vulnerability
        url: /stories/vulnerability/
playbooks:
  - title: "Type"
    children:
      - title: "Response"
        url: /tags/#response/
      - title: "Investigation"
        url: /tags/#investigation/