Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
security_content
Repository navigation
Code
Issues
7
(7)
Pull requests
15
(15)
Discussions
Actions
Projects
Wiki
Security and quality
Insights
More
items
Files
Expand file tree
develop
Breadcrumbs
security_content
/
detections
/
web
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
detections
/
web
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
access_to_vulnerable_ivanti_connect_secure_bookmark_endpoint.yml
access_to_vulnerable_ivanti_connect_secure_bookmark_endpoint.yml
adobe_coldfusion_access_control_bypass.yml
adobe_coldfusion_access_control_bypass.yml
adobe_coldfusion_unauthenticated_arbitrary_file_read.yml
adobe_coldfusion_unauthenticated_arbitrary_file_read.yml
cisco_ios_xe_implant_access.yml
cisco_ios_xe_implant_access.yml
citrix_adc_and_gateway_citrixbleed_2_memory_disclosure.yml
citrix_adc_and_gateway_citrixbleed_2_memory_disclosure.yml
citrix_adc_and_gateway_unauthorized_data_disclosure.yml
citrix_adc_and_gateway_unauthorized_data_disclosure.yml
citrix_adc_exploitation_cve_2023_3519.yml
citrix_adc_exploitation_cve_2023_3519.yml
citrix_sharefile_exploitation_cve_2023_24489.yml
citrix_sharefile_exploitation_cve_2023_24489.yml
confluence_cve_2023_22515_trigger_vulnerability.yml
confluence_cve_2023_22515_trigger_vulnerability.yml
confluence_data_center_and_server_privilege_escalation.yml
confluence_data_center_and_server_privilege_escalation.yml
confluence_pre_auth_rce_via_ognl_injection_cve_2023_22527.yml
confluence_pre_auth_rce_via_ognl_injection_cve_2023_22527.yml
confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml
confluence_unauthenticated_remote_code_execution_cve_2022_26134.yml
connectwise_screenconnect_authentication_bypass.yml
connectwise_screenconnect_authentication_bypass.yml
crushftp_authentication_bypass_exploitation.yml
crushftp_authentication_bypass_exploitation.yml
crushftp_max_simultaneous_users_from_ip.yml
crushftp_max_simultaneous_users_from_ip.yml
detect_attackers_scanning_for_vulnerable_jboss_servers.yml
detect_attackers_scanning_for_vulnerable_jboss_servers.yml
detect_malicious_requests_to_exploit_jboss_servers.yml
detect_malicious_requests_to_exploit_jboss_servers.yml
detect_remote_access_software_usage_url.yml
detect_remote_access_software_usage_url.yml
detect_web_access_to_decommissioned_s3_bucket.yml
detect_web_access_to_decommissioned_s3_bucket.yml
exploit_public_facing_application_via_apache_commons_text.yml
exploit_public_facing_application_via_apache_commons_text.yml
exploit_public_facing_fortinet_fortinac_cve_2022_39952.yml
exploit_public_facing_fortinet_fortinac_cve_2022_39952.yml
f5_tmui_authentication_bypass.yml
f5_tmui_authentication_bypass.yml
fortinet_appliance_auth_bypass.yml
fortinet_appliance_auth_bypass.yml
high_volume_of_bytes_out_to_url.yml
high_volume_of_bytes_out_to_url.yml
http_duplicated_header.yml
http_duplicated_header.yml
http_possible_request_smuggling.yml
http_possible_request_smuggling.yml
http_rapid_post_with_mixed_status_codes.yml
http_rapid_post_with_mixed_status_codes.yml
http_request_to_reserved_name_on_iis_server.yml
http_request_to_reserved_name_on_iis_server.yml
http_scripting_tool_user_agent.yml
http_scripting_tool_user_agent.yml
hunting_for_log4shell.yml
hunting_for_log4shell.yml
ivanti_connect_secure_command_injection_attempts.yml
ivanti_connect_secure_command_injection_attempts.yml
ivanti_connect_secure_ssrf_in_saml_component.yml
ivanti_connect_secure_ssrf_in_saml_component.yml
ivanti_connect_secure_system_information_access_via_auth_bypass.yml
ivanti_connect_secure_system_information_access_via_auth_bypass.yml
ivanti_epm_sql_injection_remote_code_execution.yml
ivanti_epm_sql_injection_remote_code_execution.yml
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35078.yml
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35078.yml
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35082.yml
ivanti_epmm_remote_unauthenticated_api_access_cve_2023_35082.yml
java_class_file_download_by_java_user_agent.yml
java_class_file_download_by_java_user_agent.yml
jenkins_arbitrary_file_read_cve_2024_23897.yml
jenkins_arbitrary_file_read_cve_2024_23897.yml
jetbrains_teamcity_authentication_bypass_cve_2024_27198.yml
jetbrains_teamcity_authentication_bypass_cve_2024_27198.yml
jetbrains_teamcity_authentication_bypass_suricata_cve_2024_27198.yml
jetbrains_teamcity_authentication_bypass_suricata_cve_2024_27198.yml
jetbrains_teamcity_limited_auth_bypass_suricata_cve_2024_27199.yml
jetbrains_teamcity_limited_auth_bypass_suricata_cve_2024_27199.yml
jetbrains_teamcity_rce_attempt.yml
jetbrains_teamcity_rce_attempt.yml
juniper_networks_remote_code_execution_exploit_detection.yml
juniper_networks_remote_code_execution_exploit_detection.yml
log4shell_jndi_payload_injection_attempt.yml
log4shell_jndi_payload_injection_attempt.yml
log4shell_jndi_payload_injection_with_outbound_connection.yml
log4shell_jndi_payload_injection_with_outbound_connection.yml
microsoft_sharepoint_server_elevation_of_privilege.yml
microsoft_sharepoint_server_elevation_of_privilege.yml
monitor_web_traffic_for_brand_abuse.yml
monitor_web_traffic_for_brand_abuse.yml
multiple_archive_files_http_post_traffic.yml
multiple_archive_files_http_post_traffic.yml
nginx_connectwise_screenconnect_authentication_bypass.yml
nginx_connectwise_screenconnect_authentication_bypass.yml
papercut_ng_remote_web_access_attempt.yml
papercut_ng_remote_web_access_attempt.yml
plain_http_post_exfiltrated_data.yml
plain_http_post_exfiltrated_data.yml
proxyshell_proxynotshell_behavior_detected.yml
proxyshell_proxynotshell_behavior_detected.yml
sap_netweaver_visual_composer_exploitation_attempt.yml
sap_netweaver_visual_composer_exploitation_attempt.yml
spring4shell_payload_url_request.yml
spring4shell_payload_url_request.yml
sql_injection_with_long_urls.yml
sql_injection_with_long_urls.yml
supernova_webshell.yml
supernova_webshell.yml
tomcat_session_deserialization_attempt.yml
tomcat_session_deserialization_attempt.yml
tomcat_session_file_upload_attempt.yml
tomcat_session_file_upload_attempt.yml
unusual_http_request_method.yml
unusual_http_request_method.yml
unusually_long_content_type_length.yml
unusually_long_content_type_length.yml
vmware_aria_operations_exploit_attempt.yml
vmware_aria_operations_exploit_attempt.yml
vmware_server_side_template_injection_hunt.yml
vmware_server_side_template_injection_hunt.yml
vmware_workspace_one_freemarker_server_side_template_injection.yml
vmware_workspace_one_freemarker_server_side_template_injection.yml
web_jsp_request_via_url.yml
web_jsp_request_via_url.yml
web_remote_shellservlet_access.yml
web_remote_shellservlet_access.yml
web_spring4shell_http_request_class_module.yml
web_spring4shell_http_request_class_module.yml
web_spring_cloud_function_functionrouter.yml
web_spring_cloud_function_functionrouter.yml
windows_exchange_autodiscover_ssrf_abuse.yml
windows_exchange_autodiscover_ssrf_abuse.yml
windows_iis_server_pswa_console_access.yml
windows_iis_server_pswa_console_access.yml
windows_sharepoint_spinstall0_get_request.yml
windows_sharepoint_spinstall0_get_request.yml
windows_sharepoint_toolpane_endpoint_exploitation_attempt.yml
windows_sharepoint_toolpane_endpoint_exploitation_attempt.yml
wordpress_bricks_builder_plugin_rce.yml
wordpress_bricks_builder_plugin_rce.yml
ws_ftp_remote_code_execution.yml
ws_ftp_remote_code_execution.yml
zscaler_adware_activities_threat_blocked.yml
zscaler_adware_activities_threat_blocked.yml
zscaler_behavior_analysis_threat_blocked.yml
zscaler_behavior_analysis_threat_blocked.yml
zscaler_cryptominer_downloaded_threat_blocked.yml
zscaler_cryptominer_downloaded_threat_blocked.yml
zscaler_employment_search_web_activity.yml
zscaler_employment_search_web_activity.yml
zscaler_exploit_threat_blocked.yml
zscaler_exploit_threat_blocked.yml
zscaler_legal_liability_threat_blocked.yml
zscaler_legal_liability_threat_blocked.yml
zscaler_malware_activity_threat_blocked.yml
zscaler_malware_activity_threat_blocked.yml
zscaler_phishing_activity_threat_blocked.yml
zscaler_phishing_activity_threat_blocked.yml
zscaler_potentially_abused_file_download.yml
zscaler_potentially_abused_file_download.yml
zscaler_privacy_risk_destinations_threat_blocked.yml
zscaler_privacy_risk_destinations_threat_blocked.yml
zscaler_scam_destinations_threat_blocked.yml
zscaler_scam_destinations_threat_blocked.yml
zscaler_virus_download_threat_blocked.yml
zscaler_virus_download_threat_blocked.yml
View all files
You can’t perform that action at this time.