security_content/lookups/csv/malware_user_agents.yml at develop · splunk/security_content · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
name: malware_user_agents
id: 3a1a501c-d65f-4a6c-95a3-3d2b9a8c43c3
version: 3
creation_date: '2026-01-06'
modification_date: '2026-08-02'
author: Raven Tait, Splunk
lookup_type: csv
description: A list of user agents used with known malware.
match_type:
    - WILDCARD(malware_user_agent)
min_matches: 1
case_sensitive_match: true