Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
security_content
Repository navigation
Code
Issues
7
(7)
Pull requests
13
(13)
Discussions
Actions
Projects
Wiki
Security and quality
Insights
More
items
Files
Expand file tree
develop
Breadcrumbs
security_content
/
macros
/
deprecated
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
macros
/
deprecated
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
audit_searches.yml
audit_searches.yml
aws_config.yml
aws_config.yml
aws_description.yml
aws_description.yml
aws_securityhub_firehose.yml
aws_securityhub_firehose.yml
azuread.yml
azuread.yml
brand_abuse_dns.yml
brand_abuse_dns.yml
brand_abuse_email.yml
brand_abuse_email.yml
brand_abuse_web.yml
brand_abuse_web.yml
bro_ssl_json.yml
bro_ssl_json.yml
circleci.yml
circleci.yml
cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml
cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml
cloudwatch_eks.yml
cloudwatch_eks.yml
cloudwatch_vpc.yml
cloudwatch_vpc.yml
dynamic_dns_providers.yml
dynamic_dns_providers.yml
dynamic_dns_web_traffic.yml
dynamic_dns_web_traffic.yml
evilginx_phishlets_0365.yml
evilginx_phishlets_0365.yml
evilginx_phishlets_amazon.yml
evilginx_phishlets_amazon.yml
evilginx_phishlets_aws.yml
evilginx_phishlets_aws.yml
evilginx_phishlets_facebook.yml
evilginx_phishlets_facebook.yml
evilginx_phishlets_github.yml
evilginx_phishlets_github.yml
evilginx_phishlets_google.yml
evilginx_phishlets_google.yml
evilginx_phishlets_outlook.yml
evilginx_phishlets_outlook.yml
filter_rare_process_allow_list.yml
filter_rare_process_allow_list.yml
github.yml
github.yml
github_known_users.yml
github_known_users.yml
google_gcp_pubnet_message.yml
google_gcp_pubnet_message.yml
is_net_windows_file_macro.yml
is_net_windows_file_macro.yml
is_nirsoft_software_macro.yml
is_nirsoft_software_macro.yml
is_windows_system_file_macro.yml
is_windows_system_file_macro.yml
kubernetes_azure.yml
kubernetes_azure.yml
linux_auditd_normalized_execve_process.yml
linux_auditd_normalized_execve_process.yml
linux_auditd_normalized_proctitle_process.yml
linux_auditd_normalized_proctitle_process.yml
netbackup.yml
netbackup.yml
path_traversal_spl_injection.yml
path_traversal_spl_injection.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml
previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml
previously_seen_cloud_regions_search_window_begin_offset.yml
previously_seen_cloud_regions_search_window_begin_offset.yml
process_copy.yml
process_copy.yml
process_csc.yml
process_csc.yml
process_cscript.yml
process_cscript.yml
process_curl.yml
process_curl.yml
process_diskshadow.yml
process_diskshadow.yml
process_dllhost.yml
process_dllhost.yml
process_dsquery.yml
process_dsquery.yml
process_dxdiag.yml
process_dxdiag.yml
process_esentutl.yml
process_esentutl.yml
process_fodhelper.yml
process_fodhelper.yml
process_gpupdate.yml
process_gpupdate.yml
process_microsoftworkflowcompiler.yml
process_microsoftworkflowcompiler.yml
process_nltest.yml
process_nltest.yml
process_ntdsutil.yml
process_ntdsutil.yml
process_ping.yml
process_ping.yml
process_procdump.yml
process_procdump.yml
process_psexec.yml
process_psexec.yml
process_rclone.yml
process_rclone.yml
process_regasm.yml
process_regasm.yml
process_regedit.yml
process_regedit.yml
process_regsvcs.yml
process_regsvcs.yml
process_route.yml
process_route.yml
process_runas.yml
process_runas.yml
process_schtasks.yml
process_schtasks.yml
process_sdelete.yml
process_sdelete.yml
process_sqlcmd.yml
process_sqlcmd.yml
process_verclsid.yml
process_verclsid.yml
process_vssadmin.yml
process_vssadmin.yml
process_wbadmin.yml
process_wbadmin.yml
process_wermgr.yml
process_wermgr.yml
prohibited_apps_launching_cmd_macro.yml
prohibited_apps_launching_cmd_macro.yml
prohibited_softwares.yml
prohibited_softwares.yml
ransomware_extensions.yml
ransomware_extensions.yml
ransomware_notes.yml
ransomware_notes.yml
s3_accesslogs.yml
s3_accesslogs.yml
splunk_crash_log.yml
splunk_crash_log.yml
splunk_python.yml
splunk_python.yml
splunkd_investigation_rest_handler.yml
splunkd_investigation_rest_handler.yml
splunkd_web.yml
splunkd_web.yml
splunkd_webs.yml
splunkd_webs.yml
splunkd_webx.yml
splunkd_webx.yml
suspicious_email_attachments.yml
suspicious_email_attachments.yml
system_network_configuration_discovery_tools.yml
system_network_configuration_discovery_tools.yml
uncommon_processes.yml
uncommon_processes.yml
View all files
You can’t perform that action at this time.