security_content/lookups at develop · tapishj-splunk/security_content

History

Name		Name	Last commit message	Last commit date
parent directory ..
3cx_ioc_domains.csv		3cx_ioc_domains.csv
3cx_ioc_domains.yml		3cx_ioc_domains.yml
__mlspl_detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.mlmodel		__mlspl_detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.mlmodel
__mlspl_detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml		__mlspl_detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml
__mlspl_detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.mlmodel		__mlspl_detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.mlmodel
__mlspl_detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml		__mlspl_detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml
__mlspl_detect_suspicious_processnames_using_pretrained_model_in_dsdl.mlmodel		__mlspl_detect_suspicious_processnames_using_pretrained_model_in_dsdl.mlmodel
__mlspl_detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml		__mlspl_detect_suspicious_processnames_using_pretrained_model_in_dsdl.yml
__mlspl_pretrained_dga_model_dsdl.mlmodel		__mlspl_pretrained_dga_model_dsdl.mlmodel
__mlspl_pretrained_dga_model_dsdl.yml		__mlspl_pretrained_dga_model_dsdl.yml
__mlspl_unusual_commandline_detection.mlmodel		__mlspl_unusual_commandline_detection.mlmodel
__mlspl_unusual_commandline_detection.yml		__mlspl_unusual_commandline_detection.yml
ace_access_rights_lookup.csv		ace_access_rights_lookup.csv
ace_access_rights_lookup.yml		ace_access_rights_lookup.yml
ace_flag_lookup.csv		ace_flag_lookup.csv
ace_flag_lookup.yml		ace_flag_lookup.yml
ace_type_lookup.csv		ace_type_lookup.csv
ace_type_lookup.yml		ace_type_lookup.yml
advanced_audit_policy_guids.csv		advanced_audit_policy_guids.csv
advanced_audit_policy_guids.yml		advanced_audit_policy_guids.yml
api_call_by_user_baseline.yml		api_call_by_user_baseline.yml
applockereventcodes.csv		applockereventcodes.csv
applockereventcodes.yml		applockereventcodes.yml
asr_rules.csv		asr_rules.csv
asr_rules.yml		asr_rules.yml
attacker_tools.csv		attacker_tools.csv
attacker_tools.yml		attacker_tools.yml
aws_service_accounts.csv		aws_service_accounts.csv
aws_service_accounts.yml		aws_service_accounts.yml
baseline_blocked_outbound_connections.csv		baseline_blocked_outbound_connections.csv
baseline_blocked_outbound_connections.yml		baseline_blocked_outbound_connections.yml
brand_monitoring.csv		brand_monitoring.csv
brandmonitoring_lookup.yml		brandmonitoring_lookup.yml
browser_app_list.csv		browser_app_list.csv
browser_app_list.yml		browser_app_list.yml
builtin_groups_lookup.csv		builtin_groups_lookup.csv
builtin_groups_lookup.yml		builtin_groups_lookup.yml
char_conversion_matrix.csv		char_conversion_matrix.csv
char_conversion_matrix.yml		char_conversion_matrix.yml
cloud_instances_enough_data.yml		cloud_instances_enough_data.yml
discovered_dns_records.csv		discovered_dns_records.csv
discovered_dns_records.yml		discovered_dns_records.yml
domain_admins.csv		domain_admins.csv
domain_admins.yml		domain_admins.yml
domains.csv		domains.csv
domains.yml		domains.yml
dynamic_dns_providers_default.csv		dynamic_dns_providers_default.csv
dynamic_dns_providers_default.yml		dynamic_dns_providers_default.yml
dynamic_dns_providers_local.csv		dynamic_dns_providers_local.csv
dynamic_dns_providers_local.yml		dynamic_dns_providers_local.yml
hijacklibs.csv		hijacklibs.csv
hijacklibs.yml		hijacklibs.yml
hijacklibs_loaded.csv		hijacklibs_loaded.csv
hijacklibs_loaded.yml		hijacklibs_loaded.yml
images_to_repository.csv		images_to_repository.csv
images_to_repository.yml		images_to_repository.yml
is_net_windows_file.yml		is_net_windows_file.yml
is_net_windows_file20231221.csv		is_net_windows_file20231221.csv
is_nirsoft_software.yml		is_nirsoft_software.yml
is_nirsoft_software20231221.csv		is_nirsoft_software20231221.csv
is_suspicious_file_extension_lookup.csv		is_suspicious_file_extension_lookup.csv
is_suspicious_file_extension_lookup.yml		is_suspicious_file_extension_lookup.yml
is_windows_system_file.yml		is_windows_system_file.yml
is_windows_system_file20231221.csv		is_windows_system_file20231221.csv
k8s_container_network_io_baseline.yml		k8s_container_network_io_baseline.yml
k8s_container_network_io_ratio_baseline.yml		k8s_container_network_io_ratio_baseline.yml
k8s_process_resource_baseline.yml		k8s_process_resource_baseline.yml
k8s_process_resource_ratio_baseline.yml		k8s_process_resource_ratio_baseline.yml
legit_domains.csv		legit_domains.csv
legit_domains.yml		legit_domains.yml
linux_tool_discovery_process.csv		linux_tool_discovery_process.csv
linux_tool_discovery_process.yml		linux_tool_discovery_process.yml
local_file_inclusion_paths.csv		local_file_inclusion_paths.csv
local_file_inclusion_paths.yml		local_file_inclusion_paths.yml
lolbas_file_path.yml		lolbas_file_path.yml
lolbas_file_path20240725.csv		lolbas_file_path20240725.csv
loldrivers.csv		loldrivers.csv
loldrivers.yml		loldrivers.yml
lookup_rare_process_allow_list_default.yml		lookup_rare_process_allow_list_default.yml
lookup_rare_process_allow_list_local.yml		lookup_rare_process_allow_list_local.yml
lookup_uncommon_processes_default.yml		lookup_uncommon_processes_default.yml
lookup_uncommon_processes_local.yml		lookup_uncommon_processes_local.yml
mandatory_job_for_workflow.csv		mandatory_job_for_workflow.csv
mandatory_job_for_workflow.yml		mandatory_job_for_workflow.yml
mandatory_step_for_job.csv		mandatory_step_for_job.csv
mandatory_step_for_job.yml		mandatory_step_for_job.yml
msad_guid_lookup.csv		msad_guid_lookup.csv
msad_guid_lookup.yml		msad_guid_lookup.yml
network_acl_activity_baseline.csv		network_acl_activity_baseline.csv
network_acl_activity_baseline.yml		network_acl_activity_baseline.yml
previously_seen_api_calls_from_user_roles.yml		previously_seen_api_calls_from_user_roles.yml
previously_seen_aws_cross_account_activity.yml		previously_seen_aws_cross_account_activity.yml
previously_seen_aws_regions.yml		previously_seen_aws_regions.yml
previously_seen_cloud_api_calls_per_user_role.yml		previously_seen_cloud_api_calls_per_user_role.yml
previously_seen_cloud_compute_creations_by_user.yml		previously_seen_cloud_compute_creations_by_user.yml
previously_seen_cloud_compute_images.yml		previously_seen_cloud_compute_images.yml
previously_seen_cloud_compute_instance_types.yml		previously_seen_cloud_compute_instance_types.yml
previously_seen_cloud_instance_modifications_by_user.yml		previously_seen_cloud_instance_modifications_by_user.yml
previously_seen_cloud_provisioning_activity_sources.yml		previously_seen_cloud_provisioning_activity_sources.yml
previously_seen_cloud_regions.yml		previously_seen_cloud_regions.yml

FilesExpand file tree

lookups

Directory actions

More options

Directory actions

More options

Latest commit

History

lookups

Folders and files

parent directory