Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
AndreiBanaru
/
security_content
Public
forked from
splunk/security_content
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Files
Expand file tree
develop
Breadcrumbs
security_content
/
stories
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
stories
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
deprecated
deprecated
0bj3ctivity_stealer.yml
0bj3ctivity_stealer.yml
3cx_supply_chain_attack.yml
3cx_supply_chain_attack.yml
abnormal_kubernetes_behavior_using_splunk_infrastructure_monitoring.yml
abnormal_kubernetes_behavior_using_splunk_infrastructure_monitoring.yml
acidpour.yml
acidpour.yml
acidrain.yml
acidrain.yml
active_directory_discovery.yml
active_directory_discovery.yml
active_directory_kerberos_attacks.yml
active_directory_kerberos_attacks.yml
active_directory_lateral_movement.yml
active_directory_lateral_movement.yml
active_directory_password_spraying.yml
active_directory_password_spraying.yml
active_directory_privilege_escalation.yml
active_directory_privilege_escalation.yml
adobe_coldfusion_arbitrary_code_execution_cve_2023_29298_cve_2023_26360.yml
adobe_coldfusion_arbitrary_code_execution_cve_2023_29298_cve_2023_26360.yml
agenttesla.yml
agenttesla.yml
amadey.yml
amadey.yml
amos_stealer.yml
amos_stealer.yml
apache_struts_vulnerability.yml
apache_struts_vulnerability.yml
apache_tomcat_session_deserialization_attacks.yml
apache_tomcat_session_deserialization_attacks.yml
apt29_diplomatic_deceptions_with_wineloader.yml
apt29_diplomatic_deceptions_with_wineloader.yml
apt37_rustonotto_and_fadestealer.yml
apt37_rustonotto_and_fadestealer.yml
arcanedoor.yml
arcanedoor.yml
asset_tracking.yml
asset_tracking.yml
asyncrat.yml
asyncrat.yml
atlassian_confluence_server_and_data_center_cve_2022_26134.yml
atlassian_confluence_server_and_data_center_cve_2022_26134.yml
awfulshred.yml
awfulshred.yml
aws_bedrock_security.yml
aws_bedrock_security.yml
aws_defense_evasion.yml
aws_defense_evasion.yml
aws_iam_privilege_escalation.yml
aws_iam_privilege_escalation.yml
aws_identity_and_access_management_account_takeover.yml
aws_identity_and_access_management_account_takeover.yml
aws_network_acl_activity.yml
aws_network_acl_activity.yml
aws_s3_bucket_security_monitoring.yml
aws_s3_bucket_security_monitoring.yml
aws_security_hub_alerts.yml
aws_security_hub_alerts.yml
aws_user_monitoring.yml
aws_user_monitoring.yml
azorult.yml
azorult.yml
azure_active_directory_account_takeover.yml
azure_active_directory_account_takeover.yml
azure_active_directory_persistence.yml
azure_active_directory_persistence.yml
azure_active_directory_privilege_escalation.yml
azure_active_directory_privilege_escalation.yml
backdoor_pingpong.yml
backdoor_pingpong.yml
baron_samedit_cve_2021_3156.yml
baron_samedit_cve_2021_3156.yml
bishopfox_sliver_adversary_emulation_framework.yml
bishopfox_sliver_adversary_emulation_framework.yml
bits_jobs.yml
bits_jobs.yml
black_basta_ransomware.yml
black_basta_ransomware.yml
blackbyte_ransomware.yml
blackbyte_ransomware.yml
blacklotus_campaign.yml
blacklotus_campaign.yml
blackmatter_ransomware.yml
blackmatter_ransomware.yml
blacksuit_ransomware.yml
blacksuit_ransomware.yml
brand_monitoring.yml
brand_monitoring.yml
braodo_stealer.yml
braodo_stealer.yml
browser_hijacking.yml
browser_hijacking.yml
brute_ratel_c4.yml
brute_ratel_c4.yml
cactus_ransomware.yml
cactus_ransomware.yml
caddy_wiper.yml
caddy_wiper.yml
castle_rat.yml
castle_rat.yml
chaos_ransomware.yml
chaos_ransomware.yml
china_nexus_threat_activity.yml
china_nexus_threat_activity.yml
cisa_aa22_257a.yml
cisa_aa22_257a.yml
cisa_aa22_264a.yml
cisa_aa22_264a.yml
cisa_aa22_277a.yml
cisa_aa22_277a.yml
cisa_aa22_320a.yml
cisa_aa22_320a.yml
cisa_aa23_347a.yml
cisa_aa23_347a.yml
cisa_aa24_241a.yml
cisa_aa24_241a.yml
cisco_duo_suspicious_activity.yml
cisco_duo_suspicious_activity.yml
cisco_ios_xe_software_web_management_user_interface_vulnerability.yml
cisco_ios_xe_software_web_management_user_interface_vulnerability.yml
cisco_isovalent_suspicious_activity.yml
cisco_isovalent_suspicious_activity.yml
cisco_network_visibility_module_analytics.yml
cisco_network_visibility_module_analytics.yml
cisco_secure_firewall_threat_defense_analytics.yml
cisco_secure_firewall_threat_defense_analytics.yml
cisco_smart_install_remote_code_execution_cve_2018_0171.yml
cisco_smart_install_remote_code_execution_cve_2018_0171.yml
citrix_netscaler_adc_and_netscaler_gateway_cve_2023_4966.yml
citrix_netscaler_adc_and_netscaler_gateway_cve_2023_4966.yml
citrix_netscaler_adc_and_netscaler_gateway_cve_2025_5777.yml
citrix_netscaler_adc_and_netscaler_gateway_cve_2025_5777.yml
citrix_netscaler_adc_cve_2023_3519.yml
citrix_netscaler_adc_cve_2023_3519.yml
citrix_sharefile_rce_cve_2023_24489.yml
citrix_sharefile_rce_cve_2023_24489.yml
cleo_file_transfer_software.yml
cleo_file_transfer_software.yml
clop_ransomware.yml
clop_ransomware.yml
cloud_cryptomining.yml
cloud_cryptomining.yml
cloud_federated_credential_abuse.yml
cloud_federated_credential_abuse.yml
cobalt_strike.yml
cobalt_strike.yml
coldroot_macos_rat.yml
coldroot_macos_rat.yml
collection_and_staging.yml
collection_and_staging.yml
command_and_control.yml
command_and_control.yml
compromised_linux_host.yml
compromised_linux_host.yml
compromised_user_account.yml
compromised_user_account.yml
compromised_windows_host.yml
compromised_windows_host.yml
confluence_data_center_and_confluence_server_vulnerabilities.yml
confluence_data_center_and_confluence_server_vulnerabilities.yml
connectwise_screenconnect_vulnerabilities.yml
connectwise_screenconnect_vulnerabilities.yml
credential_dumping.yml
credential_dumping.yml
critical_alerts.yml
critical_alerts.yml
crushftp_vulnerabilities.yml
crushftp_vulnerabilities.yml
crypto_stealer.yml
crypto_stealer.yml
cve_2022_40684_fortinet_appliance_auth_bypass.yml
cve_2022_40684_fortinet_appliance_auth_bypass.yml
cve_2023_21716_word_rtf_heap_corruption.yml
cve_2023_21716_word_rtf_heap_corruption.yml
cve_2023_22515_privilege_escalation_vulnerability_confluence_data_center_and_server.yml
cve_2023_22515_privilege_escalation_vulnerability_confluence_data_center_and_server.yml
cve_2023_23397_outlook_elevation_of_privilege.yml
cve_2023_23397_outlook_elevation_of_privilege.yml
cve_2023_36884_office_and_windows_html_rce_vulnerability.yml
cve_2023_36884_office_and_windows_html_rce_vulnerability.yml
cyclops_blink.yml
cyclops_blink.yml
darkcrystal_rat.yml
darkcrystal_rat.yml
darkgate_malware.yml
darkgate_malware.yml
darkside_ransomware.yml
darkside_ransomware.yml
data_destruction.yml
data_destruction.yml
data_exfiltration.yml
data_exfiltration.yml
data_protection.yml
data_protection.yml
defense_evasion_or_unauthorized_access_via_sddl_tampering.yml
defense_evasion_or_unauthorized_access_via_sddl_tampering.yml
View all files
You can’t perform that action at this time.