Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
pyth0n1c
/
security_content
Public
forked from
splunk/security_content
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
1
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Files
Expand file tree
develop
Breadcrumbs
security_content
/
baselines
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
baselines
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
deprecated
deprecated
baseline_of_blocked_outbound_traffic_from_aws.yml
baseline_of_blocked_outbound_traffic_from_aws.yml
baseline_of_kubernetes_container_network_io.yml
baseline_of_kubernetes_container_network_io.yml
baseline_of_kubernetes_container_network_io_ratio.yml
baseline_of_kubernetes_container_network_io_ratio.yml
baseline_of_kubernetes_process_resource.yml
baseline_of_kubernetes_process_resource.yml
baseline_of_kubernetes_process_resource_ratio.yml
baseline_of_kubernetes_process_resource_ratio.yml
baseline_of_network_acl_activity_by_arn.yml
baseline_of_network_acl_activity_by_arn.yml
baseline_of_open_s3_bucket_decommissioning.yml
baseline_of_open_s3_bucket_decommissioning.yml
baseline_of_s3_bucket_deletion_activity_by_arn.yml
baseline_of_s3_bucket_deletion_activity_by_arn.yml
baseline_of_security_group_activity_by_arn.yml
baseline_of_security_group_activity_by_arn.yml
count_of_assets_by_category.yml
count_of_assets_by_category.yml
count_of_unique_ips_connecting_to_ports.yml
count_of_unique_ips_connecting_to_ports.yml
create_a_list_of_approved_aws_service_accounts.yml
create_a_list_of_approved_aws_service_accounts.yml
discover_dns_records.yml
discover_dns_records.yml
dnstwist_domain_names.yml
dnstwist_domain_names.yml
identify_systems_creating_remote_desktop_traffic.yml
identify_systems_creating_remote_desktop_traffic.yml
identify_systems_receiving_remote_desktop_traffic.yml
identify_systems_receiving_remote_desktop_traffic.yml
identify_systems_using_remote_desktop.yml
identify_systems_using_remote_desktop.yml
previously_seen_cloud_api_calls_per_user_role___initial.yml
previously_seen_cloud_api_calls_per_user_role___initial.yml
previously_seen_cloud_api_calls_per_user_role___update.yml
previously_seen_cloud_api_calls_per_user_role___update.yml
previously_seen_cloud_compute_creations_by_user___initial.yml
previously_seen_cloud_compute_creations_by_user___initial.yml
previously_seen_cloud_compute_creations_by_user___update.yml
previously_seen_cloud_compute_creations_by_user___update.yml
previously_seen_cloud_compute_images___initial.yml
previously_seen_cloud_compute_images___initial.yml
previously_seen_cloud_compute_images___update.yml
previously_seen_cloud_compute_images___update.yml
previously_seen_cloud_compute_instance_types___initial.yml
previously_seen_cloud_compute_instance_types___initial.yml
previously_seen_cloud_compute_instance_types___update.yml
previously_seen_cloud_compute_instance_types___update.yml
previously_seen_cloud_instance_modifications_by_user___initial.yml
previously_seen_cloud_instance_modifications_by_user___initial.yml
previously_seen_cloud_instance_modifications_by_user___update.yml
previously_seen_cloud_instance_modifications_by_user___update.yml
previously_seen_cloud_provisioning_activity_sources___initial.yml
previously_seen_cloud_provisioning_activity_sources___initial.yml
previously_seen_cloud_provisioning_activity_sources___update.yml
previously_seen_cloud_provisioning_activity_sources___update.yml
previously_seen_cloud_regions___initial.yml
previously_seen_cloud_regions___initial.yml
previously_seen_cloud_regions___update.yml
previously_seen_cloud_regions___update.yml
previously_seen_command_line_arguments.yml
previously_seen_command_line_arguments.yml
previously_seen_running_windows_services___initial.yml
previously_seen_running_windows_services___initial.yml
previously_seen_running_windows_services___update.yml
previously_seen_running_windows_services___update.yml
previously_seen_s3_bucket_access_by_remote_ip.yml
previously_seen_s3_bucket_access_by_remote_ip.yml
previously_seen_users_in_cloudtrail___initial.yml
previously_seen_users_in_cloudtrail___initial.yml
previously_seen_users_in_cloudtrail___update.yml
previously_seen_users_in_cloudtrail___update.yml
previously_seen_zoom_child_processes___initial.yml
previously_seen_zoom_child_processes___initial.yml
previously_seen_zoom_child_processes___update.yml
previously_seen_zoom_child_processes___update.yml
windows_updates_install_failures.yml
windows_updates_install_failures.yml
windows_updates_install_successes.yml
windows_updates_install_successes.yml
View all files
You can’t perform that action at this time.