Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
/
attack_data
Public
Notifications
You must be signed in to change notification settings
Fork
150
Star
822
Code
Issues
0
Pull requests
4
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Actions: splunk/attack_data
Actions
All workflows
Workflows
mirror-archive-on-merge-to-default-branch
mirror-archive-on-merge-to-default-branch
Replay Changed Datasets to Splunk
Replay Changed Datasets to Splunk
Required Status Checks
Required Status Checks
Validate Attack Data
Validate Attack Data
Validate Attack Data on PR
Validate Attack Data on PR
Validate Changed Attack Data Files
Validate Changed Attack Data Files
Validate LFS Files
Validate LFS Files
Show more workflows...
Management
Caches
Validate Attack Data
Validate Attack Data
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
validate.yml
will be ignored since log searching is not yet available
390 workflow runs
390 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Add AWS CloudWatch Logs high volume retrieval dataset (#1225)
Validate Attack Data
#394:
Commit
cdfc97d
pushed by
nasbench
27s
master
master
27s
View workflow file
add resetnightmare log (#1223)
Validate Attack Data
#393:
Commit
ce8935a
pushed by
nasbench
25s
master
master
25s
View workflow file
Add AWS CloudWatch Logs high volume retrieval dataset
Validate Attack Data
#392:
Pull request
#1225
opened by
themaryjo
34s
aws-cloudwatch-logs-high-volume-retrieval
aws-cloudwatch-logs-high-volume-retrieval
34s
View #1225
View workflow file
T1114 o365_suspect_email_actions: add Graph message trace fixture
Validate Attack Data
#391:
Pull request
#1224
opened by
sbaker-gre
Action required
sbaker-gre:o365-graph-messagetrace-fixture
sbaker-gre:o365-graph-messagetrace-fixture
Action required
View #1224
View workflow file
add resetnightmare log
Validate Attack Data
#390:
Pull request
#1223
synchronize by
RavenTait
34s
resetnightmare
resetnightmare
34s
View #1223
View workflow file
add resetnightmare log
Validate Attack Data
#389:
Pull request
#1223
opened by
RavenTait
24s
resetnightmare
resetnightmare
24s
View #1223
View workflow file
Attack Data for Renamed Binary Detections (#1222)
Validate Attack Data
#388:
Commit
7a5e9d5
pushed by
nasbench
32s
master
master
32s
View workflow file
Attack Data for Renamed Binary Detections
Validate Attack Data
#387:
Pull request
#1222
synchronize by
onurmerdogan
29s
renamed_binary_telemetry
renamed_binary_telemetry
29s
View #1222
View workflow file
Attack Data for Renamed Binary Detections
Validate Attack Data
#386:
Pull request
#1222
opened by
onurmerdogan
32s
renamed_binary_telemetry
renamed_binary_telemetry
32s
View #1222
View workflow file
macOS Osascript Executing JavaScript Code With Objective-C Data (#1219)
Validate Attack Data
#385:
Commit
6bc794b
pushed by
nasbench
32s
master
master
32s
View workflow file
macOS Osascript Executing JavaScript Code With Objective-C Data
Validate Attack Data
#384:
Pull request
#1219
synchronize by
rviskova13
29s
macOS_osascript_JavaScript_command_execution_Objective-C
macOS_osascript_JavaScript_command_execution_Objective-C
29s
View #1219
View workflow file
macOS Osascript Long Lived Connection to Remote Host Data (#1220)
Validate Attack Data
#383:
Commit
f6c486a
pushed by
nasbench
30s
master
master
30s
View workflow file
macOS Osascript Spawning Shell Process Data (#1218)
Validate Attack Data
#382:
Commit
92fedf9
pushed by
nasbench
32s
master
master
32s
View workflow file
macOS Osascript Long Lived Connection to Remote Host Data
Validate Attack Data
#381:
Pull request
#1220
opened by
rviskova13
32s
macOS_osascript_long_lived_connection_to_remote_host
macOS_osascript_long_lived_connection_to_remote_host
32s
View #1220
View workflow file
Adding Dataset for Multiple Detections targeting ClickFix Campaigns (…
Validate Attack Data
#380:
Commit
db9624b
pushed by
nasbench
28s
master
master
28s
View workflow file
macOS Osascript Executing JavaScript Code With Objective-C Data
Validate Attack Data
#379:
Pull request
#1219
opened by
rviskova13
33s
macOS_osascript_JavaScript_command_execution_Objective-C
macOS_osascript_JavaScript_command_execution_Objective-C
33s
View #1219
View workflow file
macOS Osascript Spawning Shell Process Data
Validate Attack Data
#378:
Pull request
#1218
opened by
rviskova13
36s
macOS_osascript_spawning_shell_process_data
macOS_osascript_spawning_shell_process_data
36s
View #1218
View workflow file
Adding Dataset for Multiple Detections targeting ClickFix Campaigns
Validate Attack Data
#377:
Pull request
#1217
opened by
onurmerdogan
32s
clickfix_campaign_data
clickfix_campaign_data
32s
View #1217
View workflow file
Adding Dataset for Windows Content Copied from Browser was Executed (…
Validate Attack Data
#376:
Commit
be19806
pushed by
nasbench
26s
master
master
26s
View workflow file
Adding Dataset for Windows Content Copied from Browser was Executed
Validate Attack Data
#375:
Pull request
#1216
opened by
onurmerdogan
31s
windows_browser_copy_paste
windows_browser_copy_paste
31s
View #1216
View workflow file
macOS Osascript Do Shell Script Data (#1215)
Validate Attack Data
#374:
Commit
a068918
pushed by
nasbench
30s
master
master
30s
View workflow file
macOS Osascript Do Shell Script Data
Validate Attack Data
#373:
Pull request
#1215
synchronize by
rviskova13
27s
macOS_osascript_do_shell_script_data
macOS_osascript_do_shell_script_data
27s
View #1215
View workflow file
Add macos_browser_spawned_script_external_network_connection attack d…
Validate Attack Data
#372:
Commit
7c542f6
pushed by
nasbench
26s
master
master
26s
View workflow file
Add macOS browser spawned script external network connection dataset
Validate Attack Data
#371:
Pull request
#1214
opened by
themaryjo
32s
add-macos_browser_spawned_script_ext_net_conn
add-macos_browser_spawned_script_ext_net_conn
32s
View #1214
View workflow file
update lolbas logs
Validate Attack Data
#370:
Commit
63a72bd
pushed by
nasbench
30s
master
master
30s
View workflow file
Previous
1
2
3
4
5
…
15
16
Next
You can’t perform that action at this time.