21495 matches found
phantom-playbooks
Questo è il repository Corelight per i playbook della community sviluppati per Splunk Phantom. Questi forniscono alcuni esempi per aiutarti a creare i tuoi playbook. Corelight Investigate DNS Alert Questo playbook prende una ricerca salvata o un meccanismo di alert per DNS da Splunk e recupera lo...
CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-
CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNUNG : Dieses Skript dient nur zu Bildungs- und Testzwecken in autorisierten Umgebungen. Die unbefugte Nutzung ist verboten und kann illegal sein. 📋 Beschreibung...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
patch-CVE-2026-28001
Correção: CVE-2026-28001 Detalhes da Vulnerabilidade CVE : CVE-2026-28001 Produto : Splunk Enterprise Descrição : Execução remota de código na análise de SPL Severidade : Crítica Status da Correção: IMPLANTADO...
CVE-2024-36991
CVE-2024-36991 Vulnerabilità di path traversal in Splunk Enterprise su versioni Windows inferiori a 9.2.2, 9.1.5 e 9.0.10 che consente la lettura di file sensibili...
CVE-2023-32707
CVE-2023-32707 Un POC exploit migliorato basato sulla CVE segnalata su exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Panoramica Questo script consente di sfruttare una vulnerabilità in Splunk 9.0.5, portando all'acquisizione dell'account amministratore...
SOC-Analyst-Portfolio
🛡️ Allen Ace Analista SOC | Threat Hunter | Ingegnere delle Detection Rileva • Investiga • Rispondi • Difendi Benvenuti Questo portfolio documenta il mio percorso pratico nella cybersecurity attraverso investigazioni reali, ambienti lab aziendali, detection engineering, digital forensics e securit...
HTSOC
HTSOC — Laboratorio integrato di Security Operations Center HTSOC è un sistema SOC lab integrato, costruito per raccogliere log, rilevare eventi, generare alert, coordinare le indagini e inviare i risultati all'analista. CVE-2024-4577 è un use case di detection all'interno del sistema, non l'inte...
Splunk Enterprise’s vulnerabilities are exploited through Splunk
Splunk has identified several vulnerabilities in Splunk Enterprise, particularly in versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. These vulnerabilities include: - Inadequate enforcement of authentication and authorization checks in REST APIs, allowing unauthorized users to access sensitiv...
CVE-2026-76355
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76354
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:18+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-24 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtts42qkba2u...
CVE-2026-76353
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:16+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76352
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:14+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtow75jsbr24...
CVE-2026-76351
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:11+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 00:00:08+00:00| published-proof-of-concept| Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEqeSW1iUUAENsR3qsz5w 2026-08-22...
CVE-2026-76350
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:09+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtoxuro5jj24...
CVE-2026-76349
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:07+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76348
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:04+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...