Adding new detections

splunk · Jul 2, 2024 · 3791f25 · 3791f25
1 parent 2181287
commit 3791f25
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/detections/application/detect_distributed_password_spray_attempts.yml b/detections/application/detect_distributed_password_spray_attempts.yml
@@ -51,6 +51,10 @@ tags:
     type: Endpoint
     role:
     - Attacker
+  - name: sourcetype
+    type: Other
+    role:
+    - Victim
   product:
   - Splunk Enterprise
   - Splunk Enterprise Security

diff --git a/detections/application/detect_password_spray_attempts.yml b/detections/application/detect_password_spray_attempts.yml
@@ -49,6 +49,10 @@ tags:
     type: Endpoint
     role:
     - Attacker
+  - name: sourcetype
+    type: Other
+    role:
+    - Victim
   product:
   - Splunk Enterprise
   - Splunk Enterprise Security