Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
/
attack_data
Public
Notifications
You must be signed in to change notification settings
Fork
150
Star
823
Code
Issues
0
Pull requests
5
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Branch selector
master
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 29, 2026
Aws ec2 multiple ssh public keys uploaded (#1228)
Show description for a084a04
themaryjo
authored
a084a04
View commit details
Copy full SHA for a084a04
Browse repository at this point
T1114 o365_suspect_email_actions: add Graph message trace fixture (#1224)
sbaker-gre
authored
a5e20cf
View commit details
Copy full SHA for a5e20cf
Browse repository at this point
kerberloss data (#1227)
RavenTait
authored
344360c
View commit details
Copy full SHA for 344360c
Browse repository at this point
Commits on Sep 28, 2026
update yaml
nasbench
committed
52c9d8a
View commit details
Copy full SHA for 52c9d8a
Browse repository at this point
Commits on Sep 24, 2026
Enforce Git LFS for CSV datasets (#1226)
nasbench
authored
b4573ed
View commit details
Copy full SHA for b4573ed
Browse repository at this point
Add AWS CloudWatch Logs high volume retrieval dataset (#1225)
Show description for cdfc97d
themaryjo
authored
cdfc97d
View commit details
Copy full SHA for cdfc97d
Browse repository at this point
add resetnightmare log (#1223)
RavenTait
authored
ce8935a
View commit details
Copy full SHA for ce8935a
Browse repository at this point
Commits on Sep 23, 2026
Attack Data for Renamed Binary Detections (#1222)
onurmerdogan
authored
7a5e9d5
View commit details
Copy full SHA for 7a5e9d5
Browse repository at this point
Commits on Sep 21, 2026
Update wevtutil cleared log dataset
nasbench
committed
67512e2
View commit details
Copy full SHA for 67512e2
Browse repository at this point
Update wevtutil cleared log (#1221)
nasbench
authored
13f48aa
View commit details
Copy full SHA for 13f48aa
Browse repository at this point
Commits on Sep 18, 2026
macOS Osascript Executing JavaScript Code With Objective-C Data (#1219)
Show description for 6bc794b
rviskova13
authored
6bc794b
View commit details
Copy full SHA for 6bc794b
Browse repository at this point
macOS Osascript Long Lived Connection to Remote Host Data (#1220)
rviskova13
authored
f6c486a
View commit details
Copy full SHA for f6c486a
Browse repository at this point
macOS Osascript Spawning Shell Process Data (#1218)
rviskova13
authored
92fedf9
View commit details
Copy full SHA for 92fedf9
Browse repository at this point
Commits on Sep 17, 2026
Adding Dataset for Multiple Detections targeting ClickFix Campaigns (#1217)
onurmerdogan
authored
db9624b
View commit details
Copy full SHA for db9624b
Browse repository at this point
Commits on Sep 7, 2026
Adding Dataset for Windows Content Copied from Browser was Executed (#1216)
onurmerdogan
authored
be19806
View commit details
Copy full SHA for be19806
Browse repository at this point
Commits on Sep 6, 2026
another small fix
nasbench
committed
e2f64db
View commit details
Copy full SHA for e2f64db
Browse repository at this point
fix log
nasbench
committed
6f2072a
View commit details
Copy full SHA for 6f2072a
Browse repository at this point
Commits on Sep 3, 2026
macOS Osascript Do Shell Script Data (#1215)
Show description for a068918
rviskova13
authored
a068918
View commit details
Copy full SHA for a068918
Browse repository at this point
Add macos_browser_spawned_script_external_network_connection attack data (#1214)
themaryjo
authored
7c542f6
View commit details
Copy full SHA for 7c542f6
Browse repository at this point
Commits on Aug 31, 2026
update lolbas logs
nasbench
committed
63a72bd
View commit details
Copy full SHA for 63a72bd
Browse repository at this point
Updating Osascript Telemetry with Correct Set of Events (#1213)
onurmerdogan
authored
98c1d85
View commit details
Copy full SHA for 98c1d85
Browse repository at this point
Commits on Aug 28, 2026
Merge pull request #1212 from splunk/add-t1059-socat-datasets
Show description for df13360
onurmerdogan
authored
df13360
View commit details
Copy full SHA for df13360
Browse repository at this point
Apply batched suggestions from code review
Show description for 1326220
onurmerdogan
authored
1326220
View commit details
Copy full SHA for 1326220
Browse repository at this point
Fix socat dataset UUID
themaryjo
committed
9afa507
View commit details
Copy full SHA for 9afa507
Browse repository at this point
Add socat T1059 socat datasets
themaryjo
committed
fe946f3
View commit details
Copy full SHA for fe946f3
Browse repository at this point
Commits on Aug 27, 2026
Add osascript dataset for T1059.00 (#1211)
Show description for 5e77c31
rviskova13
and
nasbench
authored
5e77c31
View commit details
Copy full SHA for 5e77c31
Browse repository at this point
Commits on Aug 26, 2026
Merge pull request #1210 from splunk/sccm_cve_2026_47301
Show description for 304e5e8
RavenTait
authored
304e5e8
View commit details
Copy full SHA for 304e5e8
Browse repository at this point
More SCCM data
RavenTait
committed
d9db845
View commit details
Copy full SHA for d9db845
Browse repository at this point
Commits on Aug 25, 2026
Merge pull request #1209 from splunk/sccm_cve_2026_47301
Show description for 1abaf01
RavenTait
authored
1abaf01
View commit details
Copy full SHA for 1abaf01
Browse repository at this point
SCCM CVE Data
RavenTait
committed
7958319
View commit details
Copy full SHA for 7958319
Browse repository at this point
Commits on Aug 23, 2026
add edr sil (#1208)
nasbench
authored
108cb81
View commit details
Copy full SHA for 108cb81
Browse repository at this point
Commits on Aug 19, 2026
update paths
nasbench
committed
6db2eed
View commit details
Copy full SHA for 6db2eed
Browse repository at this point
Commits on Aug 17, 2026
Attack Data for ShieldBreak Detections (#1207)
onurmerdogan
authored
800ef65
View commit details
Copy full SHA for 800ef65
Browse repository at this point
Commits on Aug 10, 2026
Merge pull request #1204 from splunk/add-lfs-check
Show description for 4145e8b
pyth0n1c
authored
4145e8b
View commit details
Copy full SHA for 4145e8b
Browse repository at this point
Delete datasets/example.log
nasbench
authored
c9f7831
View commit details
Copy full SHA for c9f7831
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
