Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
splunk
attack_data
Repository navigation
Code
Issues
Pull requests
5
(5)
Actions
Projects
Security and quality
Insights
More
items
Actions: splunk/attack_data
Actions
All workflows
Workflows
mirror-archive-on-merge-to-default-branch
mirror-archive-on-merge-to-default-branch
Replay Changed Datasets to Splunk
Replay Changed Datasets to Splunk
Validate Attack Data
Validate Attack Data
Validate LFS Files
Validate LFS Files
Show more workflows...
Management
Caches
Validate Attack Data
Validate Attack Data
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
validate.yml
will be ignored since log searching is not yet available
372 workflow runs
372 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Assortment of zeek logs
Validate Attack Data
#413:
Pull request
#1238
opened by
RavenTait
31s
zeek_logs
zeek_logs
31s
View #1238
View workflow file
Merge pull request #1237 from splunk/braodo_2026
Validate Attack Data
#412:
Commit
4389fa7
pushed by
tccontre
32s
master
master
32s
View workflow file
braodo_2026
Validate Attack Data
#411:
Pull request
#1237
opened by
tccontre
33s
braodo_2026
braodo_2026
33s
View #1237
View workflow file
Update NirSoft tooling logs (#1236)
Validate Attack Data
#410:
Commit
1ba0ded
pushed by
nasbench
36s
master
master
36s
View workflow file
Update NirSoft tooling logs
Validate Attack Data
#409:
Pull request
#1236
opened by
nasbench
1m 8s
add-nirsoft-file-bundle-logs
add-nirsoft-file-bundle-logs
1m 8s
View #1236
View workflow file
Add WMI subscription logs (#1235)
Validate Attack Data
#408:
Commit
7ced743
pushed by
nasbench
33s
master
master
33s
View workflow file
Add WMI subscription logs
Validate Attack Data
#407:
Pull request
#1235
opened by
nasbench
32s
add-t1546.003-wmi-activity-logs
add-t1546.003-wmi-activity-logs
32s
View #1235
View workflow file
Merge pull request #1231 from splunk/shieldcrash_telemetry
Validate Attack Data
#406:
Commit
a28608b
pushed by
onurmerdogan
31s
master
master
31s
View workflow file
Adding Datasets for ShieldCrash and Renamed Binary Detections
Validate Attack Data
#405:
Pull request
#1231
opened by
onurmerdogan
28s
shieldcrash_telemetry
shieldcrash_telemetry
28s
View #1231
View workflow file
Add AWS Secrets Manager batch retrieval attack data (#1229)
Validate Attack Data
#404:
Commit
d192cc5
pushed by
nasbench
27s
master
master
27s
View workflow file
T1621 PingID: add UPN and multiple-reset regression fixture
Validate Attack Data
#403:
Pull request
#1230
synchronize by
sbaker-gre
26s
sbaker-gre:pingid-credential-reset-upn-fixture
sbaker-gre:pingid-credential-reset-upn-fixture
26s
View #1230
View workflow file
T1621 PingID: add UPN and multiple-reset regression fixture
Validate Attack Data
#402:
Pull request
#1230
opened by
sbaker-gre
26s
sbaker-gre:pingid-credential-reset-upn-fixture
sbaker-gre:pingid-credential-reset-upn-fixture
26s
View #1230
View workflow file
Add AWS Secrets Manager batch retrieval attack data
Validate Attack Data
#401:
Pull request
#1229
opened by
themaryjo
29s
dataset/aws-anomalous-secrets-manager-batch-retrieval
dataset/aws-anomalous-secrets-manager-batch-retrieval
29s
View #1229
View workflow file
Aws ec2 multiple ssh public keys uploaded (#1228)
Validate Attack Data
#400:
Commit
a084a04
pushed by
nasbench
28s
master
master
28s
View workflow file
Aws ec2 multiple ssh public keys uploaded
Validate Attack Data
#399:
Pull request
#1228
opened by
themaryjo
26s
aws-ec2-multiple-ssh-public-keys-uploaded
aws-ec2-multiple-ssh-public-keys-uploaded
26s
View #1228
View workflow file
T1114 o365_suspect_email_actions: add Graph message trace fixture (#1…
Validate Attack Data
#398:
Commit
a5e20cf
pushed by
nasbench
32s
master
master
32s
View workflow file
kerberloss data (#1227)
Validate Attack Data
#397:
Commit
344360c
pushed by
nasbench
27s
master
master
27s
View workflow file
kerberloss data
Validate Attack Data
#396:
Pull request
#1227
opened by
RavenTait
30s
kerberloss
kerberloss
30s
View #1227
View workflow file
update yaml
Validate Attack Data
#395:
Commit
52c9d8a
pushed by
nasbench
26s
master
master
26s
View workflow file
Add AWS CloudWatch Logs high volume retrieval dataset (#1225)
Validate Attack Data
#394:
Commit
cdfc97d
pushed by
nasbench
27s
master
master
27s
View workflow file
add resetnightmare log (#1223)
Validate Attack Data
#393:
Commit
ce8935a
pushed by
nasbench
25s
master
master
25s
View workflow file
Add AWS CloudWatch Logs high volume retrieval dataset
Validate Attack Data
#392:
Pull request
#1225
opened by
themaryjo
34s
aws-cloudwatch-logs-high-volume-retrieval
aws-cloudwatch-logs-high-volume-retrieval
34s
View #1225
View workflow file
T1114 o365_suspect_email_actions: add Graph message trace fixture
Validate Attack Data
#391:
Pull request
#1224
opened by
sbaker-gre
34s
sbaker-gre:o365-graph-messagetrace-fixture
sbaker-gre:o365-graph-messagetrace-fixture
34s
View #1224
View workflow file
add resetnightmare log
Validate Attack Data
#390:
Pull request
#1223
synchronize by
RavenTait
34s
resetnightmare
resetnightmare
34s
View #1223
View workflow file
add resetnightmare log
Validate Attack Data
#389:
Pull request
#1223
opened by
RavenTait
24s
resetnightmare
resetnightmare
24s
View #1223
View workflow file
Previous
1
2
3
4
5
…
14
15
Next
You can’t perform that action at this time.