splunk/security_content v4.21.0

on GitHub

Release notes for ESCUv4.21.0

New Analytics Story

Updated Analytics Story

• Splunk Vulnerabilities

New Analytics

• Splunk Enterprise KV Store Incorrect Authorization
• Splunk Enterprise Windows Deserialization File Partition

Updated Analytics

• Splunk risky Command Abuse disclosed february 2023

Other Updates

• Updated splunk_risky_command lookup with a new splunk_risky_command_20240122.csv file