splunk / security_content

Splunk Security Content

Home Page:https://research.splunk.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Experimental Detection "Exchange PowerShell Abuse via SSRF" fails due to a syntax error

ccl0utier opened this issue · comments

The rule has an extra unnecessary pipe character at the beginning of its search causing an error.

image

Good catch! Thank you!

Fixed! Thank you