Splunk_security_content/lookups/malware_user_agents.yml at develop · kanava888/Splunk_security_content · GitHub

1
2
3
4
5
6
7
8
9
10
11
name: malware_user_agents
date: 2025-12-16
version: 1
id: 3a1a501c-d65f-4a6c-95a3-3d2b9a8c43c3
author: Raven Tait, Splunk
lookup_type: csv
description: A list of user agents used with known malware.
match_type:
- WILDCARD(malware_user_agents)
min_matches: 1
case_sensitive_match: true