splunk/security_content
Splunk Security Content
Is splunk/security_content beginner-friendly?
In the last 30 days, splunk/security_content merged 31 of 46 pull requests from outside contributors, and its maintainers usually reply within 1 day. 3 beginner-friendly issues are open now.
- Stars
- 1.7k
- Forks
- 507
- Open beginner issues
- 3
- Indexed issues
- 31
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 35
- Dominant language
- Python
- License
- Apache-2.0
- Last GitHub push
- Nov 3, 2026
- Latest indexed
- Sep 20, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- No beginner labels indexed
How to contribute to splunk/security_content
- Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
- Read its code of conduct: it covers issues and pull requests as well as chat.
- Your contributions will be published under the project's Apache-2.0 license.
- Pick one of the 3 open beginner-friendly issues below and comment that you want to work on it before you start.
Issues somebody may already be working on are listed last. List everything by date
-
bug
Difficulty 1/5 Under an hour Newbie friendliness 78/100
splunk/security_content#4418 ·
Maintainers usually reply within 1 day
-
[BUG] Windows New EventLog ChannelAccess Registry Value Set: second path has single backslashesOpenbug
Difficulty 1/5 1-3 hours Newbie friendliness 78/100
splunk/security_content#4417 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
splunk/security_content#4409 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
splunk/security_content#4401 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
splunk/security_content#4400 ·
Maintainers usually reply within 1 day
-
bug
Difficulty 4/5 3-5 days Newbie friendliness 42/100
splunk/security_content#4399 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 55/100
splunk/security_content#4393 · 3 comments ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 30/100
splunk/security_content#4389 · 1 comment ·
Maintainers usually reply within 1 day
-
Detection proposal: dMSA (BadSuccessor) abuse via predecessor link without superseded-account linkOpenenhancement
Difficulty 4/5 3-5 days Newbie friendliness 22/100
splunk/security_content#4384 · 1 comment ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 3/5 1-2 days Newbie friendliness 45/100
splunk/security_content#4383 · 1 comment ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 30/100
splunk/security_content#4382 · 1 comment ·
Maintainers usually reply within 1 day
-
Splunk Add-on for Sysmon for Linux is archived on SplunkbaseMay be free again @nasbench claimed this 44 days ago, and no pull request is open. Open
splunk/security_content#4306 · 1 comment · 1 assignee ·
Maintainers usually reply within 1 day
-
Suggested Enhancement for Detection: Windows AD Short Lived Domain Account ServicePrincipalNameMay be free again @patel-bhavin claimed this 243 days ago, and no pull request is open. Openenhancement
splunk/security_content#3941 · 1 assignee ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 3/5 1-2 days Newbie friendliness 58/100
splunk/security_content#3604 · 3 comments ·
Maintainers usually reply within 1 day
-
[BUG] ESCU CS fields LogonType and TargetUserNameMay be free again @josehelps claimed this 1026 days ago, and no pull request is open. Openbug
splunk/security_content#2869 · 3 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
[BUG]Linux Change File Owner To Root: detection bypass using "chown root: <file>"Possibly taken @thegreatmhn claimed this 1 day ago. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
splunk/security_content#4413 · 4 comments ·
Maintainers usually reply within 1 day
-
Detection proposal: VBA Stomping (T1564.007) - EvilClippy execution and vbaProject.bin creation by non-Office processPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 54/100
splunk/security_content#4405 ·
Maintainers usually reply within 1 day
-
[BUG] Windows DisableAntiSpyware Registry" overlaps with and is weaker than "Disable Defender AntiVirus RegistryPossibly taken @mvanhorn claimed this 10 days ago. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
splunk/security_content#4388 · 1 comment ·
Maintainers usually reply within 1 day
-
feat: Dual-signal SnortML (GID 411) + signature/EVE corroboration analytics for Cisco Secure FirewallPossibly taken @AAH20 claimed this 90 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 45/100
splunk/security_content#4220 · 2 comments ·
Maintainers usually reply within 1 day