Deploiement_Server/deployment-apps/Splunk_Security_Essentials/lookups/credential_patterns.csv

1	description	type	value	include
2	aws_access_key_id	keyword	TERM(aws_access_key_id)	1
3	aws-access-key-id	keyword	TERM(aws-access-key-id)	1
4	aws_s3_access_key_id	keyword	TERM(aws_s3_access_key_id)	1
5	aws-s3-access-key-id	keyword	TERM(aws-s3-access-key-id)	1
6	password	keyword	password	1
7	passphrase	keyword	passphrase	1
8	AWS API Key	regex	(?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9])	1
9	AWS Secret Key	regex	(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])	1
10	Amazon MWS Auth Token	regex	amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}	1
11	Facebook Access Token	regex	EAACEdEose0cBA[0-9A-Za-z]+	1
12	Facebook OAuth	regex	[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]	1
13	Generic API Key	regex	[a|A][p|P][i|I][_]?[k|K][e|E][y|Y].*['|\"][0-9a-zA-Z]{32,45}['|\"]	1
14	Generic Secret	regex	[s|S][e|E][c|C][r|R][e|E][t|T].*['|\"][0-9a-zA-Z]{32,45}['|\"]	1
15	GitHub	regex	[g|G][i|I][t|T][h|H][u|U][b|B].*['|\"][0-9a-zA-Z]{35,40}['|\"]	1
16	Google GCP Service account	regex	\"type\": \"service_account\"	1
17	Google API Key	regex	AIza[0-9A-Za-z\-_]{35}	1
18	Google Cloud Platform OAuth	regex	[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com	1
19	Heroku API Key	regex	[h|H][e|E][r|R][o|O][k|K][u|U].*[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}	1
20	MailChimp API Key	regex	[0-9a-f]{32}-us[0-9]{1,2}	1
21	Mailgun API Key	regex	key-[0-9a-zA-Z]{32}	1
22	PGP private key block	regex	-----BEGIN PGP PRIVATE KEY BLOCK-----	1
23	Password in URL	regex	[a-zA-Z]{3,10}://[^/\s:@]{3,20}:[^/\s:@]{3,20}@.{1,100}[\"'\s]	1
24	PayPal Braintree Access Token	regex	access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}	1
25	Picatic API Key	regex	sk_live_[0-9a-z]{32}	1
26	RSA private key	regex	-----BEGIN RSA PRIVATE KEY-----	1
27	SSH DSA private key	regex	-----BEGIN DSA PRIVATE KEY-----	1
28	SSH EC private key	regex	-----BEGIN EC PRIVATE KEY-----	1
29	Slack Token	regex	(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})	1
30	Slack Webhook	regex	https://hooks\.slack\.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}	1
31	Square Access Token	regex	sq0atp-[0-9A-Za-z\-_]{22}	1
32	Square OAuth Secret	regex	sq0csp-[0-9A-Za-z\-_]{43}	1
33	Stripe API Key	regex	sk_live_[0-9a-zA-Z]{24}	1
34	Stripe Restricted API Key	regex	rk_live_[0-9a-zA-Z]{24}	1
35	Twilio API Key	regex	SK[0-9a-fA-F]{32}	1
36	Twitter Access Token	regex	[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}	1
37	Twitter OAuth	regex	[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*['|\"][0-9a-zA-Z]{35,44}['|\"]	1