splunkd-xml-feed.yaml

send:
  - method: 'GET'
    url: '/'

detect:
  - response:
    - body: '<title>splunkd</title>'

meta-info:
  - type: info
  - threat: 30
  - applicable_for:
    - fast
    - scanner
  - tags:
    - Splunkd XML feed
    - Infoleak
    - Information Exposure