Eric Forte 5ccb7ed4af Min stack rules from 4516 (#4549)

2025-03-19 20:27:30 -04:00

..

aws

[New Hunt] Adding Hunting Queries for AWS SNS exfiltration and data collection (#4458)

2025-02-20 10:53:36 -05:00

aws_bedrock

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

azure

[New Rule] Adding Coverage for Azure Entra Password Spraying (Non-Interactive SFA) (#4523)

2025-03-11 11:25:10 -04:00

azure_openai

[New Rules] Azure OpenAI (#3701)

2025-03-04 22:59:38 +05:30

beaconing

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

cyberarkpas

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

ded

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

dga

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

endpoint

[Rule Tuning] Decrease Interval to 1m for Endpoint Promotions (#4450)

2025-02-07 08:30:35 -06:00

fim

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

gcp

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

github

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

google_workspace

Fix spacing in Setup information (#4470)

2025-02-20 10:04:13 +05:30

kubernetes

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

lmd

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

o365

[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token (#4469)

2025-02-21 10:45:04 -05:00

okta

Fix spacing in Setup information (#4470)

2025-02-20 10:04:13 +05:30

pad

Min stack rules from 4516 (#4549)

2025-03-19 20:27:30 -04:00

problemchild

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00