admin/elastic-detection-rules
1
0
Fork 0
mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
e897a6760429ea46da15ebbca1609b62fd37fee9
elastic-detection-rules/rules/microsoft-365
T
History
Austin Songer 546e43071c [Rule Tuning] Attempts to brute force a microsoft 365 user account (#1163) 
Update rules/microsoft-365/credential_access_microsoft_365_brute_force_user_account_attempt.toml
Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>
Co-authored-by: David French <56409778+threat-punter@users.noreply.github.com>
2021-06-15 09:20:20 -04:00
..
collection_microsoft_365_new_inbox_rule.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
credential_access_microsoft_365_brute_force_user_account_attempt.toml
[Rule Tuning] Attempts to brute force a microsoft 365 user account (#1163)
2021-06-15 09:20:20 -04:00
credential_access_microsoft_365_potential_password_spraying_attack.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
exfiltration_microsoft_365_exchange_transport_rule_creation.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
exfiltration_microsoft_365_exchange_transport_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
initial_access_microsoft_365_exchange_safelinks_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
microsoft_365_exchange_dkim_signing_config_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
microsoft_365_teams_custom_app_interaction_allowed.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
persistence_microsoft_365_exchange_management_role_assignment.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
persistence_microsoft_365_teams_external_access_enabled.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00
persistence_microsoft_365_teams_guest_access_enabled.toml
Cleanup note field in rules (#1194)
2021-05-10 13:40:56 -08:00