From dfd645f84685acee938059d7c58f6845122cf472 Mon Sep 17 00:00:00 2001 From: ljstella Date: Fri, 15 Nov 2024 11:31:28 -0600 Subject: [PATCH] web: more cleanup --- ...juniper_networks_remote_code_execution_exploit_detection.yml | 2 +- detections/web/multiple_archive_files_http_post_traffic.yml | 2 +- detections/web/zscaler_adware_activities_threat_blocked.yml | 2 +- detections/web/zscaler_behavior_analysis_threat_blocked.yml | 2 +- .../web/zscaler_cryptominer_downloaded_threat_blocked.yml | 2 +- detections/web/zscaler_employment_search_web_activity.yml | 2 +- detections/web/zscaler_exploit_threat_blocked.yml | 2 +- detections/web/zscaler_legal_liability_threat_blocked.yml | 2 +- detections/web/zscaler_malware_activity_threat_blocked.yml | 2 +- detections/web/zscaler_phishing_activity_threat_blocked.yml | 2 +- detections/web/zscaler_potentially_abused_file_download.yml | 2 +- .../web/zscaler_privacy_risk_destinations_threat_blocked.yml | 2 +- detections/web/zscaler_scam_destinations_threat_blocked.yml | 2 +- detections/web/zscaler_virus_download_threat_blocked.yml | 2 +- 14 files changed, 14 insertions(+), 14 deletions(-) diff --git a/detections/web/juniper_networks_remote_code_execution_exploit_detection.yml b/detections/web/juniper_networks_remote_code_execution_exploit_detection.yml index 4fee9cc078..2cd84a94ca 100644 --- a/detections/web/juniper_networks_remote_code_execution_exploit_detection.yml +++ b/detections/web/juniper_networks_remote_code_execution_exploit_detection.yml @@ -60,7 +60,7 @@ rba: score: 72 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Juniper JunOS Remote Code Execution diff --git a/detections/web/multiple_archive_files_http_post_traffic.yml b/detections/web/multiple_archive_files_http_post_traffic.yml index 6971ba6391..a1acc5bda5 100644 --- a/detections/web/multiple_archive_files_http_post_traffic.yml +++ b/detections/web/multiple_archive_files_http_post_traffic.yml @@ -52,7 +52,7 @@ rba: score: 25 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Data Exfiltration diff --git a/detections/web/zscaler_adware_activities_threat_blocked.yml b/detections/web/zscaler_adware_activities_threat_blocked.yml index 4ccaf654cc..946ba9f0d8 100644 --- a/detections/web/zscaler_adware_activities_threat_blocked.yml +++ b/detections/web/zscaler_adware_activities_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 8 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_behavior_analysis_threat_blocked.yml b/detections/web/zscaler_behavior_analysis_threat_blocked.yml index df4420e010..77c45f96a6 100644 --- a/detections/web/zscaler_behavior_analysis_threat_blocked.yml +++ b/detections/web/zscaler_behavior_analysis_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 8 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_cryptominer_downloaded_threat_blocked.yml b/detections/web/zscaler_cryptominer_downloaded_threat_blocked.yml index 00b53b615a..5f711afecc 100644 --- a/detections/web/zscaler_cryptominer_downloaded_threat_blocked.yml +++ b/detections/web/zscaler_cryptominer_downloaded_threat_blocked.yml @@ -53,7 +53,7 @@ rba: score: 32 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_employment_search_web_activity.yml b/detections/web/zscaler_employment_search_web_activity.yml index 36317d5e1f..4aa91f68f9 100644 --- a/detections/web/zscaler_employment_search_web_activity.yml +++ b/detections/web/zscaler_employment_search_web_activity.yml @@ -53,7 +53,7 @@ rba: score: 4 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_exploit_threat_blocked.yml b/detections/web/zscaler_exploit_threat_blocked.yml index 40a6a428e5..16db10618b 100644 --- a/detections/web/zscaler_exploit_threat_blocked.yml +++ b/detections/web/zscaler_exploit_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 40 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_legal_liability_threat_blocked.yml b/detections/web/zscaler_legal_liability_threat_blocked.yml index 8c84477358..77b06b77f0 100644 --- a/detections/web/zscaler_legal_liability_threat_blocked.yml +++ b/detections/web/zscaler_legal_liability_threat_blocked.yml @@ -51,7 +51,7 @@ rba: score: 16 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_malware_activity_threat_blocked.yml b/detections/web/zscaler_malware_activity_threat_blocked.yml index a7863931b2..4be301e3d2 100644 --- a/detections/web/zscaler_malware_activity_threat_blocked.yml +++ b/detections/web/zscaler_malware_activity_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 40 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_phishing_activity_threat_blocked.yml b/detections/web/zscaler_phishing_activity_threat_blocked.yml index e0c0fe8d92..ab966f01e4 100644 --- a/detections/web/zscaler_phishing_activity_threat_blocked.yml +++ b/detections/web/zscaler_phishing_activity_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 16 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_potentially_abused_file_download.yml b/detections/web/zscaler_potentially_abused_file_download.yml index f64dac8b75..bb53be7dfc 100644 --- a/detections/web/zscaler_potentially_abused_file_download.yml +++ b/detections/web/zscaler_potentially_abused_file_download.yml @@ -51,7 +51,7 @@ rba: score: 8 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_privacy_risk_destinations_threat_blocked.yml b/detections/web/zscaler_privacy_risk_destinations_threat_blocked.yml index b3d9ce2a7f..bd564a13e6 100644 --- a/detections/web/zscaler_privacy_risk_destinations_threat_blocked.yml +++ b/detections/web/zscaler_privacy_risk_destinations_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 8 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_scam_destinations_threat_blocked.yml b/detections/web/zscaler_scam_destinations_threat_blocked.yml index 9fca2cf39d..9be83b28b3 100644 --- a/detections/web/zscaler_scam_destinations_threat_blocked.yml +++ b/detections/web/zscaler_scam_destinations_threat_blocked.yml @@ -51,7 +51,7 @@ rba: score: 8 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats diff --git a/detections/web/zscaler_virus_download_threat_blocked.yml b/detections/web/zscaler_virus_download_threat_blocked.yml index cf5dd30584..3ff8c90415 100644 --- a/detections/web/zscaler_virus_download_threat_blocked.yml +++ b/detections/web/zscaler_virus_download_threat_blocked.yml @@ -52,7 +52,7 @@ rba: score: 40 threat_objects: - field: url - type: url string + type: url tags: analytic_story: - Zscaler Browser Proxy Threats