pyth0n1c 4cb4b5410b Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

..

baseline_of_dns_query_length___mltk.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

baseline_of_smb_traffic___mltk.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

count_of_unique_ips_connecting_to_ports.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

detect_hosts_connecting_to_dynamic_domain_providers.yml

Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

detect_outbound_ldap_traffic.yml

Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

discover_dns_records.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

dns_query_length_with_high_standard_deviation.yml

Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

get_certificate_logs_for_a_domain.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_dns_server_history_for_a_host.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_dns_traffic_ratio.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_email_info.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_emails_from_specific_sender.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_first_occurrence_and_last_occurrence_of_a_mac_address.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_history_of_email_sources.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_outbound_emails_to_hidden_cobra_threat_actors.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_web_session_information_via_session_id.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

identify_systems_creating_remote_desktop_traffic.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

identify_systems_receiving_remote_desktop_traffic.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

investigate_network_traffic_from_src_ip.yml

updating docs and package bits [ci skip]

2021-10-28 19:55:37 +00:00

investigate_suspicious_strings_in_http_header.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

investigate_web_posts_from_src.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

multiple_archive_files_http_post_traffic.yml

Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

plain_http_post_exfiltrated_data.yml

Updated a huge number of detections with datamodels for CREST team.

2022-03-02 17:07:28 -08:00

ssa___tcp_command_and_scripting_interpreter_outbound_ldap_traffic.yml

using a different field

2022-02-26 13:39:28 -05:00