Jose Enrique Hernandez d78bb53baa Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

detect_arp_poisoning.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_ipv6_network_infrastructure_threats.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_large_outbound_icmp_packets.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_outbound_smb_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_port_security_violation.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_rogue_dhcp_server.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_snicat_sni_exfiltration.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_software_download_to_network_device.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_traffic_mirroring.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_unauthorized_assets_by_mac_address.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_windows_dns_sigred_via_splunk_stream.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_windows_dns_sigred_via_zeek.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_zerologon_via_zeek.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

dns_query_length_outliers___mltk.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

dnstwist_domain_names.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

excessive_dns_failures.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

hosts_receiving_high_volume_of_network_traffic_from_email_server.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

large_volume_of_dns_any_queries.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

prohibited_network_traffic_allowed.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

protocol_or_port_mismatch.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

protocols_passing_authentication_in_cleartext.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

remote_desktop_network_bruteforce.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

remote_desktop_network_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

smb_traffic_spike___mltk.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

smb_traffic_spike.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

ssa___unusual_volume_download_from_internal_server.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

tor_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

unusually_long_content_type_length.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00