Jose Enrique Hernandez a62c66b076 Merge pull request #251 from splunk/CRL-1401 ...

Added email brand monitoring to suspicious email story

2019-11-06 17:56:57 -05:00

..

account_monitoring.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

apache_struts.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

asset_tracking.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_cross_account_activity.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_cryptomining.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_ec2_modifications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_ec2.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_network_acl.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_provisioning.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_s3.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_suspcious_logins.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_suspcious_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

aws_user_monitoring.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

brand_monitoring.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

cloud_cryptomining.yml

merge with develop and testing

2019-11-05 12:22:01 -08:00

coldroot.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

collection_and_staging.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

command_and_control.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

common_phishing_frameworks.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

credential_dumping.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

data_protection.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

defense_evasion.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

detect_unauthorized_processes.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dhs_report_TA18-074A.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

disable_security_tools.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dns_amplification_attacks.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dns_hijacking.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dynamic_dns.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

emotet.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

file_extension_abuse.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

hidden_cobra_malware.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

host_redirection.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

jboss_vulnerabilities.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

lateral_movement.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

malicious_powershell.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_backups.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_for_updates.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

mudcarp.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

netsh_abuse.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

non-secure_communications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

orangeworm.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

phishing_payloads.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

prohibited_traffic_and_protocol_mismatch.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

ransomware.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

routers_and_infrastructure.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

samsam.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

service_abuse.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

spectre_meltdown.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

splunk_information_disclosure.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

splunk_vulnerabilities.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

sql_injection.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_cmd_line_executions.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_dns_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_emails.yml

Added email brand monitoring to suspicious email story

2019-11-06 14:11:25 -08:00

suspicious_event_log_activity.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_mshta_activities.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_windows_registry_activities.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_wmi.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

unusual_processes.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

web_fraud.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

windows_persistence.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

windows_privilege_escalation.yml

Changed json to yml

2019-10-16 16:38:05 +02:00