P4T12ICK 5fbff3630e merged with develop

2022-02-07 14:55:34 +01:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

abnormally_high_number_of_cloud_instances_destroyed.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

abnormally_high_number_of_cloud_instances_launched.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

amazon_eks_kubernetes_cluster_scan_detection.yml

fixed more detections

2022-01-18 13:51:37 +01:00

amazon_eks_kubernetes_pod_scan_detection.yml

fixed more detections

2022-01-18 13:51:37 +01:00

aws_detect_attach_to_role_policy.yml

fixed more detections

2022-01-18 13:51:37 +01:00

aws_detect_permanent_key_creation.yml

fixed more detections

2022-01-18 13:51:37 +01:00

aws_detect_role_creation.yml

fixed more detections

2022-01-18 13:51:37 +01:00

aws_detect_sts_assume_role_abuse.yml

fixed more detections

2022-01-18 13:51:37 +01:00

aws_detect_sts_get_session_token_abuse.yml

fixed more detections

2022-01-18 13:51:37 +01:00

detect_gcp_storage_access_from_a_new_ip.yml

merged with develop

2022-02-07 14:55:34 +01:00

detect_new_open_gcp_storage_buckets.yml

fixed more detections

2022-01-18 13:51:37 +01:00

detect_s3_access_from_a_new_ip.yml

fixed more detections

2022-01-18 13:51:37 +01:00

detect_spike_in_aws_security_hub_alerts_for_user.yml

fixed more detections

2022-01-18 13:51:37 +01:00

detect_spike_in_blocked_outbound_traffic_from_your_aws.yml

fixed more detections

2022-01-18 13:51:37 +01:00

detect_spike_in_s3_bucket_deletion.yml

fixed more detections

2022-01-18 13:51:37 +01:00

gcp_detect_gcploit_framework.yml

fixed more detections

2022-01-18 13:51:37 +01:00

gcp_kubernetes_cluster_pod_scan_detection.yml

fixed more detections

2022-01-18 13:51:37 +01:00

gdrive_suspicious_file_sharing.yml

fixed more detections

2022-01-18 13:51:37 +01:00

gsuite_suspicious_calendar_invite.yml

fixed more detections

2022-01-18 13:51:37 +01:00

high_number_of_login_failures_from_a_single_source.yml

fixed more detections

2022-01-18 13:51:37 +01:00

kubernetes_aws_detect_suspicious_kubectl_calls.yml

fixed more detections

2022-01-18 13:51:37 +01:00

new_container_uploaded_to_aws_ecr.yml

fixed more detections

2022-01-18 13:51:37 +01:00