P4T12ICK 153b2d44ae merged with develop

2023-03-16 09:44:35 +01:00

..

detect_arp_poisoning.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_dga_domains_using_pretrained_model_in_dsdl.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

detect_hosts_connecting_to_dynamic_domain_providers.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

detect_ipv6_network_infrastructure_threats.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_large_outbound_icmp_packets.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

detect_outbound_ldap_traffic.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_outbound_smb_traffic.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_port_security_violation.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_rogue_dhcp_server.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_snicat_sni_exfiltration.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_software_download_to_network_device.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_traffic_mirroring.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_unauthorized_assets_by_mac_address.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_windows_dns_sigred_via_splunk_stream.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_windows_dns_sigred_via_zeek.yml

merged with develop

2023-03-03 12:40:16 +01:00

detect_zerologon_via_zeek.yml

merged with develop

2023-03-03 12:40:16 +01:00

dns_query_length_outliers___mltk.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

dns_query_length_with_high_standard_deviation.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

excessive_dns_failures.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

f5_big_ip_icontrol_rest_vulnerability_cve_2022_1388.yml

merged with develop

2023-03-03 12:40:16 +01:00

hosts_receiving_high_volume_of_network_traffic_from_email_server.yml

merged with develop

2023-03-03 12:40:16 +01:00

large_volume_of_dns_any_queries.yml

merged with develop

2023-03-03 12:40:16 +01:00

multiple_archive_files_http_post_traffic.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

ngrok_reverse_proxy_on_network.yml

merged with develop

2023-03-03 12:40:16 +01:00

plain_http_post_exfiltrated_data.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

prohibited_network_traffic_allowed.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

protocol_or_port_mismatch.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

protocols_passing_authentication_in_cleartext.yml

merged with develop

2023-03-03 12:40:16 +01:00

remote_desktop_network_bruteforce.yml

merged with develop

2023-03-03 12:40:16 +01:00

remote_desktop_network_traffic.yml

merged with develop

2023-03-03 12:40:16 +01:00

smb_traffic_spike___mltk.yml

merged with develop

2023-03-03 12:40:16 +01:00

smb_traffic_spike.yml

merged with develop

2023-03-03 12:40:16 +01:00

splunk_identified_ssl_tls_certificates.yml

merged with develop

2023-03-03 12:40:16 +01:00

ssl_certificates_with_punycode.yml

merged with develop

2023-03-03 12:40:16 +01:00

tor_traffic.yml

merged with ba ocsf work

2023-03-03 13:28:14 +01:00

unusually_long_content_type_length.yml

merged with develop

2023-03-03 12:40:16 +01:00

windows_ad_replication_service_traffic.yml

merged with develop

2023-03-16 09:44:35 +01:00

windows_ad_rogue_domain_controller_network_activity.yml

merged with develop

2023-03-16 09:44:35 +01:00

zeek_x509_certificate_with_punycode.yml

merged with develop

2023-03-03 12:40:16 +01:00