David Dorsey 1f8fbb9c58 Merge branch 'develop' into cloud_cryptomining

2019-10-16 17:50:40 -07:00

..

add_prohibited_processes_to_es.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

approved_aws_service_accounts.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

assets_sorted_by_category.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_api_calls_per_user_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_aws_regions.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_blocked_vpc_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_cloud_compute_regions.yml

Merge branch 'develop' into cloud_cryptomining

2019-10-16 17:50:40 -07:00

baseline_network_acl_modifications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_s3_deletion_by_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_security_group_activity_by_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

brand_abuse_dnstwist_domains.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

discover_dns_records.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_ports_on_network.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_creating_rdp_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_receiving_rdp_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_using_remote_desktop.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_successful_backups.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_successful_windows_updates.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_unsuccessful_backups.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_unsuccessful_windows_updates.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_aws_cross_account_activity.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_aws_users.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_creations_by_user.yml

Merge branch 'develop' into cloud_cryptomining

2019-10-16 17:50:40 -07:00

previously_seen_cloud_compute_images.yml

Merge branch 'develop' into cloud_cryptomining

2019-10-16 17:50:40 -07:00

previously_seen_cloud_compute_instance_types.yml

Merge branch 'develop' into cloud_cryptomining

2019-10-16 17:50:40 -07:00

previously_seen_cmd_arguments.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_amis.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_instance_types.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_launches_by_user.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_modifications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_provisioning_activity_src.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_s3_remote_ip.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_user_roles.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_windows_service_starts.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

systems_ready_for_spectre_meltdown_patch.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_dns_query_length.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_smb_traffic_spike.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_unusually_long_commandlines.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

update_previously_seen_aws_users.yml

Changed json to yml

2019-10-16 16:38:05 +02:00