Xiao Lin daea9d4192 change to use SSA input_event

2020-10-27 22:30:00 +00:00

..

detect_new_login_attempts_to_routers.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

detect_phishing_content___ssa.yml

change to use SSA input_event

2020-10-27 22:30:00 +00:00

email_attachments_with_lots_of_spaces.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

email_files_written_outside_of_the_outlook_directory.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

email_servers_sending_high_volume_traffic_to_hosts.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

identify_new_user_accounts.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

monitor_email_for_brand_abuse.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

multiple_okta_users_with_invalid_credentails_from_the_same_ip.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

no_windows_updates_in_a_time_frame.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

okta_account_lockout_events.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

okta_failed_sso_attempts.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

okta_user_logins_from_multiple_cities.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

open_redirect_in_splunk_web.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

spectre_and_meltdown_vulnerable_systems.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

splunk_enterprise_information_disclosure.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

suspicious_email___uba_anomaly.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

suspicious_email_attachment_extensions.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00