divious1 022c5be43e Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming" ...

This reverts commit 45c138d518.

2021-06-25 15:03:55 -04:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

abnormally_high_cloud_instances_destroyed.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

abnormally_high_cloud_instances_launched.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

amazon_eks_kubernetes_cluster_scan_detection.yml

WIP

2021-03-10 14:44:44 +01:00

amazon_eks_kubernetes_pod_scan_detection.yml

WIP

2021-03-10 14:44:44 +01:00

aws_detect_attach_to_role_policy.yml

WIP

2021-03-10 14:44:44 +01:00

aws_detect_permanent_key_creation.yml

WIP

2021-03-10 14:44:44 +01:00

aws_detect_role_creation.yml

WIP

2021-03-10 14:44:44 +01:00

aws_detect_sts_assume_role_abuse.yml

updated CloudTrails to AWS CloudTrails

2021-06-25 14:50:50 -04:00

aws_detect_sts_get_session_token_abuse.yml

WIP

2021-03-10 14:44:44 +01:00

detect_gcp_storage_access_from_a_new_ip.yml

updating docs and package bits [ci skip]

2021-03-12 17:32:09 +00:00

detect_new_open_gcp_storage_buckets.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

detect_s3_access_from_a_new_ip.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

detect_spike_in_aws_security_hub_alerts_for_user.yml

Revert "updated AWS IAM to AWS Identity Access Manager (IAM) in all detections to fit mustang required naming"

2021-06-25 15:03:55 -04:00

detect_spike_in_blocked_outbound_traffic_from_your_aws.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

detect_spike_in_s3_bucket_deletion.yml

updated CloudTrails to AWS CloudTrails

2021-06-25 14:50:50 -04:00

gcp_detect_gcploit_framework.yml

WIP

2021-03-10 14:44:44 +01:00

gcp_kubernetes_cluster_pod_scan_detection.yml

WIP

2021-03-10 14:44:44 +01:00

high_number_of_login_failures_from_a_single_source.yml

fixed merging issues

2021-03-11 19:03:54 +01:00

kubernetes_aws_detect_suspicious_kubectl_calls.yml

WIP

2021-03-10 14:44:44 +01:00

new_container_uploaded_to_aws_ecr.yml

updated CloudTrails to AWS CloudTrails

2021-06-25 14:50:50 -04:00