tccontre 9d466adc76 CARS_UPDATE_MITRE_ID_B8 ...

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

detect_new_login_attempts_to_routers.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00

email_attachments_with_lots_of_spaces.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00

email_files_written_outside_of_the_outlook_directory.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

email_servers_sending_high_volume_traffic_to_hosts.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

monitor_email_for_brand_abuse.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00

multiple_okta_users_with_invalid_credentails_from_the_same_ip.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

no_windows_updates_in_a_time_frame.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00

okta_account_lockout_events.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

okta_failed_sso_attempts.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

okta_user_logins_from_multiple_cities.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

ssa___detect_phishing_content.yml

run generate again

2021-08-16 15:57:44 -07:00

suspicious_email_attachment_extensions.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

suspicious_java_classes.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00

web_servers_executing_suspicious_processes.yml

add analytic types to detections

2021-07-19 17:41:22 +02:00