Jason Brewer 604e2ecc11 CRL-1646 - changing from user to src_user

2019-11-25 15:49:32 -08:00

..

add_prohibited_processes_to_es.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

approved_aws_service_accounts.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

assets_sorted_by_category.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_api_calls_per_user_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_aws_regions.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_blocked_vpc_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_cloud_compute_regions.yml

updates to propery use cloud_infrastructure

2019-10-24 13:26:55 -06:00

baseline_network_acl_modifications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_s3_deletion_by_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

baseline_security_group_activity_by_arn.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

brand_abuse_dnstwist_domains.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

discover_dns_records.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_ports_on_network.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_creating_rdp_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_receiving_rdp_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

identify_systems_using_remote_desktop.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_successful_backups.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_successful_windows_updates.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_unsuccessful_backups.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

monitor_unsuccessful_windows_updates.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_aws_cross_account_activity.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_aws_users.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_creations_by_user.yml

updates to propery use cloud_infrastructure

2019-10-24 13:26:55 -06:00

previously_seen_cloud_compute_images.yml

updates to propery use cloud_infrastructure

2019-10-24 13:26:55 -06:00

previously_seen_cloud_compute_instance_types.yml

updates to propery use cloud_infrastructure

2019-10-24 13:26:55 -06:00

previously_seen_cmd_arguments.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_amis.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_instance_types.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_launches_by_user.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_ec2_modifications.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_provisioning_activity_src.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_s3_remote_ip.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_user_roles.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_windows_service_starts.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

systems_ready_for_spectre_meltdown_patch.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_dns_query_length.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_ec2_excessive_runinstances.yml

CRL-1646 - changing from user to src_user

2019-11-25 15:49:32 -08:00

train_smb_traffic_spike.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

train_unusually_long_commandlines.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

update_previously_seen_aws_users.yml

Changed json to yml

2019-10-16 16:38:05 +02:00