bpatel df2cd41959 remove security hub for user test file since there is not data yet

2021-02-03 14:10:14 -08:00

..

.gitkeep

adding tests per detection

2020-10-16 12:45:14 -07:00

abnormally_high_cloud_instances_destroyed.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_cloud_instances_launched.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_number_of_cloud_infrastructure_api_calls.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_number_of_cloud_security_group_api_calls.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

assertions.py

fixed links to assertions in test

2020-12-03 10:41:09 -08:00

aws_cross_account_activity_from_previously_unseen_account.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.test.yml

update detection

2021-01-11 13:31:02 +01:00

aws_detect_users_with_kms_keys_performing_encryption_s3.test.yml

updated detection and test file

2021-01-11 14:28:14 +01:00

aws_network_access_control_list_created_with_all_open_ports.test.yml

improved detections and tests

2021-01-12 11:13:17 +01:00

aws_network_access_control_list_deleted.test.yml

improved detections and tests

2021-01-12 11:13:17 +01:00

cloud_api_calls_from_previously_unseen_user_roles.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_by_previously_unseen_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_in_previously_unused_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_with_previously_unseen_image.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_with_previously_unseen_instance_type.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_instance_modified_with_previously_unseen_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_city.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_country.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_ip_address.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_new_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_city.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_country.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_new_open_s3_buckets_over_aws_cli.test.yml

improved detections and tests

2021-01-12 15:38:32 +01:00

detect_new_open_s3_buckets.test.yml

improved detections and tests

2021-01-12 15:38:32 +01:00

detect_spike_in_aws_security_hub_alerts_for_ec2_instance.test.yml

test file

2021-01-26 13:54:49 -08:00

high_number_of_login_failures_from_a_single_source.test.yml

new detection for login failure

2020-12-16 16:26:25 -08:00

o365_bypass_mfa_via_trusted_ip.test.yml

data path update

2021-01-13 18:27:06 -08:00

o365_disable_mfa.test.yml

o365 disable mfa

2020-12-17 11:02:20 +01:00

o365_excessive_authentication_failures_alert.test.yml

bug fix

2020-12-17 12:00:53 +01:00

o365_pst_export_alert.test.yml

bug fix

2020-12-17 11:40:00 +01:00

o365_suspicious_admin_email_forwarding.test.yml

new detections

2020-12-16 14:31:05 +01:00

o365_suspicious_rights_delegation.test.yml

changes

2020-12-15 13:59:33 +01:00