bpatel 78903f3fe9 test files

2021-03-18 12:41:00 -07:00

..

.gitkeep

…

abnormally_high_cloud_instances_destroyed.test.yml

updating paths

2021-03-12 09:51:51 -07:00

abnormally_high_cloud_instances_launched.test.yml

updating paths

2021-03-12 09:51:51 -07:00

abnormally_high_number_of_cloud_infrastructure_api_calls.test.yml

…

abnormally_high_number_of_cloud_security_group_api_calls.test.yml

…

assertions.py

…

aws_create_policy_version_to_allow_all_resources.test.yml

test time

2021-02-23 10:57:01 -08:00

aws_createaccesskey.test.yml

create access key detection

2021-03-02 16:21:35 -08:00

aws_createloginprofile.test.yml

test files

2021-03-18 12:41:00 -07:00

aws_cross_account_activity_from_previously_unseen_account.test.yml

…

aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.test.yml

…

aws_detect_users_with_kms_keys_performing_encryption_s3.test.yml

…

aws_network_access_control_list_created_with_all_open_ports.test.yml

…

aws_network_access_control_list_deleted.test.yml

…

aws_saml_access_by_provider_user_and_principal.test.yml

added detection tests

2021-02-02 10:13:54 +01:00

aws_saml_update_identity_provider.test.yml

added detection tests

2021-02-02 10:13:54 +01:00

aws_setdefaultpolicyversion.test.yml

second detection

2021-03-02 15:21:52 -08:00

aws_updateloginprofile.test.yml

test files

2021-03-18 12:41:00 -07:00

cloud_api_calls_from_previously_unseen_user_roles.test.yml

…

cloud_compute_instance_created_by_previously_unseen_user.test.yml

…

cloud_compute_instance_created_in_previously_unused_region.test.yml

…

cloud_compute_instance_created_with_previously_unseen_image.test.yml

…

cloud_compute_instance_created_with_previously_unseen_instance_type.test.yml

…

cloud_instance_modified_with_previously_unseen_user.test.yml

…

cloud_provisioning_from_previously_unseen_city.test.yml

…

cloud_provisioning_from_previously_unseen_country.test.yml

…

cloud_provisioning_from_previously_unseen_ip_address.test.yml

…

cloud_provisioning_from_previously_unseen_region.test.yml

…

detect_aws_console_login_by_new_user.test.yml

…

detect_aws_console_login_by_user_from_new_city.test.yml

…

detect_aws_console_login_by_user_from_new_country.test.yml

…

detect_aws_console_login_by_user_from_new_region.test.yml

…

detect_new_open_s3_buckets_over_aws_cli.test.yml

…

detect_new_open_s3_buckets.test.yml

…

detect_spike_in_aws_security_hub_alerts_for_ec2_instance.test.yml

test file

2021-01-26 13:54:49 -08:00

high_number_of_login_failures_from_a_single_source.test.yml

updating paths

2021-03-12 09:51:51 -07:00

o365_add_app_role_assignment_grant_user.test.yml

added detection tests

2021-02-02 10:13:54 +01:00

o365_added_service_principal.test.yml

added detection tests

2021-02-02 10:13:54 +01:00

o365_bypass_mfa_via_trusted_ip.test.yml

…

o365_disable_mfa.test.yml

…

o365_excessive_authentication_failures_alert.test.yml

…

o365_excessive_sso_logon_errors.test.yml

added detection tests

2021-02-02 10:13:54 +01:00

o365_new_federated_domain_added.test.yml

fix for testing

2021-02-02 15:06:58 +01:00

o365_pst_export_alert.test.yml

…

o365_suspicious_admin_email_forwarding.test.yml

…

o365_suspicious_rights_delegation.test.yml

…