d1vious 47dbc6b946 using a different field

2022-02-26 13:39:28 -05:00

..

baseline_of_dns_query_length___mltk.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

baseline_of_smb_traffic___mltk.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

count_of_unique_ips_connecting_to_ports.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

detect_hosts_connecting_to_dynamic_domain_providers.yml

resolved merge conflicts

2021-07-21 09:22:09 +02:00

detect_outbound_ldap_traffic.yml

test:updated ymls

2021-12-15 21:15:02 +05:30

discover_dns_records.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

dns_query_length_with_high_standard_deviation.yml

test:removed cim version

2022-02-08 12:05:05 +05:30

get_certificate_logs_for_a_domain.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_dns_server_history_for_a_host.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_dns_traffic_ratio.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_email_info.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_emails_from_specific_sender.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_first_occurrence_and_last_occurrence_of_a_mac_address.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_history_of_email_sources.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_outbound_emails_to_hidden_cobra_threat_actors.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

get_web_session_information_via_session_id.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

identify_systems_creating_remote_desktop_traffic.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

identify_systems_receiving_remote_desktop_traffic.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

investigate_network_traffic_from_src_ip.yml

updating docs and package bits [ci skip]

2021-10-28 19:55:37 +00:00

investigate_suspicious_strings_in_http_header.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

investigate_web_posts_from_src.yml

updating docs and package bits [ci skip]

2021-08-18 16:56:31 +00:00

multiple_archive_files_http_post_traffic.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

plain_http_post_exfiltrated_data.yml

CARS_UPDATE_MITRE_ID_B8

2021-10-15 10:22:43 +02:00

ssa___tcp_command_and_scripting_interpreter_outbound_ldap_traffic.yml

using a different field

2022-02-26 13:39:28 -05:00