github-actions[bot] c88cc88d1b Branch was auto-updated.

2021-01-25 19:02:14 +00:00

..

detect_hosts_connecting_to_dynamic_domain_providers.yml

More language clean up

2021-01-22 09:37:51 -06:00

detect_ipv6_network_infrastructure_threats.yml

Update detect_ipv6_network_infrastructure_threats.yml

2020-11-12 11:50:34 +01:00

detect_large_outbound_icmp_packets.yml

Changed the language in some of the descriptions

2021-01-21 23:53:47 -06:00

detect_outbound_smb_traffic.yml

adding changes from suggestions on issue#1053

2021-01-05 14:45:35 -05:00

detect_port_security_violation.yml

Added various Network Infrastructure detections based on the MITRE Network Matrix

2020-10-28 23:14:06 +01:00

detect_rogue_dhcp_server.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

detect_snicat_sni_exfiltration.yml

mods

2020-11-06 10:57:35 +11:00

detect_software_download_to_network_device.yml

.

2020-10-28 21:20:36 +01:00

detect_traffic_mirroring.yml

Update detect_traffic_mirroring.yml

2020-11-12 11:58:04 +01:00

detect_unauthorized_assets_by_mac_address.yml

should be dest_mac as reported

2021-01-05 11:12:58 -05:00

detect_windows_dns_sigred_via_splunk_stream.yml

wip

2020-11-11 16:27:14 +01:00

detect_windows_dns_sigred_via_zeek.yml

wip

2020-11-11 16:27:14 +01:00

detect_zerologon_via_zeek.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

dns_query_length_outliers___mltk.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

dns_query_length_with_high_standard_deviation.yml

Added detection testing service results inDNS Query Length With High Standard Deviation

2021-01-18 14:41:53 +00:00

remote_desktop_network_bruteforce.yml

ryuk story and detections

2020-11-06 12:32:48 -05:00

remote_desktop_network_traffic.yml

Changed the language in some of the descriptions

2021-01-21 23:53:47 -06:00

smb_traffic_spike___mltk.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

smb_traffic_spike.yml

moved detections to their respective folders

2020-10-07 10:31:25 -04:00

tor_traffic.yml

adding sunburst as tags for relavant detections

2020-12-14 20:29:04 -08:00

unusually_long_content_type_length.yml

new test file

2020-12-08 14:00:25 +01:00