github-actions[bot] ffa8a4a805 Branch was auto-updated.

2021-07-27 20:53:22 +00:00

..

baseline_of_dns_query_length___mltk.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

baseline_of_smb_traffic___mltk.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

count_of_unique_ips_connecting_to_ports.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

detect_hosts_connecting_to_dynamic_domain_providers.yml

resolved merge conflicts

2021-07-21 09:22:09 +02:00

discover_dns_records.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

dns_query_length_with_high_standard_deviation.yml

Branch was auto-updated.

2021-07-27 20:53:22 +00:00

dnstwist_domain_names.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

get_certificate_logs_for_a_domain.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_dns_server_history_for_a_host.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_dns_traffic_ratio.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_email_info.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_emails_from_specific_sender.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_first_occurrence_and_last_occurrence_of_a_mac_address.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_history_of_email_sources.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_outbound_emails_to_hidden_cobra_threat_actors.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

get_web_session_information_via_session_id.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

identify_systems_creating_remote_desktop_traffic.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

identify_systems_receiving_remote_desktop_traffic.yml

add deployments to baselines

2021-07-21 11:31:40 +02:00

investigate_network_traffic_from_src_ip.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

investigate_suspicious_strings_in_http_header.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

investigate_web_posts_from_src.yml

converted response_task to investigations

2021-07-26 13:39:17 +02:00

multiple_archive_files_http_post_traffic.yml

resolved merge conflicts

2021-07-21 09:22:09 +02:00

plain_http_post_exfiltrated_data.yml

resolved merge conflicts

2021-07-21 09:22:09 +02:00