P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

..

deprecated

fixed detections metadata

2022-01-20 13:42:50 +01:00

baseline_of_blocked_outbound_traffic_from_aws.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

baseline_of_cloud_infrastructure_api_calls_per_user.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

baseline_of_cloud_instances_destroyed.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

baseline_of_cloud_instances_launched.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

baseline_of_cloud_security_group_api_calls_per_user.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

baseline_of_command_line_length___mltk.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

baseline_of_dns_query_length___mltk.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

baseline_of_network_acl_activity_by_arn.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

baseline_of_s3_bucket_deletion_activity_by_arn.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

baseline_of_security_group_activity_by_arn.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

baseline_of_smb_traffic___mltk.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

count_of_assets_by_category.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

count_of_unique_ips_connecting_to_ports.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

create_a_list_of_approved_aws_service_accounts.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

discover_dns_records.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

dnstwist_domain_names.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

identify_systems_creating_remote_desktop_traffic.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

identify_systems_receiving_remote_desktop_traffic.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

identify_systems_using_remote_desktop.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

monitor_successful_backups.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

monitor_unsuccessful_backups.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_aws_cross_account_activity___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_aws_cross_account_activity___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_aws_cross_account_activity.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_aws_regions.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_cloud_api_calls_per_user_role___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_api_calls_per_user_role___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_creations_by_user___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_creations_by_user___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_images___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_images___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_instance_types___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_compute_instance_types___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_instance_modifications_by_user___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_instance_modifications_by_user___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_provisioning_activity_sources___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_provisioning_activity_sources___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_regions___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_cloud_regions___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_command_line_arguments.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_ec2_modifications_by_user.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_running_windows_services___initial.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_running_windows_services___update.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_s3_bucket_access_by_remote_ip.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

previously_seen_users_in_cloudtrail___initial.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_users_in_cloudtrail___update.yml

removed SAAWS and automated_detection_testing flag

2022-01-27 09:50:45 +01:00

previously_seen_zoom_child_processes___initial.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

previously_seen_zoom_child_processes___update.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

systems_ready_for_spectre_meltdown_windows_patch.yml

put baselines and investigations into its own folder

2022-01-17 10:56:04 +01:00

windows_updates_install_failures.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00

windows_updates_install_successes.yml

fixed bugs in detections after running new validate

2022-01-17 17:45:12 +01:00