Patrick Bareiss cda505d8fa new generate script

2020-05-06 17:42:38 +02:00

..

add_prohibited_processes_to_enterprise_security.yml

new generate script

2020-05-06 17:42:38 +02:00

baseline_of_api_calls_per_user_arn.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_blocked_outbound_traffic_from_aws.yml

updated content

2020-05-05 12:58:56 +02:00

baseline_of_command_line_length___mltk.yml

new generate script

2020-05-06 17:42:38 +02:00

baseline_of_dns_query_length___mltk.yml

WIP

2020-04-30 10:34:18 +02:00

baseline_of_excessive_aws_instances_launched_by_user___mltk.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_excessive_aws_instances_terminated_by_user___mltk.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_network_acl_activity_by_arn.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_s3_bucket_deletion_activity_by_arn.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_security_group_activity_by_arn.yml

WIP validate script

2020-04-30 15:51:16 +02:00

baseline_of_smb_traffic___mltk.yml

new generate script

2020-05-06 17:42:38 +02:00

count_of_assets_by_category.yml

WIP

2020-04-30 10:34:18 +02:00

count_of_unique_ips_connecting_to_ports.yml

WIP

2020-04-30 10:34:18 +02:00

create_a_list_of_approved_aws_service_accounts.yml

updated content

2020-05-05 12:58:56 +02:00

discover_dns_records.yml

WIP

2020-04-30 10:34:18 +02:00

dnstwist_domain_names.yml

new generate script

2020-05-06 17:42:38 +02:00

identify_systems_creating_remote_desktop_traffic.yml

WIP

2020-04-30 10:34:18 +02:00

identify_systems_receiving_remote_desktop_traffic.yml

WIP

2020-04-30 10:34:18 +02:00

identify_systems_using_remote_desktop.yml

WIP

2020-04-30 10:34:18 +02:00

monitor_successful_backups.yml

updated content

2020-05-05 12:58:56 +02:00

monitor_unsuccessful_backups.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_api_call_per_user_roles_in_cloudtrail.yml

WIP validate script

2020-04-30 15:51:16 +02:00

previously_seen_aws_cross_account_activity.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_aws_provisioning_activity_sources.yml

new generate script

2020-05-06 17:42:38 +02:00

previously_seen_aws_regions.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_cloud_compute_creations_by_user.yml

WIP

2020-04-30 10:34:18 +02:00

previously_seen_cloud_compute_images.yml

WIP

2020-04-30 10:34:18 +02:00

previously_seen_cloud_compute_instance_types.yml

WIP

2020-04-30 10:34:18 +02:00

previously_seen_cloud_regions.yml

WIP

2020-04-30 10:34:18 +02:00

previously_seen_command_line_arguments.yml

new generate script

2020-05-06 17:42:38 +02:00

previously_seen_ec2_amis.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_ec2_instance_types.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_ec2_launches_by_user.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_ec2_modifications_by_user.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_running_windows_services.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_s3_bucket_access_by_remote_ip.yml

updated content

2020-05-05 12:58:56 +02:00

previously_seen_users_in_cloudtrail.yml

new generate script

2020-05-06 17:42:38 +02:00

systems_ready_for_spectre_meltdown_windows_patch.yml

WIP

2020-04-30 10:34:18 +02:00

update_previously_seen_users_in_cloudtrail.yml

new generate script

2020-05-06 17:42:38 +02:00

windows_updates_install_failures.yml

WIP

2020-04-30 10:34:18 +02:00

windows_updates_install_successes.yml

WIP

2020-04-30 10:34:18 +02:00