Jose Enrique Hernandez d78bb53baa Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

..

baseline_of_dns_query_length___mltk.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

baseline_of_smb_traffic___mltk.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

count_of_unique_ips_connecting_to_ports.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_hosts_connecting_to_dynamic_domain_providers.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

detect_outbound_ldap_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

discover_dns_records.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

dns_query_length_with_high_standard_deviation.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_certificate_logs_for_a_domain.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_dns_server_history_for_a_host.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_dns_traffic_ratio.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_email_info.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_emails_from_specific_sender.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_first_occurrence_and_last_occurrence_of_a_mac_address.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_history_of_email_sources.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_outbound_emails_to_hidden_cobra_threat_actors.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

get_web_session_information_via_session_id.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

identify_systems_creating_remote_desktop_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

identify_systems_receiving_remote_desktop_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

investigate_network_traffic_from_src_ip.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

investigate_suspicious_strings_in_http_header.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

investigate_web_posts_from_src.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

multiple_archive_files_http_post_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

plain_http_post_exfiltrated_data.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00

ssa___tcp_command_and_scripting_interpreter_outbound_ldap_traffic.yml

Revert "Refactored security content"

2022-03-04 15:13:04 -05:00