divious1 03db53cbdf finished playbook examples

2021-10-14 14:48:48 -04:00

..

active_directory_discovery.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

active_directory_password_spraying.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

apache_struts_vulnerability.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

asset_tracking.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

aws_cross_account_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

aws_iam_privilege_escalation.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

aws_network_acl_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

aws_privilege_escalation.md

added analytic stories, cleaned up view a bit

2021-09-12 20:39:15 -04:00

aws_security_hub_alerts.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

aws_user_monitoring.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

baron_samedit_cve-2021-3156.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

bits_jobs.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

blackmatter_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

brand_monitoring.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

clop_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

cloud_cryptomining.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

cloud_federated_credential_abuse.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

cobalt_strike.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

coldroot_macos_rat.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

collection_and_staging.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

command_and_control.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

container_implantation_monitoring_and_investigation.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

credential_dumping.md

finished playbook examples

2021-10-14 14:48:48 -04:00

darkside_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

data_exfiltration.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

data_protection.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

deobfuscate-decode_files_or_information.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

detect_zerologon_attack.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

dev_sec_ops.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

dhs_report_ta18-074a.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

disabling_security_tools.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

dns_amplification_attacks.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

dns_hijacking.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

domain_trust_discovery.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

dynamic_dns.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

emotet_malware__dhs_report_ta18-201a_.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

f5_tmui_rce_cve-2020-5902.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

fin7.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

gcp_cross_account_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

hafnium_group.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

hidden_cobra_malware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

icedid.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

ingress_tool_transfer.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

jboss_vulnerability.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

kubernetes_scanning_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

kubernetes_sensitive_object_access_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

lateral_movement.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

malicious_powershell.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

masquerading_-_rename_system_utilities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

meterpreter.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

microsoft_mshtml_remote_code_execution_cve-2021-40444.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

monitor_for_updates.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

netsh_abuse.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

nobelium_group.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

office_365_detections.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

orangeworm_attack_group.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

petitpotam_ntlm_relay_on_active_directory_certificate_services.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

printnightmare_cve-2021-34527.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

prohibited_traffic_allowed_or_protocol_mismatch.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

proxyshell.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

ransomware_cloud.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

remcos.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

revil_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

router_and_infrastructure_security.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

ryuk_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

samsam_ransomware.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

silver_sparrow.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

spearphishing_attachments.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

sql_injection.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_aws_login_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_aws_s3_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_aws_traffic.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_cloud_authentication_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_cloud_instance_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_cloud_provisioning_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_cloud_user_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_command-line_executions.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_compiled_html_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_dns_traffic.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_emails.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_gcp_storage_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_mshta_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_okta_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_regsvcs_regasm_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_regsvr32_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_rundll32_activity.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_windows_registry_activities.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_wmi_use.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

suspicious_zoom_child_processes.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

trickbot.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

trusted_developer_utilities_proxy_execution_msbuild.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

trusted_developer_utilities_proxy_execution.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

unusual_processes.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

use_of_cleartext_protocols.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_defense_evasion_tactics.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_discovery_techniques.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_dns_sigred_cve-2020-1350.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_file_extension_and_association_abuse.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_log_manipulation.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_persistence_techniques.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_privilege_escalation.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

windows_service_abuse.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00

xmrig.md

fixing up base on feedback

2021-10-11 18:18:23 -04:00