P4T12ICK 1073cff2f7 improved detections and tests

2021-01-12 11:13:17 +01:00

..

.gitkeep

adding tests per detection

2020-10-16 12:45:14 -07:00

abnormally_high_cloud_instances_destroyed.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_cloud_instances_launched.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_number_of_cloud_infrastructure_api_calls.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

abnormally_high_number_of_cloud_security_group_api_calls.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

assertions.py

fixed links to assertions in test

2020-12-03 10:41:09 -08:00

aws_cross_account_activity_from_previously_unseen_account.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.test.yml

update detection

2021-01-11 13:31:02 +01:00

aws_detect_users_with_kms_keys_performing_encryption_s3.test.yml

updated detection and test file

2021-01-11 14:28:14 +01:00

aws_network_access_control_list_created_with_all_open_ports.test.yml

improved detections and tests

2021-01-12 11:13:17 +01:00

aws_network_access_control_list_deleted.test.yml

improved detections and tests

2021-01-12 11:13:17 +01:00

cloud_api_calls_from_previously_unseen_user_roles.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_by_previously_unseen_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_in_previously_unused_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_with_previously_unseen_image.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_compute_instance_created_with_previously_unseen_instance_type.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_instance_modified_with_previously_unseen_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_city.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_country.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_ip_address.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

cloud_provisioning_from_previously_unseen_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_new_user.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_city.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_country.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

detect_aws_console_login_by_user_from_new_region.test.yml

updated url links for dataset

2020-12-03 15:03:50 +01:00

high_number_of_login_failures_from_a_single_source.test.yml

new detection for login failure

2020-12-16 16:26:25 -08:00

o365_suspicious_admin_email_forwarding.test.yml

new detections

2020-12-16 14:31:05 +01:00

o365_suspicious_rights_delegation.test.yml

changes

2020-12-15 13:59:33 +01:00

o365_suspicious_user_email_forwarding.test.yml

new detections

2020-12-16 14:31:05 +01:00