Michael Haag 0c446faa13 OKTAAA

2023-03-10 06:33:07 -07:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

detect_new_login_attempts_to_routers.yml

Refactored security content

2022-03-09 14:43:09 +01:00

detect_risky_spl_using_pretrained_ml_model.yml

Moving failing tests to experimental

2023-02-02 16:32:24 -08:00

email_attachments_with_lots_of_spaces.yml

powershelldetectionstaghermetic

2022-03-31 15:29:51 -07:00

email_files_written_outside_of_the_outlook_directory.yml

Refactored security content

2022-03-09 14:43:09 +01:00

email_servers_sending_high_volume_traffic_to_hosts.yml

Refactored security content

2022-03-09 14:43:09 +01:00

monitor_email_for_brand_abuse.yml

Refactored security content

2022-03-09 14:43:09 +01:00

multiple_okta_users_with_invalid_credentials_from_the_same_ip.yml

OktaUnited

2022-09-29 11:40:06 -06:00

no_windows_updates_in_a_time_frame.yml

Refactored security content

2022-03-09 14:43:09 +01:00

okta_account_locked_out.yml

updates

2022-10-03 09:20:17 -06:00

okta_account_lockout_events.yml

OktaUnited

2022-09-29 11:40:06 -06:00

okta_failed_sso_attempts.yml

OktaUnited

2022-09-29 11:40:06 -06:00

okta_mfa_exhaustion_hunt.yml

updating

2022-10-28 12:57:20 -04:00

okta_new_api_token_created.yml

updates

2022-10-03 09:20:17 -06:00

okta_new_device_enrolled_on_account.yml

OktaUnited

2022-09-29 11:40:06 -06:00

okta_phishing_detection_with_fastpass_origin_check.yml

OKTAAA

2023-03-10 06:33:07 -07:00

okta_suspicious_activity_reported.yml

OktaUnited

2022-09-29 11:40:06 -06:00

okta_threatinsight_login_failure_with_high_unknown_users.yml

OKTAAA

2023-03-10 06:33:07 -07:00

okta_threatinsight_suspected_passwordspray_attack.yml

OKTAAA

2023-03-10 06:33:07 -07:00

okta_threatinsight_threat_detected.yml

OktaUnited

2022-09-29 11:40:06 -06:00

okta_two_or_more_rejected_okta_pushes.yml

updating

2022-10-28 12:57:20 -04:00

okta_user_logins_from_multiple_cities.yml

Refactored security content

2022-03-09 14:43:09 +01:00

splunk_account_discovery_drilldown_dashboard_disclosure.yml

#2398 fix

2022-10-03 13:01:30 -05:00

splunk_code_injection_via_custom_dashboard_leading_to_rce.yml

Create splunk_code_injection_via_custom_dashboard_leading_to_rce.yml

2022-11-02 10:17:07 -07:00

splunk_list_all_nonstandard_admin_accounts.yml

added all detections for release, still need to update dataset links

2023-02-14 06:46:13 -08:00

splunk_xss_in_monitoring_console.yml

Moving failing tests to experimental

2023-02-02 16:32:24 -08:00

suspicious_email_attachment_extensions.yml

powershelldetectionstaghermetic

2022-03-31 15:29:51 -07:00

suspicious_java_classes.yml

Refactored security content

2022-03-09 14:43:09 +01:00

web_servers_executing_suspicious_processes.yml

Refactored security content

2022-03-09 14:43:09 +01:00