divious1 b8a6b1e0db added source field to link to yml

2021-09-20 20:45:22 -04:00

..

active_directory_password_spraying.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

apache_struts_vulnerability.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

asset_tracking.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

aws_cross_account_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

aws_iam_privilege_escalation.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

aws_network_acl_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

aws_privilege_escalation.md

added analytic stories, cleaned up view a bit

2021-09-12 20:39:15 -04:00

aws_security_hub_alerts.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

aws_user_monitoring.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

baron_samedit_cve-2021-3156.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

bits_jobs.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

brand_monitoring.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

clop_ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

cloud_cryptomining.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

cloud_federated_credential_abuse.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

cobalt_strike.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

coldroot_macos_rat.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

collection_and_staging.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

command_and_control.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

container_implantation_monitoring_and_investigation.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

credential_dumping.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

darkside_ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

data_exfiltration.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

data_protection.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

deobfuscate-decode_files_or_information.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

detect_zerologon_attack.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

dev_sec_ops.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

dhs_report_ta18-074a.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

disabling_security_tools.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

dns_amplification_attacks.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

dns_hijacking.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

domain_trust_discovery.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

dynamic_dns.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

emotet_malware__dhs_report_ta18-201a_.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

f5_tmui_rce_cve-2020-5902.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

gcp_cross_account_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

hafnium_group.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

hidden_cobra_malware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

icedid.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

ingress_tool_transfer.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

jboss_vulnerability.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

kubernetes_scanning_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

kubernetes_sensitive_object_access_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

lateral_movement.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

malicious_powershell.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

masquerading_-_rename_system_utilities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

meterpreter.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

monitor_for_updates.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

netsh_abuse.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

nobelium_group.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

office_365_detections.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

orangeworm_attack_group.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

petitpotam_ntlm_relay_on_active_directory_certificate_services.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

printnightmare_cve-2021-34527.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

prohibited_traffic_allowed_or_protocol_mismatch.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

proxyshell.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

ransomware_cloud.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

revil_ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

router_and_infrastructure_security.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

ryuk_ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

samsam_ransomware.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

silver_sparrow.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

spearphishing_attachments.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

sql_injection.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_aws_login_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_aws_s3_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_aws_traffic.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_cloud_authentication_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_cloud_instance_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_cloud_provisioning_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_cloud_user_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_command-line_executions.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_compiled_html_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_dns_traffic.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_emails.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_gcp_storage_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_mshta_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_okta_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_regsvcs_regasm_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_regsvr32_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_rundll32_activity.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_windows_registry_activities.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_wmi_use.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

suspicious_zoom_child_processes.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

trickbot.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

trusted_developer_utilities_proxy_execution_msbuild.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

trusted_developer_utilities_proxy_execution.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

unusual_processes.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

use_of_cleartext_protocols.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_defense_evasion_tactics.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_discovery_techniques.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_dns_sigred_cve-2020-1350.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_file_extension_and_association_abuse.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_log_manipulation.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_persistence_techniques.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_privilege_escalation.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

windows_service_abuse.md

added source field to link to yml

2021-09-20 20:45:22 -04:00

xmrig.md

added source field to link to yml

2021-09-20 20:45:22 -04:00