Jason Brewer 322e711936 CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description.

2019-11-25 18:17:06 -08:00

..

brand_abuse_dns.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

brand_abuse_email.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

brand_abuse_web.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dynamic_dns_providers.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

dynamic_dns_web_traffic.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

ec2_excessive_runinstances_mltk_input_filter.yml

CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description.

2019-11-25 18:17:06 -08:00

ec2_excessive_terminateinstances_mltk_input_filter.yml

CRL-1645 - Fixing macros for excessive runinstances and terminateinstances to use src_user in description.

2019-11-25 18:17:06 -08:00

ec2ModificationAPIs.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_0365.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_amazon.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_aws.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_facebook.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_github.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_google.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

evilginx_phishlets_outlook.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

filter_rare_process_whitelist.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

investigate_cloud_compute_instance_activities_output_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

investigate_user_activities_in_all_cloud_region_output_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

investigate_user_activities_in_single_cloud_region_output_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

isWindowsSystemFile.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

NetworkACLEvents.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_creations_by_user_input_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml

Added search_window macros to searches

2019-10-17 09:28:41 -07:00

previously_seen_cloud_compute_image_input_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_image_search_window_begin_offset.yml

Added search_window macros to searches

2019-10-17 09:28:41 -07:00

previously_seen_cloud_compute_instance_types_input_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml

Added search_window macros to searches

2019-10-17 09:28:41 -07:00

previously_seen_cloud_regions_input_filter.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

previously_seen_cloud_regions_search_window_begin_offset.yml

Updated generate to output for ASX

2019-10-16 20:54:13 -07:00

prohibited_apps_launching_cmd.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

prohibited_softwares.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

ransomware_extensions.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

ransomware_notes.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

remove_valid_domains.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

runstory.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

securityGroupAPIs.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_email_attachments.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

suspicious_writes.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

system_network_configuration_discovery_tools.yml

Changed json to yml

2019-10-16 16:38:05 +02:00

uncommon_processes.yml

Changed json to yml

2019-10-16 16:38:05 +02:00