security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,345 Commits 1 Branch 57 Tags
5f5b57504b645638835d3f83214668326ecb3426
Commit Graph

59 Commits

Author SHA1 Message Date
MetallicHack 030fc2a03e change title and tags in order to match sigmarules 2021-10-05 09:40:25 +02:00
MetallicHack a4100e76b9 change title and tags in order to match sigmarules 2021-10-05 09:39:03 +02:00
MetallicHack fe439e1998 Rename azure_ad_user_added_to_sensitive_role.yml to azure_ad_user_added_to_admin_role.yml 2021-10-04 15:26:58 +02:00
MetallicHack 96f05f7f19 Update azure_ad_user_added_to_sensitive_role.yml 2021-10-04 15:25:55 +02:00
MetallicHack d888ce67bc Create azure_ad_user_added_to_sensitive_role.yml 2021-09-25 21:57:10 +02:00
Austin Songer 715b6ecdda Create azure_new_cloudshell_created.yml 2021-09-12 20:00:08 -05:00
Austin Songer 0de95e355a Update azure_federation_modified.yml 2021-09-06 11:31:52 -05:00
Austin Songer e6e3fc2eec Update azure_federation_modified.yml 2021-09-06 11:16:35 -05:00
Austin Songer 6025df63ee Create azure_federation_modified.yml 2021-09-06 11:06:58 -05:00
Austin Songer e7c5827776 Update azure_service_principal_removed.yml 2021-09-03 22:43:11 -05:00
Austin Songer 0612ea7f6e Update azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:42:26 -05:00
Austin Songer c420a17e05 Update azure_service_principal_removed.yml 2021-09-03 22:29:21 -05:00
Austin Songer fda1e3362e Update azure_owner_removed_from_application_or_service_principal.yml 2021-09-03 22:29:12 -05:00
Austin Songer 9d26116d27 Update azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:29:02 -05:00
Austin Songer 8fe7bfc452 Update azure_application_deleted.yml 2021-09-03 22:28:53 -05:00
Austin Songer c021ae9e7c Update and rename azure_device_or_configuration_deleted.yml to azure_device_or_configuration_modified_or_deleted.yml 2021-09-03 22:28:35 -05:00
Austin Songer 6744fb7f2e Create azure_application_deleted.yml 2021-09-03 22:25:34 -05:00
Austin Songer 70ac0104cf Create azure_service_principal_removed.yml 2021-09-03 22:25:01 -05:00
Austin Songer 6e15618c75 Create azure_device_or_configuration_deleted.yml 2021-09-03 22:24:32 -05:00
Austin Songer b478132769 Create azure_owner_removed_from_application_or_service_principal.yml 2021-09-03 22:23:59 -05:00
Austin Songer c0bdc3fb1b Create azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:23:21 -05:00
frack113 89562273cc Merge pull request #1984 from austinsonger/azure_app_credential_modification.yml 
azure_app_credential_modification.yml
 2021-09-03 08:17:55 +02:00
frack113 88389f945d Merge pull request #1983 from austinsonger/azure_service_principal_created.yml 
azure_service_principal_created.yml
 2021-09-03 08:14:47 +02:00
Austin Songer 775c0e8e7f Update azure_app_credential_modification.yml 2021-09-02 21:00:21 -05:00
Austin Songer 643ec0abe3 Update azure_service_principal_created.yml 2021-09-02 21:00:02 -05:00
Austin Songer 10af7bbdb1 Create azure_app_credential_modification.yml 2021-09-02 20:53:32 -05:00
Austin Songer d25fd420d6 Create azure_service_principal_created.yml 2021-09-02 20:48:35 -05:00
Austin Songer 1272c76ae7 Create azure_network_firewall_policy_modified_or_deleted.yml 2021-09-02 20:31:27 -05:00
Roberto Rodriguez f98970ef06 adding basic rules to detect behavior around AAD health agents and AAD Hybrid Health AD FS services in Azure 2021-08-26 16:10:42 -04:00
frack113 07a87aa7f8 Merge pull request #1858 from frack113/fix_pr718 
Replace pr718
 2021-08-21 18:02:30 +02:00
frack113 9b106dcc7d Merge pull request #1880 from austinsonger/azure_suppression_rule_created.yml 
azure_suppression_rule_created.yml
 2021-08-20 09:04:48 +02:00
frack113 d58b1e8e40 Merge pull request #1879 from austinsonger/azure_application_gateway_modified_or_deleted.yml 
azure_application_gateway_modified_or_deleted.yml
 2021-08-20 09:03:57 +02:00
frack113 4b08aac47f Merge pull request #1878 from austinsonger/azure_application_security_group_modified_or_deleted.yml 
azure_application_security_group_modified_or_deleted.yml
 2021-08-20 09:01:39 +02:00
frack113 f882ebda35 fix status 2021-08-20 06:08:28 +02:00
Austin Songer 842ade16be Forgot to add my username to some of the rules. 2021-08-20 02:09:31 +00:00
Austin Songer 6ae62488b3 Merge branch 'SigmaHQ:master' into azure_application_gateway_modified_or_deleted.yml 2021-08-19 20:32:35 -05:00
Austin Songer d2f87feb7b Merge branch 'SigmaHQ:master' into azure_application_security_group_modified_or_deleted.yml 2021-08-19 20:31:48 -05:00
frack113 39617c9807 Merge pull request #1865 from austinsonger/azure_keyvault_secrets_modified_or_deleted.yml 
add azure_keyvault_secrets_modified_or_deleted.yml
 2021-08-19 17:06:28 +02:00
Austin Songer cc51e054e3 Update azure_keyvault_secrets_modified_or_deleted.yml 2021-08-19 09:04:22 -05:00
Austin Songer 36406d5781 Fixed Spelling 2021-08-18 18:53:28 +00:00
frack113 c7d697e720 Merge pull request #1864 from austinsonger/azure_key_vault_modified_or_deleted.yml 
azure_keyvault_modified_or_deleted.yml
 2021-08-18 18:30:20 +02:00
Austin Songer 309e71491b Update azure_keyvault_key_modified_or_deleted.yml 2021-08-17 08:44:39 -05:00
Austin Songer 23d0477120 Update azure_keyvault_secrets_modified_or_deleted.yml 2021-08-17 08:42:41 -05:00
Austin Songer 16e0def41d Update and rename azure_vault_key_modified_or_deleted.yml to azure_keyvault_key_modified_or_deleted.yml 2021-08-17 08:31:22 -05:00
Austin Songer ecdcd8f843 Rename azure_key_vault_modified_or_deleted.yml to azure_keyvault_modified_or_deleted.yml 2021-08-17 08:30:10 -05:00
Austin Songer 9986515b59 Update azure_suppression_rule_created.yml 2021-08-17 00:04:11 -05:00
Austin Songer 84e96d5b4f Create azure_suppression_rule_created.yml 2021-08-17 00:04:00 -05:00
Austin Songer 1fcc1701b7 Create azure_keyvault_secrets_modified_or_deleted.yml 2021-08-16 23:54:57 -05:00
Austin Songer 7abceb07ce Create azure_vault_key_modified_or_deleted.yml 2021-08-16 23:50:56 -05:00
Austin Songer 758293e2f9 Delete azure_application_security_group_modified_or_deleted.yml 2021-08-16 23:42:15 -05:00