Commit Graph

31 Commits

Author SHA1 Message Date
Roberto Rodriguez f98970ef06 adding basic rules to detect behavior around AAD health agents and AAD Hybrid Health AD FS services in Azure 2021-08-26 16:10:42 -04:00
frack113 07a87aa7f8 Merge pull request #1858 from frack113/fix_pr718
Replace pr718
2021-08-21 18:02:30 +02:00
frack113 9b106dcc7d Merge pull request #1880 from austinsonger/azure_suppression_rule_created.yml
azure_suppression_rule_created.yml
2021-08-20 09:04:48 +02:00
frack113 d58b1e8e40 Merge pull request #1879 from austinsonger/azure_application_gateway_modified_or_deleted.yml
azure_application_gateway_modified_or_deleted.yml
2021-08-20 09:03:57 +02:00
frack113 4b08aac47f Merge pull request #1878 from austinsonger/azure_application_security_group_modified_or_deleted.yml
azure_application_security_group_modified_or_deleted.yml
2021-08-20 09:01:39 +02:00
frack113 f882ebda35 fix status 2021-08-20 06:08:28 +02:00
Austin Songer 842ade16be Forgot to add my username to some of the rules. 2021-08-20 02:09:31 +00:00
Austin Songer 6ae62488b3 Merge branch 'SigmaHQ:master' into azure_application_gateway_modified_or_deleted.yml 2021-08-19 20:32:35 -05:00
Austin Songer d2f87feb7b Merge branch 'SigmaHQ:master' into azure_application_security_group_modified_or_deleted.yml 2021-08-19 20:31:48 -05:00
frack113 39617c9807 Merge pull request #1865 from austinsonger/azure_keyvault_secrets_modified_or_deleted.yml
add azure_keyvault_secrets_modified_or_deleted.yml
2021-08-19 17:06:28 +02:00
Austin Songer cc51e054e3 Update azure_keyvault_secrets_modified_or_deleted.yml 2021-08-19 09:04:22 -05:00
Austin Songer 36406d5781 Fixed Spelling 2021-08-18 18:53:28 +00:00
frack113 c7d697e720 Merge pull request #1864 from austinsonger/azure_key_vault_modified_or_deleted.yml
azure_keyvault_modified_or_deleted.yml
2021-08-18 18:30:20 +02:00
Austin Songer 309e71491b Update azure_keyvault_key_modified_or_deleted.yml 2021-08-17 08:44:39 -05:00
Austin Songer 23d0477120 Update azure_keyvault_secrets_modified_or_deleted.yml 2021-08-17 08:42:41 -05:00
Austin Songer 16e0def41d Update and rename azure_vault_key_modified_or_deleted.yml to azure_keyvault_key_modified_or_deleted.yml 2021-08-17 08:31:22 -05:00
Austin Songer ecdcd8f843 Rename azure_key_vault_modified_or_deleted.yml to azure_keyvault_modified_or_deleted.yml 2021-08-17 08:30:10 -05:00
Austin Songer 9986515b59 Update azure_suppression_rule_created.yml 2021-08-17 00:04:11 -05:00
Austin Songer 84e96d5b4f Create azure_suppression_rule_created.yml 2021-08-17 00:04:00 -05:00
Austin Songer 1fcc1701b7 Create azure_keyvault_secrets_modified_or_deleted.yml 2021-08-16 23:54:57 -05:00
Austin Songer 7abceb07ce Create azure_vault_key_modified_or_deleted.yml 2021-08-16 23:50:56 -05:00
Austin Songer 758293e2f9 Delete azure_application_security_group_modified_or_deleted.yml 2021-08-16 23:42:15 -05:00
Austin Songer 824d64a9ce Create azure_key_vault_modified_or_deleted.yml 2021-08-16 23:41:43 -05:00
Austin Songer 3c8f27ba76 Create azure_application_security_group_modified_or_deleted.yml 2021-08-16 23:31:45 -05:00
Austin Songer 144cfcb016 Create azure_application_gateway_modified_or_deleted.yml 2021-08-16 23:30:30 -05:00
frack113 050fb2b77d fix more errors 2021-08-15 19:17:56 +02:00
frack113 0de1949c59 fix azure_rare_operations.yml 2021-08-15 19:11:43 +02:00
frack113 c3457c9911 fix titles 2021-08-15 19:05:00 +02:00
frack113 12396f615c remove duplicate rule and fix errors 2021-08-15 16:52:24 +02:00
frack113 a75859a976 First commit 2021-08-15 16:00:14 +02:00
frack113 1a1221d71c move azure rules 2021-08-13 15:42:54 +02:00