9b19190ea7
Create microsoft365_potential_ransomware_activity.yml
2021-08-19 23:05:05 -05:00
99fbd4ef44
Create microsoft365_unusual_volume_of_file_deletion.yml
2021-08-19 23:00:23 -05:00
810aae5ddd
Update aws_eks_cluster_created_or_deleted.yml
2021-08-19 21:58:36 -05:00
0a3e57cc12
Update
2021-08-20 02:10:32 +00:00
842ade16be
Forgot to add my username to some of the rules.
2021-08-20 02:09:31 +00:00
9a83836070
Update aws_eks_cluster_created_or_deleted.yml
2021-08-19 21:00:36 -05:00
6ae62488b3
Merge branch 'SigmaHQ:master' into azure_application_gateway_modified_or_deleted.yml
2021-08-19 20:32:35 -05:00
d2f87feb7b
Merge branch 'SigmaHQ:master' into azure_application_security_group_modified_or_deleted.yml
2021-08-19 20:31:48 -05:00
0103b148f7
Merge pull request #1876 from rachelrice/update_cloudtrail_rules
...
Update AWS CloudTrail rules
2021-08-19 18:33:07 +02:00
39617c9807
Merge pull request #1865 from austinsonger/azure_keyvault_secrets_modified_or_deleted.yml
...
add azure_keyvault_secrets_modified_or_deleted.yml
2021-08-19 17:06:28 +02:00
cc51e054e3
Update azure_keyvault_secrets_modified_or_deleted.yml
2021-08-19 09:04:22 -05:00
67020bb0ff
Update AWS CloudTrail rules
...
aws_elasticache_security_group_created.yml
aws_elasticache_security_group_modified_or_deleted.yml
Removed spaces from eventNames
aws_s3_data_management_tampering.yml
Fix typo in title, use s3 as eventSource
aws_snapshot_backup_exfiltration.yml
Use ec2 as eventSource
2021-08-19 14:24:43 +01:00
36406d5781
Fixed Spelling
2021-08-18 18:53:28 +00:00
c7d697e720
Merge pull request #1864 from austinsonger/azure_key_vault_modified_or_deleted.yml
...
azure_keyvault_modified_or_deleted.yml
2021-08-18 18:30:20 +02:00
309e71491b
Update azure_keyvault_key_modified_or_deleted.yml
2021-08-17 08:44:39 -05:00
23d0477120
Update azure_keyvault_secrets_modified_or_deleted.yml
2021-08-17 08:42:41 -05:00
16e0def41d
Update and rename azure_vault_key_modified_or_deleted.yml to azure_keyvault_key_modified_or_deleted.yml
2021-08-17 08:31:22 -05:00
ecdcd8f843
Rename azure_key_vault_modified_or_deleted.yml to azure_keyvault_modified_or_deleted.yml
2021-08-17 08:30:10 -05:00
49ab7d7bb6
Merge branch 'SigmaHQ:master' into azure_application_gateway_modified_or_deleted.yml
2021-08-17 08:29:18 -05:00
9986515b59
Update azure_suppression_rule_created.yml
2021-08-17 00:04:11 -05:00
84e96d5b4f
Create azure_suppression_rule_created.yml
2021-08-17 00:04:00 -05:00
1fcc1701b7
Create azure_keyvault_secrets_modified_or_deleted.yml
2021-08-16 23:54:57 -05:00
7abceb07ce
Create azure_vault_key_modified_or_deleted.yml
2021-08-16 23:50:56 -05:00
758293e2f9
Delete azure_application_security_group_modified_or_deleted.yml
2021-08-16 23:42:15 -05:00
824d64a9ce
Create azure_key_vault_modified_or_deleted.yml
2021-08-16 23:41:43 -05:00
3c8f27ba76
Create azure_application_security_group_modified_or_deleted.yml
2021-08-16 23:31:45 -05:00
144cfcb016
Create azure_application_gateway_modified_or_deleted.yml
2021-08-16 23:30:30 -05:00
63733a623e
Merge pull request #1861 from austinsonger/aws_eks_cluster_modified_or_deleted.yml
...
aws_eks_cluster_created_or_deleted.yml
2021-08-17 06:25:18 +02:00
2521ae2ed1
Merge pull request #1859 from austinsonger/gcp_vpn_tunnel_modified_or_deleted.yml
...
gcp_vpn_tunnel_modified_or_deleted.yml
2021-08-17 06:24:49 +02:00
accb675ed5
fix error space
2021-08-16 20:36:55 +02:00
80062ff5cd
Update aws_eks_cluster_created_or_deleted.yml
2021-08-16 12:42:14 -05:00
cfb863a98e
Update aws_eks_cluster_created_or_deleted.yml
2021-08-16 11:52:22 -05:00
ed507b82f4
Update and rename aws_eks_cluster_modified_or_deleted.yml to aws_eks_cluster_created_or_deleted.yml
2021-08-16 09:58:48 -05:00
c7831a3d70
Update gcp_vpn_tunnel_modified_or_deleted.yml
2021-08-16 09:45:31 -05:00
c57ded1ecd
Merge pull request #1852 from austinsonger/gcp_dns_zone_modified_or_deleted.yml
...
gcp_dns_zone_modified_or_deleted.yml
2021-08-16 07:37:28 +02:00
d710818eb2
Merge pull request #1851 from austinsonger/gcp_dlp_re-identifies_sensitive_information.yml
...
gcp_dlp_re-identifies_sensitive_information.yml
2021-08-16 07:37:02 +02:00
0973c51ef5
Merge pull request #1850 from austinsonger/aws_efs_fileshare_modified_or_deleted.yml
...
aws_efs_fileshare_modified_or_deleted.yml
2021-08-16 07:36:43 +02:00
37b8040e76
cleanup gcp_dlp_re-identifies_sensitive_information
...
Remove list with only 1 value
2021-08-16 06:28:40 +02:00
ae12f1f328
Update gcp_dlp_re-identifies_sensitive_information.yml
2021-08-15 22:57:54 -05:00
2524adc6ca
Update aws_efs_fileshare_mount_modified_or_deleted.yml
2021-08-15 22:54:11 -05:00
fb117d5714
Update aws_efs_fileshare_mount_modified_or_deleted.yml
2021-08-15 22:52:53 -05:00
5a22d07392
Update aws_efs_fileshare_modified_or_deleted.yml
2021-08-15 22:52:41 -05:00
ebf2b7a313
Update aws_efs_fileshare_modified_or_deleted.yml
2021-08-15 22:49:01 -05:00
85dc62070b
Update gcp_dlp_re-identifies_sensitive_information.yml
2021-08-15 16:02:12 -05:00
219be99847
Update gcp_dns_zone_modified_or_deleted.yml
2021-08-15 16:02:04 -05:00
e4314aa4b8
Update gcp_dns_zone_modified_or_deleted.yml
2021-08-15 16:01:10 -05:00
3c770c6e4d
Update gcp_dlp_re-identifies_sensitive_information.yml
2021-08-15 15:55:46 -05:00
a37ec60f76
Update gcp_dlp_re-identifies_sensitive_information.yml
2021-08-15 15:44:20 -05:00
dae3d3b446
Update gcp_dlp_re-identifies_sensitive_information.yml
2021-08-15 15:42:15 -05:00
28f6cbe2b8
Update aws_efs_fileshare_modified_or_deleted.yml
2021-08-15 15:37:07 -05:00
Austin Songer