frack113 1033b3f404 change status to test

2023-01-27 06:48:34 +01:00

..

microsoft365_activity_by_terminated_user.yml

Order yaml field

2022-10-25 07:34:10 +02:00

microsoft365_activity_from_anonymous_ip_addresses.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_activity_from_infrequent_country.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_data_exfiltration_to_unsanctioned_app.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_from_susp_ip_addresses.yml

Order yaml field

2022-10-25 07:34:10 +02:00

microsoft365_impossible_travel_activity.yml

Order yaml field

2022-10-25 07:34:10 +02:00

microsoft365_logon_from_risky_ip_address.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_new_federated_domain_added.yml

change status to test

2023-01-27 06:48:34 +01:00

microsoft365_potential_ransomware_activity.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_pst_export_alert_using_new_compliancesearchaction.yml

Add new rule to detect PST export when eDiscovery alert policy is disabled (M365)

2022-11-18 08:40:39 +01:00

microsoft365_pst_export_alert.yml

Rule Dev

2022-11-18 11:15:28 +01:00

microsoft365_susp_inbox_forwarding.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_susp_oauth_app_file_download_activities.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_unusual_volume_of_file_deletion.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_user_restricted_from_sending_email.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00