security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e5fabcbd2f23ddb53f5b1784c47ea144be3216fb
blue-team-tools/rules/cloud
T
History
Mark Morowczynski e5fabcbd2f Merge PR #4429 from @MarkMorow - Add New Azure Identity Protection Rules 
new: Malicious IP Address Sign-In Failure Rate
new: Malicious IP Address Sign-In Suspicious
new: Primary Refresh Token Access Attempt
new: Azure AD Threat Intelligence

---------

Co-authored-by: gleeiamglo <142270304+gleeiamglo@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2023-09-11 22:53:52 +02:00
..
aws
Merge pull request #4294 from @danielbohannon - Permiso p0-LUCR-1 (aka GUI-vil)
2023-08-24 12:21:34 +02:00
azure
Merge PR #4429 from @MarkMorow - Add New Azure Identity Protection Rules
2023-09-11 22:53:52 +02:00
gcp
Promotion rules (#3821)
2022-12-27 12:29:10 +01:00
github
fix: typos in multiple rules (#4011)
2023-02-06 13:53:23 +01:00
gworkspace
Promotion rules (#3821)
2022-12-27 12:29:10 +01:00
m365
change status to test
2023-01-27 06:48:34 +01:00
okta
Merge PR #4428 from @kelnage - Add Okta Cross-Tenant Impersonation Rules
2023-09-11 22:52:18 +02:00
onelogin
Promotion rules (#3821)
2022-12-27 12:29:10 +01:00