Florian Roth e91fc4486e refactor: first bigger log source refactoring ...

see discussion here: https://github.com/SigmaHQ/sigma/discussions/2835

2022-03-22 17:58:29 +01:00

..

microsoft365_activity_by_terminated_user.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_activity_from_anonymous_ip_addresses.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_activity_from_infrequent_country.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_data_exfiltration_to_unsanctioned_app.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_from_suspicious_ip_addresses.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_impossible_travel_activity.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_logon_from_risky_ip_address.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_new_federated_domain_added.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_potential_ransomware_activity.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_suspicious_inbox_forwarding.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_suspicious_oauth_app_file_download_activities.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_unusual_volume_of_file_deletion.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_user_restricted_from_sending_email.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00