security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f627ff2270abb0e9fc1fa2f53a58ba83bfdf4b53
blue-team-tools/rules
T
History
Mostafa Moradian f627ff2270 Merge PR #5964 from @mostafa - Update Okta Rules to use CamelCase fields 
update: Okta 2023 Breach Indicator Of Compromise - Update field name to use CamleCase
update: Okta Admin Role Assigned to an User or Group - Update field name to use CamleCase
update: Okta Admin Role Assignment Created - Update field name to use CamleCase
update: Okta API Token Created - Update field name to use CamleCase
update: Okta API Token Revoked - Update field name to use CamleCase
update: Okta Application Modified or Deleted - Update field name to use CamleCase
update: Okta Application Sign-On Policy Modified or Deleted - Update field name to use CamleCase
update: Okta FastPass Phishing Detection - Update field name to use CamleCase
update: Okta Identity Provider Created - Update field name to use CamleCase
update: Okta MFA Reset or Deactivated - Update field name to use CamleCase
update: Okta Network Zone Deactivated or Deleted - Update field name to use CamleCase
update: Okta New Admin Console Behaviours - Update field name to use CamleCase
update: Potential Okta Password in AlternateID Field - Update field name to use CamleCase
update: Okta Policy Modified or Deleted - Update field name to use CamleCase
update: Okta Policy Rule Modified or Deleted - Update field name to use CamleCase
update: Okta Security Threat Detected - Update field name to use CamleCase
update: Okta Suspicious Activity Reported by End-user - Update field name to use CamleCase
update: Okta Unauthorized Access to App - Update field name to use CamleCase
update: Okta User Account Locked Out - Update field name to use CamleCase
update: New Okta User Created - Update field name to use CamleCase
update: Okta User Session Start Via An Anonymising Proxy Service - Update field name to use CamleCase
2026-04-27 21:55:40 +02:00
..
application
Merge PR #5938 from @marcopedrinazzi - Fix file extension from .yaml to .yml for consistency
2026-04-20 14:44:21 +02:00
category
Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002
2025-06-13 10:00:52 +02:00
cloud
Merge PR #5799 from @nasbench - Update logic to use errorCode instead for better mapping and accuracy
2025-12-09 10:17:50 +01:00
identity
Merge PR #5964 from @mostafa - Update Okta Rules to use CamelCase fields
2026-04-27 21:55:40 +02:00
linux
Merge PR #5899 from @HueCodes - new: Python Base64 Encoded Inline Command Execution
2026-04-23 14:37:28 +02:00
macos
Merge PR #5791 from @Niicolaa - fix: add correct osascript path
2025-12-09 08:03:04 +05:45
network
Merge PR #5823 from @darses - Update DNS Query to External Service Interaction Domains
2026-01-24 12:37:27 +01:00
web
Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field
2025-11-24 09:54:29 +01:00
windows
Merge PR #5399 from @swachchhanda000 - Update LSA PPL Protection Setting Modification via CommandLine
2026-04-24 19:48:55 +02:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink