frack113 931fb30853 old experimental rule promotion

2022-10-09 16:54:04 +02:00

..

microsoft365_activity_by_terminated_user.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_activity_from_anonymous_ip_addresses.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_activity_from_infrequent_country.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_data_exfiltration_to_unsanctioned_app.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_from_susp_ip_addresses.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_impossible_travel_activity.yml

chore: test rules: capitalization on FP list entries

2022-05-09 16:07:44 +02:00

microsoft365_logon_from_risky_ip_address.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_new_federated_domain_added.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

microsoft365_potential_ransomware_activity.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_pst_export_alert.yml

Create microsoft365_pst_export_alert.yml (#2665)

2022-09-19 13:19:55 +02:00

microsoft365_susp_inbox_forwarding.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_susp_oauth_app_file_download_activities.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_unusual_volume_of_file_deletion.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

microsoft365_user_restricted_from_sending_email.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00