security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ff178408c8e51ea209b0d4cb43aef2a1d6d4f672
blue-team-tools/rules/cloud/azure
T
History
Michael Epping ff178408c8 Added device registration w/o MFA sigma rule
2022-06-28 11:12:12 -07:00
..
azure_aad_secops_signin_failure_bad_password_threshold.yml
Rename azure_aad_secops _signin_failure_bad_password_threshold.yml to azure_aad_secops_signin_failure_bad_password_threshold.yml
2022-05-31 20:43:32 +02:00
azure_aadhybridhealth_adfs_new_server.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_aadhybridhealth_adfs_service_delete.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_account_lockout.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_ad_device_registration_or_join_without_mfa.yml
Added device registration w/o MFA sigma rule
2022-06-28 11:12:12 -07:00
azure_ad_user_added_to_admin_role.yml
fix: old azure notation
2022-03-22 18:15:33 +01:00
azure_app_credential_added.yml
Update azure_app_credential_added.yml
2022-05-27 06:56:07 +02:00
azure_app_credential_modification.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_application_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_application_gateway_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_application_security_group_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_change_to_authentication_method.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_container_registry_created_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_creating_number_of_resources_detection.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_device_no_longer_managed_or_compliant.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_device_or_configuration_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_dns_zone_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_federation_modified.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_firewall_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_firewall_rule_collection_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_granting_permission_detection.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_keyvault_key_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_keyvault_modified_or_deleted.yml
fix: remove . from title
2022-04-06 17:04:10 +02:00
azure_keyvault_secrets_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_admission_controller.yml
chore: test rules: reactivate single value list check
2022-05-10 17:13:04 +02:00
azure_kubernetes_cluster_created_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_cronjob.yml
chore: test rules: reactivate single value list check
2022-05-10 17:13:04 +02:00
azure_kubernetes_events_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_network_policy_change.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_pods_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_role_access.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_rolebinding_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_secret_or_config_object_access.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_kubernetes_service_account_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_login_to_disabled_account.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_mfa_denies.yml
Update azure_mfa_denies.yml
2022-03-24 21:26:13 +01:00
azure_mfa_disabled.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_mfa_interrupted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_network_firewall_policy_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_network_firewall_rule_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_network_p2s_vpn_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_network_security_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_network_virtual_device_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_new_cloudshell_created.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_owner_removed_from_application_or_service_principal.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_rare_operations.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_service_principal_created.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_service_principal_removed.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_subscription_permissions_elevation_via_activitylogs.yml
chore: test rules: reactivate single value list check
2022-05-10 17:13:04 +02:00
azure_subscription_permissions_elevation_via_auditlogs.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_suppression_rule_created.yml
chore: test rules: reactivate single value list check
2022-05-10 17:13:04 +02:00
azure_unusual_authentication_interruption.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_user_login_blocked_by_conditional_access.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_virtual_network_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00
azure_vpn_connection_modified_or_deleted.yml
refactor: first bigger log source refactoring
2022-03-22 17:58:29 +01:00