security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule tuning] Fix typo in ML rule descriptions (#1484)

Browse Source 
(cherry picked from commit 51a2bc815b)
This commit is contained in:
Justin Ibarra
2021-09-14 08:37:01 -08:00
committed by github-actions[bot]
parent 938cc5b8b5
commit 31202bf4f6
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/ml/ml_auth_spike_in_logon_events_from_a_source_ip.toml
+2 -2
View File
@@ -1,14 +1,14 @@
[metadata]
creation_date = "2021/06/10"
maturity = "production"
updated_date = "2021/06/10"
updated_date = "2021/09/14"
min_stack_version = "7.14.0"
[rule]
anomaly_threshold = 75
author = ["Elastic"]
description = """
A machine learning job found an unusually large spike in successful authentication events events from a particular
A machine learning job found an unusually large spike in successful authentication events from a particular
source IP address. This can be due to password spraying, user enumeration or brute force activity.
"""
false_positives = [