3 Commits

Author	SHA1	Message	Date
Jonhnathan	b1989a921b	[Security Content] Small tweaks on the setup guides (#3308) ... * [Security Content] Small tweaks on the setup guides * Additional Fixes * Avoid touching deprecated rules Removed changes from: - rules/integrations/beaconing/command_and_control_beaconing.toml - rules/integrations/beaconing/command_and_control_beaconing_high_confidence.toml - rules/linux/discovery_process_capabilities.toml - rules/linux/privilege_escalation_dac_permissions.toml - rules/linux/privilege_escalation_enlightenment_window_manager.toml - rules/linux/privilege_escalation_gdb_sys_ptrace_elevation.toml - rules/linux/privilege_escalation_gdb_sys_ptrace_netcon.toml - rules/linux/privilege_escalation_suspicious_chown_fowner_elevation.toml - rules/linux/privilege_escalation_suspicious_uid_guid_elevation.toml - rules_building_block/discovery_capnetraw_capability.toml - rules_building_block/persistence_cap_sys_admin_added_to_new_binary.toml (selectively cherry picked from commit 458e67918a)	2024-03-11 12:14:53 +00:00
Ruben Groenewoud	3183bfea23	[Tuning] Event.dataset removal & Tag Addition (#3451) ... * [Tuning] Removed event.dataset and added tag * [Tuning] Removed event.dataset and added tag * fixed typo --------- Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com> Removed changes from: - rules/linux/privilege_escalation_suspicious_chown_fowner_elevation.toml (selectively cherry picked from commit 3484cac7eb)	2024-02-20 14:23:14 +00:00
Ruben Groenewoud	ab977df20d	[New Rule] Kernel Driver Load by non-root User (#3378) ... * [New Rule] Kernel Driver Load by non-root User * setup note change * removed unnecessary index (cherry picked from commit a9285445cf)	2024-01-17 08:40:55 +00:00