Commit Graph

3 Commits

Author SHA1 Message Date
Terrance DeJesus b00de3e445 [Rule Tuning] adjust duplicate ssh brute force rule names and add unit test (#2321)
* added unit test for duplicate rule names

* adjusted macos file name and updated date values

* removed unit test and added assertion error in rule loader

* addressed flake errors

* addressed flake errors

* Update rules/linux/credential_access_potential_linux_ssh_bruteforce.toml
2022-09-26 10:04:38 -04:00
shashank-elastic 2f062ecf84 Add investigation guides (#2326) 2022-09-23 20:18:48 +05:30
shashank-elastic 725f7f3480 Linux rule to detect potential ssh brute force attack (#2291)
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
2022-09-19 20:26:18 +05:30