6 Commits

Author	SHA1	Message	Date
David French	f438a222d5	[New Rule] Attempt to Modify or Delete Okta Application Sign On Policy (#10) ... * Add okta rule for policy modification/delete * Update rule name Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com> * Update rules/okta/okta_attempt_to_modify_or_delete_application_sign_on_policy.toml Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com> * Add event.module value to query * Update okta_attempt_to_modify_or_delete_application_sign_on_policy.toml Add event.category and event.type values to query * Update rules/okta/okta_attempt_to_modify_or_delete_application_sign_on_policy.toml Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com> Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>	2020-07-02 08:52:55 -06:00
Francesco Soncina	46a4008570	[Rule tuning] Fix evasion for disable iptables rule (#5)	2020-07-01 12:08:32 -06:00
Erkin Djindjiev	1fac018f10	Update MySQL port to 3306 not 3336 (#2)	2020-07-01 09:52:04 -06:00
Ross Wolf	975aa61bc0	Remove links to empty rules subfolders	2020-06-30 10:32:03 -06:00
Ross Wolf	fb0d36941c	Add documentation and update license notice	2020-06-29 23:21:16 -06:00
Ross Wolf	5fcece8416	Populate rules/ directory. ... Co-Authored-By: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-Authored-By: Craig Chamberlain <randomuserid@users.noreply.github.com> Co-Authored-By: David French <56409778+threat-punter@users.noreply.github.com> Co-Authored-By: Derek Ditch <dcode@users.noreply.github.com> Co-Authored-By: Justin Ibarra <brokensound77@users.noreply.github.com>	2020-06-29 22:57:03 -06:00