Terrance DeJesus 05ac4e1bd3 [New Rule] AWS Systems Manager SecureString Parameter Request with Decryption Flag (#3590) ...

* new rule 'First Occurrence of Resource Accessing AWS Systems Manager SecureString Parameters with Decryption Flag'

* updated rule contents

* added investigation guide; changed new terms to uder.id

* adjusted time window

* adjusted rule name

* updated query, adjusted new terms value

2024-06-05 10:22:38 -04:00

..

aws

[New Rule] AWS Systems Manager SecureString Parameter Request with Decryption Flag (#3590)

2024-06-05 10:22:38 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647)

2024-05-06 07:32:02 -05:00

azure

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

beaconing

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

cloud_defend

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

google_workspace

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

Refresh MITRE Attack v15.1.0 (#3725)

2024-06-04 20:14:58 +05:30

okta

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 09:09:40 -03:00

problemchild

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30