sigma-rules

Files

T

Terrance DeJesus 9f67585332 [New Rule] AWS EC2 Instance Connect SSH Public Key Uploaded (#3634 )

* new rule 'AWS EC2 Instance Connect SSH Public Key Uploaded'

* changed tactic to privilege escalation

* added additional reference

* added investigation guide

* updated summary

* changed risk score to medium; adjusted tags

* fixed mitre mapping

* Update rules/integrations/aws/privilege_escalation_ec2_instance_connect_ssh_public_key_uploaded.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

2024-06-05 10:33:42 -04:00

aws

[New Rule] AWS EC2 Instance Connect SSH Public Key Uploaded (#3634 )

2024-06-05 10:33:42 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647 )

2024-05-06 07:32:02 -05:00

azure

Back-porting Version Trimming (#3704 )

2024-05-23 00:45:10 +05:30

beaconing

Update rule setup instructions for UEBA packages (#3652 )