Terrance DeJesus 0a08f5e677 [New Rule] New Microsoft 365 Impossible Travel Rules and Deprecation (#4054) ...

* new impossible travel rules for o365; deprecated development rule

* deleted development rule as it has not lock version

* reverted rule deletion, added note about reliability and related rules

2024-09-05 17:36:56 -04:00

..

aws

[New Rule] New Rules AWS Multi-Region Discovery of EC2 Instances and Quotas (#4015)

2024-08-28 13:42:32 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647)

2024-05-06 07:32:02 -05:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819)

2024-07-01 10:31:26 -04:00

beaconing

Revert "Prep for Release 8.16 (#3913)"

2024-07-23 09:50:04 -05:00

cloud_defend

Prep for next release 8.16 (#3919)

2024-07-24 11:19:56 -04:00

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

fim

[Tuning & Changes] Misc rule/hunt tuning (#3875)

2024-07-11 14:55:33 +02:00

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

google_workspace

[Rule BugFix] Google Workspace Oauth2 new app (#3436)

2024-07-11 10:45:17 -04:00

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

[New Rule] New Microsoft 365 Impossible Travel Rules and Deprecation (#4054)

2024-09-05 17:36:56 -04:00

okta

Prep for next release 8.16 (#3919)

2024-07-24 11:19:56 -04:00

problemchild

Update ProblemChild detection rules with High and Low probability (#4000)

2024-08-22 09:17:41 -04:00