Samirbous 1d7e597662 [Tuning] Suspicious Microsoft 365 Mail Access by ClientAppId (#3677) ...

* Update initial_access_microsoft_365_abnormal_clientappid.toml

* Update initial_access_microsoft_365_abnormal_clientappid.toml

* Update initial_access_microsoft_365_abnormal_clientappid.toml

* Update initial_access_microsoft_365_abnormal_clientappid.toml

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit f0b226c2b0)

2024-05-15 17:20:18 +00:00

..

aws

[New Rule] Route53 Resolver Query Log Configuration Deleted (#3592)

2024-05-14 14:32:44 +00:00

azure

Fix minstack version for 0365 in azure integration rules (#3612)

2024-04-22 13:55:15 +00:00

beaconing

Beaconing - Add whitelist to rules, with some more processes (#3497)

2024-03-14 19:56:12 +00:00

cloud_defend

[FR] Add max_signal note, unit test, and rule tuning (#3669)

2024-05-14 16:23:18 +00:00

cyberarkpas

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

ded

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 12:15:22 +00:00

dga

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 12:15:22 +00:00

endpoint

[FR] Add max_signal note, unit test, and rule tuning (#3669)

2024-05-14 16:23:18 +00:00

gcp

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

github

[New Rules] UEBA GItHub BBRs and Rules (#3174)

2024-01-22 17:53:42 +00:00

google_workspace

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

kubernetes

[Rule Tuning] Kubernetes Anonymous Request Authorized (#2865)

2023-07-17 13:03:05 -04:00

lmd

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 12:15:22 +00:00

o365

[Tuning] Suspicious Microsoft 365 Mail Access by ClientAppId (#3677)

2024-05-15 17:20:18 +00:00

okta

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 12:15:22 +00:00

problemchild

Update setup guide for ML integration packages (#3475)

2024-04-01 19:10:34 +00:00