brokensound77 a77bd6178f Merge remote-tracking branch 'upstream/7.11' into merge-7.11-to-7.12 ...

# Conflicts:
#	rules/linux/privilege_escalation_setgid_bit_set_via_chmod.toml

2021-02-17 14:11:50 -09:00

..

beats_schemas

Add support to validate against dev ECS and beats schemas (#691)

2020-12-08 13:29:56 -09:00

ecs_schemas

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

attack-crosswalk.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-technique-redirects.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-v7.2.json.gz

Refresh ATT&CK data to v7.2 and expand threat validation (#330)

2020-09-23 22:03:29 -08:00

deprecated_rules.json

Update package summary extras produced during package generation (#341)

2020-09-30 14:43:45 -08:00

non-ecs-schema.json

[New Rule] Microsoft 365 Teams Custom Application Interaction Allowed (#657)

2020-12-08 17:36:47 -05:00

packages.yml

bump package version to 7.12

2020-12-09 13:51:19 -09:00

rule-mapping.yml

[New Rule] AWS EC2 Snapshot Activity

2020-07-07 15:10:06 -06:00

test_toml.json

Add rule loader and dependencies

2020-06-29 23:17:42 -06:00

version.lock.json

[Rule Tuning] Remove timestamp_override for endgame-* promotion rules (#951)

2021-02-17 13:48:57 -09:00