Jonhnathan 9144dc0448 [New Rule] Building Block Rules - Part 2 (#2923) ...

* [New Rule] Building Block Rules - Part 2

* .

* Update rules_building_block/defense_evasion_dll_hijack.toml

* Update rules_building_block/defense_evasion_file_permission_modification.toml

* Update rules_building_block/discovery_posh_password_policy.toml

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

2023-08-17 13:00:50 -03:00

..

api_schemas

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

beats_schemas

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

ecs_schemas

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

endgame_schemas

Updated ECS mappings from keyword to wildcard (#2518)

2023-02-07 09:43:19 -05:00

endpoint_schemas

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

attack-v13.1.0.json.gz

updated ATT&CK 13.0 to 13.1 (#2795)

2023-05-16 11:01:52 -04:00

commit-and-push.sh

Update commit-and-push.sh (#2640)

2023-03-09 17:31:19 -05:00

deprecated_rules.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9,8.10 (#3019)

2023-08-17 09:09:05 -04:00

downloadable_updates.json

[FR] Generate mdx docs (#2718)

2023-05-03 16:27:30 -04:00

integration-manifests.json.gz

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

integration-schemas.json.gz

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

non-ecs-schema.json

[New Rule] Building Block Rules - Part 2 (#2923)

2023-08-17 13:00:50 -03:00

packages.yml

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

rule-mapping.yml

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

[FR] 8.10 Release Preparation and Update Main Branch to 8.11 (#3012)

2023-08-16 14:23:44 -04:00

test_toml.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

version.lock.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9,8.10 (#3019)

2023-08-17 09:09:05 -04:00