sigma-rules

Files

T

Terrance DeJesus 124fdc93a7 [New Rule] AWS Systems Manager SecureString Parameter Request with Decryption Flag (#3590 )

* new rule 'First Occurrence of Resource Accessing AWS Systems Manager SecureString Parameters with Decryption Flag'

* updated rule contents

* added investigation guide; changed new terms to uder.id

* adjusted time window

* adjusted rule name

* updated query, adjusted new terms value

(cherry picked from commit 05ac4e1bd3)

2024-06-05 14:26:05 +00:00

aws

[New Rule] AWS Systems Manager SecureString Parameter Request with Decryption Flag (#3590 )

2024-06-05 14:26:05 +00:00

azure

Back-porting Version Trimming (#3704 )

2024-05-22 19:18:10 +00:00

beaconing

Update rule setup instructions for UEBA packages (#3652 )

2024-05-28 19:24:45 +00:00

cloud_defend

Back-porting Version Trimming (#3704 )