Jonhnathan 0a23d820c9 [Rule Tuning] Fix event.outcome condition on O365 failed logon related rules (#1687) ...

* Tune rule query

* Update credential_access_microsoft_365_potential_password_spraying_attack.toml

* Update defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml

* Revert "Update defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml"

This reverts commit 5a50aeeff6f1bb23bfeccdc6845e04eb7ccaea43.

2022-01-27 09:22:42 -03:00

..

aws

[Rule Tuning] updates from documentation review for 7.16 (#1645)

2021-12-07 15:42:58 -09:00

azure

[Rule Tuning] Azure Virtual Network Device Modified or Deleted (#1679)

2022-01-27 09:15:22 -03:00

cyberarkpas

Add min_stack_comments to metadata schema (#1573)

2021-10-19 20:52:53 -08:00

endpoint

Add missing Integration field (#1537)

2021-10-26 12:05:12 -03:00

gcp

[Rule tuning] fix name for GCP Kubernetes Rolebindings Created or Patched (#1661)

2021-12-13 08:59:56 -09:00

google_workspace

[Rule Tuning] Update Google Workspace rules to remove compatibility with deprecated gsuite integration (#1706)

2022-01-25 16:51:20 -09:00

o365

[Rule Tuning] Fix event.outcome condition on O365 failed logon related rules (#1687)

2022-01-27 09:22:42 -03:00

okta

Add missing Integration field (#1537)

2021-10-26 12:05:12 -03:00