Austin Songer 1771e33876 [New Rule] AWS Suspicious SAML Activity (#1498) ...

* Create privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Update privilege_escalation_aws_suspicious_saml_activity.toml

* Add trailing /

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>

(cherry picked from commit 702524b1f7)

2021-10-16 02:12:06 +00:00

..

aws

[New Rule] AWS Suspicious SAML Activity (#1498)

2021-10-16 02:12:06 +00:00

azure

[New Rule] Azure Full Network Packet Capture Detected (#1420)

2021-10-16 02:07:22 +00:00

cyberarkpas

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 21:25:48 +00:00

endpoint

Revert #1440 new endpoint promotion rule (#1470)

2021-09-03 14:08:22 +00:00

gcp

[New Rule] GCP Kubernetes Rolebindings Created or Patched (#1267)

2021-10-15 18:43:23 +00:00

google_workspace

[Rule tuning] Revise rule description and other text (#1398)

2021-08-03 21:08:48 +00:00

o365

[New Rule] Microsoft 365 - Mass download by a single user (#1348)

2021-10-15 19:02:52 +00:00

okta

Made these pull requests before the directory restructure. (#1517)

2021-10-05 12:30:40 +00:00