sigma-rules

Files

T

Apoorva Joshi 9a9f5437f2 Update Advanced Analytics config guides (#3302 )

* Updating config guides for Advanced Analytics rules

* More updates

* Update setup instructions for LMD

* Adding more guides

* update TestRuleTiming unit test to ignore advanced analytic rules

* fixed flake error

* Moving config guides under setup instead of note

* Removing leading and trailing whitespace

* Updates as requested by PM

* Updating related integrations, minor updates to setup guides

* fixing unit tests to ignore analytic packages with multiple integration tags

* Update tests/test_all_rules.py

* fixing linting errors

---------

Co-authored-by: Kirti Kirti <kirti.kirti@elastic.co>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

2023-12-13 07:53:41 -08:00

defense_evasion_ml_rare_process_for_a_host.toml

Update Advanced Analytics config guides (#3302 )

2023-12-13 07:53:41 -08:00

defense_evasion_ml_rare_process_for_a_parent_process.toml

Update Advanced Analytics config guides (#3302 )

2023-12-13 07:53:41 -08:00

defense_evasion_ml_rare_process_for_a_user.toml

Update Advanced Analytics config guides (#3302 )

2023-12-13 07:53:41 -08:00

defense_evasion_ml_suspicious_windows_event_high_probability.toml

Update Advanced Analytics config guides (#3302 )