Terrance DeJesus 2559b7bb41 [Rule Tuning] Tuning AWS Rules for SAML Provider Updates and Assumed Roles via STS (#3898) ...

* tuning AWS rules for SAML provider updates and assumed roles via STS

* fixed mitre mapping

* adjusted new terms and added user ID to query

* reverting new terms value change

* adding non-ecs to new term checks

* fixing mitre mapping

* Update rules/integrations/aws/privilege_escalation_sts_temp_creds_via_assume_role.toml

* reverting file removal to add diff changes

* changeing rule contents

* reverting rule changes

* added rule contents

* changed file name

* linted

* reverting lint

2024-08-20 11:53:46 -04:00

..

data

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

kuery

[Bug] KQL fails validation on uppercase keywords (#3568)

2024-04-04 18:03:30 -04:00

__init__.py

[FR] Add host family to data path (#2839)

2023-06-12 16:03:33 -04:00

base.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_all_rules.py

[FR] Add Alert Suppression for Addtional Rule Types (#3986)

2024-08-15 15:03:45 -05:00

test_gh_workflows.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_hunt_data.py

[Hunt Tuning] Add Descriptions, Collapse Queries and Re-Generate Docs (#3791)

2024-06-25 09:35:36 -04:00

test_mappings.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_packages.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_python_library.py

[Bug] Query validation failing to capture InSet edge case with ip field types (#3572)

2024-05-06 07:58:42 -04:00

test_rules_remote.py

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

test_schemas.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_specific_rules.py

[Rule Tuning] Tuning AWS Rules for SAML Provider Updates and Assumed Roles via STS (#3898)

2024-08-20 11:53:46 -04:00

test_toml_formatter.py

Test to trigger workflows (#1612)

2021-11-15 10:02:31 -09:00

test_transform_fields.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_utils.py

Update License to Elastic v2 (#944)

2021-03-03 22:12:11 -09:00

test_version_locking.py

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00