sigma-rules

Files

T

Isai e1cbf9f684 [New rules] AWS IAM AdministratorAccess Policy Attached to : User, Group, Role(es|ql) (#3735 )

* [New Rule] AWS IAM AdministratorAccess Policy Attached to User

issue...

* add source.address and source.geo.location

* fix threat tactic ids

* AdministratorAccess Policy Attached to Group

* AdminstratoAccess Policy Attached to Role

* reduce severity to medium

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

2024-06-07 18:31:06 -04:00

aws

[New rules] AWS IAM AdministratorAccess Policy Attached to : User, Group, Role(es|ql) (#3735 )

2024-06-07 18:31:06 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647 )

2024-05-06 07:32:02 -05:00

azure

Back-porting Version Trimming (#3704 )

2024-05-23 00:45:10 +05:30

beaconing

Update rule setup instructions for UEBA packages (#3652 )