security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2ff8d1bb567aa1360febad2688074d26b959afbb
sigma-rules/rules/integrations/pad
T
History
Kirti Sodhi 2ff8d1bb56 Add new ML detection rules for Privileged Access Detection (#4516) 
Add detection-rules for privileged access detection integration
2025-03-19 11:02:28 -04:00
..
privileged_access_ml_linux_high_count_privileged_process_events_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_linux_high_median_process_command_line_entropy_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_linux_rare_process_executed_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_high_sum_concurrent_sessions_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_rare_host_name_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_rare_region_name_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_rare_source_ip_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_spike_in_group_application_assignment_changes.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_spike_in_group_lifecycle_changes.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_spike_in_group_membership_changes.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_spike_in_group_privilege_changes.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_okta_spike_in_user_lifecycle_management_changes.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_high_count_group_management_events.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_high_count_special_logon_events.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_high_count_special_privilege_use_events.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_high_count_user_account_management_events.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_rare_device_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_rare_group_name_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_rare_privilege_assigned_to_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_rare_region_name_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00
privileged_access_ml_windows_rare_source_ip_by_user.toml
Add new ML detection rules for Privileged Access Detection (#4516)
2025-03-19 11:02:28 -04:00