security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
32ca0001ffe4ba717f9318402fbd8f1631dddd0c
sigma-rules/rules/integrations/google_workspace
T
History
Terrance DeJesus 7be5788945 [New Rule] Google Workspace Resource Copied from External Drive (#2627) 
* added new rule 'Google Workspace Resource Copied from External Drive'

* adjusted mitre att&ck subtechnique ID
2023-03-20 14:37:58 -04:00
..
collection_google_drive_ownership_transferred_via_google_workspace.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
collection_google_workspace_custom_gmail_route_created_or_modified.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
defense_evasion_application_removed_from_blocklist_in_google_workspace.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
defense_evasion_domain_added_to_google_workspace_trusted_domains.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
defense_evasion_google_workspace_bitlocker_setting_disabled.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
google_workspace_alert_center_promotion.toml
[New Rule] Add Google Workspace Alert Center Promotional Rule (#2471)
2023-01-17 12:09:13 -05:00
impact_google_workspace_admin_role_deletion.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
impact_google_workspace_mfa_enforcement_disabled.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
initial_access_external_user_added_to_google_workspace_group.toml
[New Rule] External User Added to Private Organization Group (#2577)
2023-03-20 14:32:42 -04:00
initial_access_google_workspace_object_copied_from_external_source.toml
[New Rule] Google Workspace Resource Copied from External Drive (#2627)
2023-03-20 14:37:58 -04:00
initial_access_google_workspace_suspended_user_renewed.toml
[New Rule] Google Workspace - Suspended User Account Renewed (#2592)
2023-03-02 11:23:49 -05:00
persistence_application_added_to_google_workspace_domain.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_2sv_policy_disabled.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_admin_role_assigned_to_user.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_custom_admin_role_created.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_policy_modified.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_role_modified.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_google_workspace_user_organizational_unit_changed.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00
persistence_mfa_disabled_for_google_workspace_organization.toml
[Rule Tuning] Bumping min-stack version for Google Workspace to 8.4 (#2467)
2023-01-13 13:29:28 -05:00