Jonhnathan 3aa53fc6c5 [Rule Tuning] M365 - Remove event.outcome condition from Auth Events (#2004) ...

* Remove event.outcome condition

* Update credential_access_microsoft_365_brute_force_user_account_attempt.toml

* Revert "Update credential_access_microsoft_365_brute_force_user_account_attempt.toml"

This reverts commit c7e7c976174a62e6b50139291e8f7f1a34e7beab.

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

2022-06-03 14:24:14 -03:00

..

aws

[New Rule] AWS Redshift Cluster Creation (#1921)

2022-04-28 14:43:26 -04:00

azure

Update impact_azure_service_principal_credentials_added.toml (#1802)

2022-03-02 05:36:21 -03:00

cyberarkpas

Add min_stack_comments to metadata schema (#1573)

2021-10-19 20:52:53 -08:00

endpoint

Add missing Integration field (#1537)

2021-10-26 12:05:12 -03:00

gcp

[Security Content] Update rules based on docs review (#1803)

2022-03-01 21:39:30 -03:00

google_workspace

[Rule Tuning] Update Google Workspace rules to remove compatibility with deprecated gsuite integration (#1706)

2022-01-25 16:51:20 -09:00

o365

[Rule Tuning] M365 - Remove event.outcome condition from Auth Events (#2004)

2022-06-03 14:24:14 -03:00

okta

Expand timestamp override tests (#1907)

2022-04-01 15:27:08 -08:00