Jonhnathan 57194b8e59 [Rule Tuning] M365 - Remove event.outcome condition from Auth Events (#2004) ...

* Remove event.outcome condition

* Update credential_access_microsoft_365_brute_force_user_account_attempt.toml

* Revert "Update credential_access_microsoft_365_brute_force_user_account_attempt.toml"

This reverts commit c7e7c976174a62e6b50139291e8f7f1a34e7beab.

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

(cherry picked from commit 3aa53fc6c5)

2022-06-03 17:24:48 +00:00

..

aws

[New Rule] AWS Redshift Cluster Creation (#1921)

2022-04-28 18:45:31 +00:00

azure

Linux Shell Evasion Rule Tuning (#1878)

2022-03-29 21:03:35 -04:00

cyberarkpas

Linux Shell Evasion Rule Tuning (#1878)

2022-03-29 21:03:35 -04:00

endpoint

Linux Shell Evasion Rule Tuning (#1878)

2022-03-29 21:03:35 -04:00

gcp

Linux Shell Evasion Rule Tuning (#1878)

2022-03-29 21:03:35 -04:00

google_workspace

Linux Shell Evasion Rule Tuning (#1878)

2022-03-29 21:03:35 -04:00

o365

[Rule Tuning] M365 - Remove event.outcome condition from Auth Events (#2004)

2022-06-03 17:24:48 +00:00

okta

Expand timestamp override tests (#1907)

2022-04-01 23:28:54 +00:00