Jonhnathan 678f7cb93c [Rule Tuning] Update rules based on docs review (#1778) ...

* Update rules based on docs review

* trivial change to trigger CLA

* undo changes from triggering build

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

(cherry picked from commit dec4243db0)

2022-02-16 16:44:51 +00:00

..

collection_gcp_pub_sub_subscription_creation.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

collection_gcp_pub_sub_topic_creation.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

defense_evasion_gcp_firewall_rule_created.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_gcp_firewall_rule_deleted.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_gcp_firewall_rule_modified.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_gcp_logging_bucket_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

defense_evasion_gcp_logging_sink_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

defense_evasion_gcp_pub_sub_subscription_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

defense_evasion_gcp_pub_sub_topic_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

defense_evasion_gcp_storage_bucket_configuration_modified.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_gcp_storage_bucket_permissions_modified.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

exfiltration_gcp_logging_sink_modification.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

impact_gcp_iam_role_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

impact_gcp_service_account_deleted.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

impact_gcp_service_account_disabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

impact_gcp_storage_bucket_deleted.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

impact_gcp_virtual_private_cloud_network_deleted.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

impact_gcp_virtual_private_cloud_route_created.toml

[Rule Tuning] Update rules based on docs review (#1778)

2022-02-16 16:44:51 +00:00

impact_gcp_virtual_private_cloud_route_deleted.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

initial_access_gcp_iam_custom_role_creation.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

persistence_gcp_iam_service_account_key_deletion.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00

persistence_gcp_key_created_for_service_account.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

persistence_gcp_service_account_created.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml

[Rule tuning] Update rules based on docs review (#1663)

2022-01-28 19:43:39 +00:00