security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
497ddcbb5898487d0a9f8b8bfcd606dad2e1edf9
sigma-rules/rules/promotions
T
History
Justin Ibarra a0e86e20d6 [Rule Tuning] Add windows integration index to rules (#923)
2021-01-28 20:53:57 -09:00
..
elastic_endpoint.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_adversary_behavior_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_cred_dumping_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_cred_dumping_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_cred_manipulation_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_cred_manipulation_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_exploit_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_exploit_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_malware_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_malware_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_permission_theft_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_permission_theft_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_process_injection_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_process_injection_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_ransomware_detected.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
endpoint_ransomware_prevented.toml
Refresh beats and ecs schemas and default to use latest to validate (#570)
2020-12-01 13:24:20 -09:00
external_alerts.toml
[Rule Tuning] Add windows integration index to rules (#923)
2021-01-28 20:53:57 -09:00