sigma-rules

Files

T

Susan 390cb8e2d1 Update setup guide for ML integration packages (#3475 )

* Add more detail to ingest pipeline install

* Add more info to anomaly detection setup

* Update draft

* Fix typo

* Bulk add doc updates

* Update rules/integrations/problemchild/defense_evasion_ml_rare_process_for_a_host.toml

Co-authored-by: Kirti Sodhi <109447885+sodhikirti07@users.noreply.github.com>

* Address Kseniia feedback

* Update updated_date per review feedback

---------

Co-authored-by: Kirti Sodhi <109447885+sodhikirti07@users.noreply.github.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>

(cherry picked from commit 400a84628e)

2024-04-01 19:09:37 +00:00

aws

[Rule Tuning] Tuning 'First Time Seen AWS Secret Value Accessed in Secrets Manager' (#3494 )

2024-03-15 23:16:44 +00:00

azure

[Security Content] Include "Data Source: Elastic Defend" tag (#3002 )

2023-09-05 18:28:40 +00:00

cloud_defend

[Tuning] Update min_stack for container rules new ecs field (#3370 )

2024-01-05 23:47:14 +00:00

cyberarkpas

[Security Content] Tags Reform (#2725 )