sigma-rules

Files

T

Terrance DeJesus 281926052c [Rule Tuning] Add METADATA checks for non-aggregate ES|QL queries and fix existing (#4126 )

* fixed existing rules;added query checks

* fixed flake errors

* added re.DOTALL to regex pattern, adjusted pattern slightly; reverted some rules

* removed valueError and replaced ValidationError

* adjusted validation error output based on feedback

* Update rules/integrations/aws/persistence_iam_user_created_access_keys_for_another_user.toml

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

* Update rules/integrations/aws/persistence_iam_user_created_access_keys_for_another_user.toml

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

* added space for failure

* updated to use re.compile

---------

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

2024-10-09 15:25:36 -04:00

aws

[Rule Tuning] Add METADATA checks for non-aggregate ES|QL queries and fix existing (#4126 )

2024-10-09 15:25:36 -04:00

aws_bedrock

Fix GenAI Request Model ID Field (#4111 )

2024-09-27 21:59:02 +05:30

azure

[Rule Tuning] M365/Azure Brute-Forcing New Rule and Tuning; Deprecate Similar Rule (#4057 )

2024-09-10 11:26:40 -04:00

beaconing

Revert "Prep for Release 8.16 (#3913 )"