Samirbous 51d50b7d8a [New Rule] Lsass Process Access - Generic (#2613) ...

* Create credential_access_lsass_openprocess_api.toml

* Update credential_access_lsass_openprocess_api.toml

* Update credential_access_lsass_openprocess_api.toml

* Update non-ecs-schema.json

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update rules/windows/credential_access_lsass_openprocess_api.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update credential_access_lsass_openprocess_api.toml

* Update non-ecs-schema.json

---------

Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>
Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

2023-04-03 14:34:30 +01:00

..

etc

[New Rule] Lsass Process Access - Generic (#2613)

2023-04-03 14:34:30 +01:00

schemas

[FR] Support Rule Alert Suppression in Rule Schema (#2660)

2023-03-27 15:37:35 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

__main__.py

Move Rule into a dataclass (#1029)

2021-03-24 10:24:32 -06:00

attack.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

beats.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

cli_utils.py

Add index as a required field to rule_prompt (#1595)

2021-11-14 17:05:42 -09:00

devtools.py

Validate markdown plugin fields (#2602)

2023-03-28 09:17:50 -04:00

docs.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

ecs.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

endgame.py

add support for additional endgame field types (#2372)

2022-10-19 11:11:09 -04:00

eswrap.py

Adds commands to manage ATT&CK mappings (#2343)

2022-11-01 13:14:40 -06:00

ghwrap.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

integrations.py

[FR] 8.7 Release Preparation and Update Main Branch to 8.8 (#2533)

2023-02-08 17:27:21 -05:00

kbwrap.py

Adds commands to manage ATT&CK mappings (#2343)

2022-11-01 13:14:40 -06:00

main.py

[Bug] Convert config to pathlib.Path (#2377)

2022-11-01 10:43:32 -04:00

mappings.py

Release ER Production RTAs to DR (#2270)

2022-09-08 12:50:39 -04:00

misc.py

Cleanup rule survey code (#1923)

2022-09-06 15:53:47 -06:00

mixins.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

ml.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

navigator.py

Update layer version to 4.4 (#2676)

2023-03-30 12:29:17 -04:00

packaging.py

Include base rule fields in enriched indexes (#2547)

2023-03-02 08:30:55 -07:00

rule_formatter.py

Validate markdown plugin fields (#2602)

2023-03-28 09:17:50 -04:00

rule_loader.py

[Rule Tuning] adjust duplicate ssh brute force rule names and add unit test (#2321)

2022-09-26 10:04:38 -04:00

rule_validators.py

Validate against beats and integrations schemas (#2524)

2023-02-08 12:01:31 -05:00

rule.py

Validate markdown plugin fields (#2602)

2023-03-28 09:17:50 -04:00

utils.py

Validate markdown plugin fields (#2602)

2023-03-28 09:17:50 -04:00

version_lock.py

patch fix for 2503 (#2527)

2023-02-07 15:40:51 -05:00