Apoorva Joshi 2d92357a80 [New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126) ...

* Adding DED rules

* adding integration manifests and schemas for DED

* Updating min stack version

* updating manifests and schemas to match main

* added setup note; updated references

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>

(cherry picked from commit 97ff7fb26e)

2023-10-14 17:30:03 +00:00

..

exfiltration_ml_high_bytes_destination_geo_country_iso_code.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_high_bytes_destination_ip.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_high_bytes_destination_port.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_high_bytes_destination_region_name.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_high_bytes_written_to_external_device_airdrop.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_high_bytes_written_to_external_device.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00

exfiltration_ml_rare_process_writing_to_external_device.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 17:30:03 +00:00