sigma-rules

Files

T

Terrance DeJesus 5493165440 [New Rule] AWS Signin Single Factor Console Login via Federated Session (#3992 )

* adding new rule 'AWS Signin Single Factor Console Login with Federated User'

* changed uuid

* added integration tag

* fixed mitre mapping

* added min-stack

* Update rules/integrations/aws/initial_access_signin_console_login_no_mfa.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* added reference

* Update rules/integrations/aws/initial_access_signin_console_login_no_mfa.toml

---------

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

2024-08-21 18:19:54 -04:00

aws

[New Rule] AWS Signin Single Factor Console Login via Federated Session (#3992 )

2024-08-21 18:19:54 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647 )

2024-05-06 07:32:02 -05:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819 )

2024-07-01 10:31:26 -04:00

beaconing

Revert "Prep for Release 8.16 (#3913 )"