Justin Ibarra b736d6e748 [Rule Tuning] Rule description tweaks (#1388)

2021-07-29 10:56:13 -08:00

..

collection_microsoft_365_new_inbox_rule.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

credential_access_microsoft_365_brute_force_user_account_attempt.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

credential_access_microsoft_365_potential_password_spraying_attack.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

credential_access_user_excessive_sso_logon_errors.toml

[Rule Tuning] Rule description tweaks (#1388)

2021-07-29 10:56:13 -08:00

defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

exfiltration_microsoft_365_exchange_transport_rule_creation.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

exfiltration_microsoft_365_exchange_transport_rule_mod.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

initial_access_microsoft_365_exchange_safelinks_disabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

microsoft_365_exchange_dkim_signing_config_disabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

microsoft_365_teams_custom_app_interaction_allowed.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

persistence_microsoft_365_exchange_management_role_assignment.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

persistence_microsoft_365_teams_external_access_enabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00

persistence_microsoft_365_teams_guest_access_enabled.toml

[Fleet] Track integrations in folder and metadata (#1372)

2021-07-21 15:24:56 -06:00