security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
60b3d47efdf81a9232af2a39a4337bcb01dca9d2
sigma-rules/rules/gcp
T
History
Justin Ibarra a212008f8c [Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
..
collection_gcp_pub_sub_subscription_creation.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
collection_gcp_pub_sub_topic_creation.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
credential_access_gcp_iam_service_account_key_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
credential_access_gcp_key_created_for_service_account.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_firewall_rule_created.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_firewall_rule_deleted.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_firewall_rule_modified.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_logging_bucket_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_logging_sink_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_pub_sub_subscription_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_pub_sub_topic_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_storage_bucket_configuration_modified.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
defense_evasion_gcp_storage_bucket_permissions_modified.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
exfiltration_gcp_logging_sink_modification.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_iam_role_deletion.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_service_account_deleted.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_service_account_disabled.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_storage_bucket_deleted.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_virtual_private_cloud_network_deleted.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_virtual_private_cloud_route_created.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
impact_gcp_virtual_private_cloud_route_deleted.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
initial_access_gcp_iam_custom_role_creation.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00
persistence_gcp_service_account_created.toml
[Rule Tuning] Remove event.module from rules for compatibility with agent integrations (#342)
2020-09-30 09:41:33 -08:00