sigma-rules

Files

T

Isai 648dd8b3ed [New Rule] Interactive Exec Command Launched Against A Running Container (#2791 )

* [New Rule] Interactive Exec Command Launched Against A Running Container

new rule toml

* Update execution_interactive_exec_to_container.toml

updated reference links

* Update execution_interactive_exec_to_container.toml

fixed the comments

* Update execution_interactive_exec_to_container.toml

* Update execution_interactive_exec_to_container.toml

removed process.session_leader.same_as_process

* Update execution_interactive_exec_to_container.toml

added time intervals

* Apply suggestions from code review

updated spacing

Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

2023-05-16 16:09:10 -04:00

aws

[Rule Tuning] Tuning 'AWS Access Secret in Secrets Manager' to New Terms (#2760 )

2023-05-03 09:28:59 -04:00

azure

[FR] Add Integration Schema Query Validation (#2470 )

2023-02-02 16:22:44 -05:00

cloud_defend

[New Rule] Interactive Exec Command Launched Against A Running Container (#2791 )

2023-05-16 16:09:10 -04:00

cyberarkpas

[Bug] Unit Tests Passing for Rules with Integrations Not Reflected in Manifests (#2682 )