Jonhnathan 6cc39a538f [New Rule] Potential PowerShell HackTool Script by Author (#2472) ...

* [New Rule] Potential PowerShell HackTool Script by Author

* Update execution_posh_hacktool_authors.toml

* Update execution_posh_hacktool_authors.toml

* Update execution_posh_hacktool_authors.toml

* Apply suggestions from code review

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update execution_posh_hacktool_authors.toml

* Apply suggestions from code review

Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

* Update execution_posh_hacktool_authors.toml

---------

Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

2024-05-09 18:41:56 -07:00

..

aws

[New Rule] Potential PowerShell HackTool Script by Author (#2472)

2024-05-09 18:41:56 -07:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647)

2024-05-06 07:32:02 -05:00

azure

Fix minstack version for 0365 in azure integration rules (#3612)

2024-04-22 19:17:49 +05:30

beaconing

Beaconing - Add whitelist to rules, with some more processes (#3497)

2024-03-14 15:51:02 -04:00

cloud_defend

[Tuning] Update min_stack for container rules new ecs field (#3370)

2024-01-05 18:42:42 -05:00

cyberarkpas

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

ded

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 09:09:40 -03:00

dga

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 09:09:40 -03:00

endpoint

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

gcp

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

github

[New Rules] UEBA GItHub BBRs and Rules (#3174)

2024-01-22 12:48:31 -05:00

google_workspace

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

kubernetes

[Rule Tuning] Kubernetes Anonymous Request Authorized (#2865)

2023-07-17 13:03:05 -04:00

lmd

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 09:09:40 -03:00

o365

Fix minstack version for O365 prod rules (#3565)

2024-04-02 21:33:18 +05:30

okta

[Security Content] Small tweaks on the setup guides (#3308)

2024-03-11 09:09:40 -03:00

problemchild

Update setup guide for ML integration packages (#3475)

2024-04-01 15:02:32 -04:00