Isai 7adb199afa [Deprecation] GCP Kubernetes Rolebindings Created or Patched (#2340) ...

* Update privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml

Deprecating this rule due to high false positive rate. This behavior is too generic for an effective malicious behavior detection.

* move toml file to _deprecated

move toml file to _deprecated

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

2022-11-09 12:51:52 -05:00

..

collection_gcp_pub_sub_subscription_creation.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

collection_gcp_pub_sub_topic_creation.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_firewall_rule_created.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_firewall_rule_deleted.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_firewall_rule_modified.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_logging_bucket_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_logging_sink_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_pub_sub_subscription_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_pub_sub_topic_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_storage_bucket_configuration_modified.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_storage_bucket_permissions_modified.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_virtual_private_cloud_network_deleted.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_virtual_private_cloud_route_created.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

defense_evasion_gcp_virtual_private_cloud_route_deleted.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

exfiltration_gcp_logging_sink_modification.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

impact_gcp_iam_role_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

impact_gcp_service_account_deleted.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

impact_gcp_service_account_disabled.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

impact_gcp_storage_bucket_deleted.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

initial_access_gcp_iam_custom_role_creation.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

persistence_gcp_iam_service_account_key_deletion.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

persistence_gcp_key_created_for_service_account.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00

persistence_gcp_service_account_created.toml

min_stack all rules to 8.3 (#2259)

2022-08-24 10:38:49 -06:00