Samirbous cd716e5248 [Tuning] Suspicious Microsoft 365 Mail Access by ClientAppId (#3685) ...

* Update initial_access_microsoft_365_abnormal_clientappid.toml

* Update initial_access_microsoft_365_abnormal_clientappid.toml

* Update initial_access_microsoft_365_abnormal_clientappid.toml

---------

Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>

2024-07-05 05:46:40 +01:00

..

aws

[New Rule] AWS RDS DB Instance Made Public (#3836)

2024-07-03 01:01:52 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647)

2024-05-06 07:32:02 -05:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819)

2024-07-01 10:31:26 -04:00

beaconing

Add exceptions to C2 Beaconing Activity (#3771)

2024-06-11 18:43:46 +05:30

cloud_defend

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

fim

Update FIM integration Setup sequence (#3781)

2024-06-12 16:40:45 +05:30

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

google_workspace

[Rule Tuning] Tuning Google Workspace Rules and File Name Length Reduction (#3849)

2024-07-01 15:50:12 -04:00

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

[Tuning] Suspicious Microsoft 365 Mail Access by ClientAppId (#3685)

2024-07-05 05:46:40 +01:00

okta

[Rule Tuning] Multiple Device Token Hashes for Single Okta Session (#3814)

2024-06-28 12:59:24 -04:00

problemchild

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30