Isai 8e9f3659ed [New Rule] AWS RDS Snapshot Shared with Another Account (#3831) ...

* [New Rule] AWS RDS DB Snapshot Shared with Another Account

...

* Update exfiltration_rds_snapshot_shared_with_another_account.toml

* edit threat matrix format

* Apply suggestions from code review

* Update rules/integrations/aws/exfiltration_rds_snapshot_shared_with_another_account.toml

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit 43fbf94d8a)

2024-07-02 19:39:56 +00:00

..

aws

[New Rule] AWS RDS Snapshot Shared with Another Account (#3831)

2024-07-02 19:39:56 +00:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819)

2024-07-01 14:34:42 +00:00

beaconing

Add exceptions to C2 Beaconing Activity (#3771)

2024-06-11 13:17:09 +00:00

cloud_defend

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 19:24:45 +00:00

dga

Remove unwanted backticks (#3724)

2024-05-31 16:19:24 +00:00

endpoint

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

fim

Update FIM integration Setup sequence (#3781)

2024-06-12 11:14:29 +00:00

gcp

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

github

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

google_workspace

[Rule Tuning] Tuning Google Workspace Rules and File Name Length Reduction (#3849)

2024-07-01 19:53:27 +00:00

kubernetes

Back-porting Version Trimming (#3704)

2024-05-22 19:18:10 +00:00

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 19:24:45 +00:00

o365

Refresh MITRE Attack v15.1.0 (#3725)

2024-06-04 14:48:18 +00:00

okta

[Rule Tuning] Multiple Device Token Hashes for Single Okta Session (#3814)

2024-06-28 17:02:28 +00:00

problemchild

Remove unwanted backticks (#3724)

2024-05-31 16:19:24 +00:00