security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8ee1b2ffd477ebb5c267ea6527bfadddee7cbbca
sigma-rules/rules/microsoft-365
T
History
Justin Ibarra 0e0b2ea1a4 Update schema for threshold rule type for 7.12 (#976) 
* Update schema for threshold rule type for 7.12
* add downgrade function to drop new fields
* update existing threshold rules
2021-03-05 14:35:50 -09:00
..
credential_access_microsoft_365_brute_force_user_account_attempt.toml
Update schema for threshold rule type for 7.12 (#976)
2021-03-05 14:35:50 -09:00
credential_access_microsoft_365_potential_password_spraying_attack.toml
Update schema for threshold rule type for 7.12 (#976)
2021-03-05 14:35:50 -09:00
defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
exfiltration_microsoft_365_exchange_transport_rule_creation.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
exfiltration_microsoft_365_exchange_transport_rule_mod.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
initial_access_microsoft_365_exchange_safelinks_disabled.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
microsoft_365_exchange_dkim_signing_config_disabled.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
microsoft_365_teams_custom_app_interaction_allowed.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
persistence_microsoft_365_exchange_management_role_assignment.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
persistence_microsoft_365_teams_external_access_enabled.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00
persistence_microsoft_365_teams_guest_access_enabled.toml
Update License to Elastic v2 (#944)
2021-03-03 22:12:11 -09:00