sigma-rules

Files

T

Terrance DeJesus 8eeb95f545 [New Rule] Detection for Okta Sign-In Events via Third-Party IdP (#3259 )

* adding new rule 'Okta Sign-In Events via Third-Party IdP'

* fix creation date

* fixed query efficiency

* added investigation guide

* Update rules/integrations/okta/initial_access_sign_in_events_via_third_party_idp.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

2023-11-27 18:31:27 -05:00

aws

[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221 )

2023-10-24 12:51:59 -04:00

azure

[Security Content] Include "Data Source: Elastic Defend" tag (#3002 )

2023-09-05 14:22:01 -04:00

beaconing

[New Rule] Adding Beaconing Rules from Advanced Analytic Beaconing Package (#3128 )

2023-10-30 10:05:24 -04:00

cloud_defend

[New Rule] Modification of Dynamic Linker Preload Shared Object Inside A Container (#2837 )