Terrance DeJesus d72996c401 [New Rule] Migrate Lateral Movement Detection Rules (#3175) ...

* adding LMD rules

* added setup note; updated references

* adds 2.0.0 lmd manifest and schema

* adjusted min-stack for non-ML rules

(cherry picked from commit 1e514afa57)

2023-10-12 19:07:54 +00:00

..

lateral_movement_ml_high_mean_rdp_process_args.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_high_mean_rdp_session_duration.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_high_remote_file_size.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_high_variance_rdp_session_duration.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_rare_remote_file_directory.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_rare_remote_file_extension.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_spike_in_connections_from_a_source_ip.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_spike_in_connections_to_a_destination_ip.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_spike_in_rdp_processes.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_spike_in_remote_file_transfers.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00

lateral_movement_ml_unusual_time_for_an_rdp_session.toml

[New Rule] Migrate Lateral Movement Detection Rules (#3175)

2023-10-12 19:07:54 +00:00