sigma-rules

Files

T

Terrance DeJesus 9475cf942d [New Rule] AWS IAM Roles Anywhere Profile Creation and Trusted Anchor with External CA Created (#3609 )

* new rule 'AWS IAM Roles Anywhere Role Creation'

* adjusted rule to focus on Roles Anywhere profile creation

* added rule for roles anywhere trusted anchor; updated rule file naming

* added investigation guide

* added investigation guide

* adjusted rule and file name

* Update rules/integrations/aws/persistence_iam_roles_anywhere_trusted_anchor_created_with_external_ca.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* Update rules/integrations/aws/persistence_iam_roles_anywhere_trusted_anchor_created_with_external_ca.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit c77eb1d915)

2024-06-05 14:14:27 +00:00

aws

[New Rule] AWS IAM Roles Anywhere Profile Creation and Trusted Anchor with External CA Created (#3609 )

2024-06-05 14:14:27 +00:00

azure

Back-porting Version Trimming (#3704 )

2024-05-22 19:18:10 +00:00

beaconing

Update rule setup instructions for UEBA packages (#3652 )

2024-05-28 19:24:45 +00:00

cloud_defend

Back-porting Version Trimming (#3704 )