security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
9508002bb3813ac0efea3ea8769b873eb4c57a62
sigma-rules/rules/integrations/o365
T
History
Austin Songer 3b0d2006b7 Made these pull requests before the directory restructure. (#1517) 
Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
2021-10-05 09:29:40 -03:00
..
collection_microsoft_365_new_inbox_rule.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_microsoft_365_brute_force_user_account_attempt.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_microsoft_365_potential_password_spraying_attack.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_user_excessive_sso_logon_errors.toml
[Rule Tuning] Rule description tweaks (#1388)
2021-07-29 10:56:13 -08:00
defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
exfiltration_microsoft_365_exchange_transport_rule_creation.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
exfiltration_microsoft_365_exchange_transport_rule_mod.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
initial_access_microsoft_365_exchange_safelinks_disabled.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
microsoft_365_exchange_dkim_signing_config_disabled.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
microsoft_365_teams_custom_app_interaction_allowed.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_exchange_suspicious_mailbox_right_delegation.toml
Made these pull requests before the directory restructure. (#1517)
2021-10-05 09:29:40 -03:00
persistence_microsoft_365_exchange_management_role_assignment.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_microsoft_365_teams_external_access_enabled.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_microsoft_365_teams_guest_access_enabled.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
privilege_escalation_new_or_modified_federation_domain.toml
Rename new_or_modified_federation_domain.toml to correspond with tactic (#1511)
2021-09-30 13:08:35 -08:00