Justin Ibarra 97ee8cc9ac Refresh beats and ecs schemas and default to use latest to validate (#570) ...

* Refresh beats and ecs schemas and default to use latest to validate
* remove incorrect ecs_version from zoom rule
* remove stale ecs_version from rules

2020-12-01 13:24:20 -09:00

..

credential_access_compress_credentials_keychains.toml

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

credential_access_kerberosdump_kcc.toml

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

credential_access_promt_for_pwd_via_osascript.toml

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00

lateral_movement_remote_ssh_login_enabled.toml

Refresh beats and ecs schemas and default to use latest to validate (#570)

2020-12-01 13:24:20 -09:00