security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
97f9f864d10eec4ce55aabc8a80d77d75488541e
sigma-rules/rules/microsoft-365
T
History
Brent Murphy 598e807a5c [New Rule] Microsoft 365 Teams Custom Application Interaction Allowed (#657) 
* [New Rule] O365 Teams Custom Application Interaction Allowed

* rebrand to m365, still needed non ecs schema

* Update non-ecs-schema.json
2020-12-08 17:36:47 -05:00
..
credential_access_microsoft_365_brute_force_user_account_attempt.toml
[New Rule] Attempts to Brute Force a Microsoft 365 User Account (#662)
2020-12-04 12:40:09 -05:00
credential_access_microsoft_365_potential_password_spraying_attack.toml
[New Rule] Potential Password Spraying of Microsoft 365 User Accounts (#665)
2020-12-08 17:19:39 -05:00
defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml
[New Rule] Microsoft 365 Exchange DLP Policy Removed (#600)
2020-12-02 14:18:11 -05:00
defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
exfiltration_microsoft_365_exchange_transport_rule_creation.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
exfiltration_microsoft_365_exchange_transport_rule_mod.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
initial_access_microsoft_365_exchange_safelinks_disabled.toml
[Rule Tuning] Rebrand Office 365 to Microsoft 365 (#669)
2020-12-02 14:04:48 -05:00
microsoft_365_exchange_dkim_signing_config_disabled.toml
[New Rule] Microsoft 365 Exchange DKIM Signing Configuration Disabled (#578)
2020-12-08 16:38:00 -05:00
microsoft_365_teams_custom_app_interaction_allowed.toml
[New Rule] Microsoft 365 Teams Custom Application Interaction Allowed (#657)
2020-12-08 17:36:47 -05:00
persistence_microsoft_365_exchange_management_role_assignment.toml
[New Rule] Microsoft 365 Exchange Management Group Role Assignment (#599)
2020-12-02 14:11:33 -05:00
persistence_microsoft_365_teams_external_access_enabled.toml
[New Rule] Microsoft 365 Teams External Access Enabled (#661)
2020-12-08 16:48:15 -05:00
persistence_microsoft_365_teams_guest_access_enabled.toml
[New Rule] Microsoft 365 Teams Guest Access Enabled (#601)
2020-12-08 16:44:15 -05:00