Apoorva Joshi 97ff7fb26e [New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126) ...

* Adding DED rules

* adding integration manifests and schemas for DED

* Updating min stack version

* updating manifests and schemas to match main

* added setup note; updated references

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>

2023-10-14 13:23:48 -04:00

..

exfiltration_ml_high_bytes_destination_geo_country_iso_code.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_high_bytes_destination_ip.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_high_bytes_destination_port.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_high_bytes_destination_region_name.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_high_bytes_written_to_external_device_airdrop.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_high_bytes_written_to_external_device.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00

exfiltration_ml_rare_process_writing_to_external_device.toml

[New Rule] Adding Data Exfiltration Rules from Advanced Analytic DED Package (#3126)

2023-10-14 13:23:48 -04:00