security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
b81f29cddfa792f3e977ecc40bc50e67a2aae1e5
sigma-rules/rules/microsoft-365
T
History
Austin Songer f64a9599d0 [New Rule] O365 Excessive SSO Logon Errors (#1215) 
(cherry picked from commit 64c3f7cdc5)
2021-07-21 06:55:27 +00:00
..
collection_microsoft_365_new_inbox_rule.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
credential_access_microsoft_365_brute_force_user_account_attempt.toml
[Rule Tuning] Attempts to Brute Force a Microsoft 365 User Account (#1251)
2021-06-22 14:39:09 +00:00
credential_access_microsoft_365_potential_password_spraying_attack.toml
[Rule Tuning] Potential password spraying of microsoft 365 user accounts (#1164)
2021-06-22 17:36:32 +00:00
credential_access_user_excessive_sso_logon_errors.toml
[New Rule] O365 Excessive SSO Logon Errors (#1215)
2021-07-21 06:55:27 +00:00
defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
exfiltration_microsoft_365_exchange_transport_rule_creation.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
exfiltration_microsoft_365_exchange_transport_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
initial_access_microsoft_365_exchange_safelinks_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
microsoft_365_exchange_dkim_signing_config_disabled.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
microsoft_365_teams_custom_app_interaction_allowed.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_microsoft_365_exchange_management_role_assignment.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_microsoft_365_teams_external_access_enabled.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_microsoft_365_teams_guest_access_enabled.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00