Isai 2708a89f20 [New Rule] AWS IAM User Created Access Keys for Another User (#3788) ...

* [New Rule] AWS IAM User Created Access Keys for Another User

...

* updated min_stack and removed index field

* reversed tactic order

* added AWS documentation as reference

* Apply suggestions from code review

updated_date, query format change, removed keep from query

2024-06-25 00:11:48 -04:00

..

aws

[New Rule] AWS IAM User Created Access Keys for Another User (#3788)

2024-06-25 00:11:48 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647)

2024-05-06 07:32:02 -05:00

azure

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

beaconing

Add exceptions to C2 Beaconing Activity (#3771)

2024-06-11 18:43:46 +05:30

cloud_defend

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

fim

Update FIM integration Setup sequence (#3781)

2024-06-12 16:40:45 +05:30

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

google_workspace

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

Refresh MITRE Attack v15.1.0 (#3725)

2024-06-04 20:14:58 +05:30

okta

[New Rule] Okta Credential Stuffing and Password Spraying Identification via Source, Device Token and Actor (#3797)

2024-06-21 13:11:23 -04:00

problemchild

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30