Samirbous d7eb2766b0 [New Rule] Multiple Vault Web credentials were read (#2281) ...

* [New Rule] Multiple Vault Web credentials were read

https://github.com/elastic/detection-rules/issues/2164

* Update credential_access_saved_creds_vault_winlog.toml

* Update non-ecs-schema.json

* Update rules/windows/credential_access_saved_creds_vault_winlog.toml

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

(cherry picked from commit 99dcfe2055)

2022-09-19 17:08:00 +00:00

..

api_schemas

Prep for 8.5 branch (#2220)

2022-08-09 21:15:37 +00:00

beats_schemas

Prep for 8.5 branch (#2220)

2022-08-09 21:15:37 +00:00

ecs_schemas

Prep for 8.5 branch (#2220)

2022-08-09 21:15:37 +00:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

attack-technique-redirects.json

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

attack-v11.3.json.gz

[Rule Tuning] Missing MITRE ATT&CK Mappings (#2073)

2022-07-22 18:31:42 +00:00

commit-and-push.sh

break out the logic to a script and manual workflow (#1908)

2022-09-16 17:35:04 +00:00

deprecated_rules.json

Lock versions for releases: 7.16,8.0,8.1,8.2,8.3,8.4 (#2261)

2022-08-24 17:27:26 +00:00

integration-manifests.json.gz

Prep for 8.5 branch (#2220)

2022-08-09 21:15:37 +00:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

non-ecs-schema.json

[New Rule] Multiple Vault Web credentials were read (#2281)

2022-09-19 17:08:00 +00:00

packages.yml

Move etc under detection_rules (#1885)

2022-05-02 14:06:33 -04:00

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

rule-mapping.yml

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

stack-schema-map.yaml

Prep for 8.5 branch (#2220)

2022-08-09 21:15:37 +00:00

test_toml.json

Move etc under detection_rules (#1885)

2022-05-02 14:13:36 +00:00

version.lock.json

Add test command to verify version collisions do not occur (#2272)

2022-09-19 15:54:33 +00:00