Samirbous b8dcc6ab4b [New Rules] C2 via BITS and CertReq (#2466) ...

* Create command_and_control_certreq_postdata.toml

* Update command_and_control_certreq_postdata.toml

* Update command_and_control_certreq_postdata.toml

* Create command_and_control_ingress_transfer_bits.toml

* Update non-ecs-schema.json

* Update command_and_control_certreq_postdata.toml

* Update command_and_control_ingress_transfer_bits.toml

* Update rules/windows/command_and_control_certreq_postdata.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

2023-01-27 20:17:36 +00:00

..

api_schemas

initial commit with changes for 8.7 branch creation (#2406)

2022-11-21 12:55:01 -05:00

beats_schemas

initial commit and updates (#2424)

2022-12-13 10:52:45 -05:00

ecs_schemas

initial commit with changes for 8.7 branch creation (#2406)

2022-11-21 12:55:01 -05:00

endgame_schemas

update endgame validation to the latest schema available (8.4.0) (#2375)

2022-11-01 17:27:47 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

[FR] Update ATT&CK Package to v12.1 (#2422)

2022-12-16 12:04:20 -05:00

attack-v12.1.json.gz

[FR] Update ATT&CK Package to v12.1 (#2422)

2022-12-16 12:04:20 -05:00

commit-and-push.sh

break out the logic to a script and manual workflow (#1908)

2022-09-16 13:34:04 -04:00

deprecated_rules.json

Locked versions for releases: 7.16,8.0,8.1,8.2,8.3,8.4,8.5,8.6 (#2407)

2022-11-28 09:15:53 -05:00

integration-manifests.json.gz

[FR] Add Endpoint, APM and Windows Integration Tags to Rules and Supportability (#2429)

2023-01-04 09:30:07 -05:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

non-ecs-schema.json

[New Rules] C2 via BITS and CertReq (#2466)

2023-01-27 20:17:36 +00:00

packages.yml

initial commit with changes for 8.7 branch creation (#2406)

2022-11-21 12:55:01 -05:00

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

rule-mapping.yml

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

initial commit and updates (#2424)

2022-12-13 10:52:45 -05:00

test_toml.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

version.lock.json

Lock versions for releases: 7.16,8.0,8.1,8.2,8.3,8.4,8.5,8.6 (#2468)

2023-01-13 15:20:23 -05:00