Terrance DeJesus c04ae6d444 [New Rule] Adding Coverage for SNS Topic Message Publish by Rare User (#4350) ...

* new rule 'SNS Topic Message Publish by Rare User'

* added new terms note

* added investigation guide tag

* fixed tag, added investigation fiedls

* toml lint

* fixed mitre ATT&CK mapping

2025-01-15 13:55:45 -05:00

..

aws

[New Rule] Adding Coverage for SNS Topic Message Publish by Rare User (#4350)

2025-01-15 13:55:45 -05:00

aws_bedrock

Protections for AWS Bedrock (#4270)

2024-12-03 21:56:39 +05:30

azure

[Rule: Tuning] - Azure blob permission modification tagging - Correct tags (#4371)

2025-01-13 10:40:34 -03:00

beaconing

Prep for Release 8.17 (#4256)

2024-11-07 23:53:04 +05:30

cloud_defend

Prep for next release 8.16 (#3919)

2024-07-24 11:19:56 -04:00

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

[New Rule] Endpoint Security Promotion Rules for Specific Events (#3533)

2024-12-19 13:24:23 -05:00

fim

[Rule Tuning] Potential Persistence via File Modification (#4310)

2025-01-03 16:19:58 +01:00

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

[Rule Tuning] Update Okta and Github Min-Stack Versions for Release (#4290)

2024-12-09 20:58:33 +05:30

google_workspace

[Docs | Rule Tuning] Add blog references to rules (#4097)

2024-09-25 15:19:20 -05:00

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

[Rule Tuning] Add KEEP Command to all ES|QL Rules (#4146)

2024-10-09 21:08:38 -04:00

okta

[Rule Tuning] Lookback Times for Okta Multiple Session and AWS KMS Retrieval Rules (#4324)

2024-12-19 13:03:50 -05:00

problemchild

Fix Minstack version for windows integration - Pahse 2 (#4216)

2024-10-28 20:25:02 +05:30