sigma-rules

Files

T

Samirbous 97bb3d5bc4 [New Rule] Account Password Reset Remotely (#1571 )

* [New Rule] Account Password Reset Remotely

* Update non-ecs-schema.json

* udpate ruleId

* Update rules/windows/persistence_remote_password_reset.toml

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>

* Update rules/windows/persistence_remote_password_reset.toml

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>

* Update rules/windows/persistence_remote_password_reset.toml

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>

* Update rules/windows/persistence_remote_password_reset.toml

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>

* Update rules/windows/persistence_remote_password_reset.toml

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>
Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

(cherry picked from commit 53a17e6b06)

2021-11-18 09:28:05 +00:00

api_schemas

Prepare for creation of 7.16 release branch (#1611 )

2021-11-15 18:41:47 +00:00

beats_schemas

Refresh ECS (1.12.1) and beats (7.15.1) schemas (#1584 )

2021-10-28 11:24:28 -05:00

ecs_schemas

Refresh ECS (1.12.1) and beats (7.15.1) schemas (#1584 )

2021-10-28 11:24:28 -05:00

attack-crosswalk.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706 )