sigma-rules

Files

T

Isai 63fda01fdd [New Rule] Kubernetes execution_user_exec_to_pod (#1979 )

* Create execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* Update rules/integrations/kubernetes/execution_user_exec_to_pod.toml

* Update non-ecs-schema.json

* Update execution_user_exec_to_pod.toml

* Update rules/integrations/kubernetes/execution_user_exec_to_pod.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* Update execution_user_exec_to_pod.toml

* toml-linted file and add to false positive

toml-linted the file and added to the false positive description

* Create notepad.sct

Added this back into the repo, deleted by mistake.

* added min_stack_version based on integration

min stack version determined by integration support of necessary fields

Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

2022-06-09 17:52:45 -04:00

aws

[New Rule] AWS Redshift Cluster Creation (#1921 )

2022-04-28 14:43:26 -04:00

azure

Update impact_azure_service_principal_credentials_added.toml (#1802 )

2022-03-02 05:36:21 -03:00

cyberarkpas

Add min_stack_comments to metadata schema (#1573 )

2021-10-19 20:52:53 -08:00

endpoint

Add missing Integration field (#1537 )