security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
dc9c63d0432fe8d52017b769a49ef85a3d69b4bf
sigma-rules/rules/cross-platform
T
History
Samirbous 61fe8a59ff [New Rule] WebServer Access Logs Deleted (#457) 
* [New Rule] WebServer Access Logs Deleted

* removed timeline_id

* added drive letter for better perf

* Update rules/cross-platform/defense_evasion_deleting_websvr_access_logs.toml

Co-authored-by: Andrew Pease <7442091+peasead@users.noreply.github.com>

* Update rules/cross-platform/defense_evasion_deleting_websvr_access_logs.toml

Co-authored-by: Andrew Pease <7442091+peasead@users.noreply.github.com>

* Update defense_evasion_deleting_websvr_access_logs.toml

* changed severity from low to medium

* fixed duplicate text in description

* Update rules/cross-platform/defense_evasion_deleting_websvr_access_logs.toml

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

Co-authored-by: Andrew Pease <7442091+peasead@users.noreply.github.com>
Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
2020-12-01 10:48:55 +01:00
..
defense_evasion_deleting_websvr_access_logs.toml
[New Rule] WebServer Access Logs Deleted (#457)
2020-12-01 10:48:55 +01:00
impact_hosts_file_modified.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
initial_access_zoom_meeting_with_no_passcode.toml
Bump zoom rule to production (#427)
2020-10-29 11:02:29 -08:00