security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e28512a32fc643651a6bc91444e460ca8f5164be
sigma-rules/rules/integrations/cloud_defend
T
History
shashank-elastic e28512a32f Deprecation Notice to Cloud Defend Rules (#4520) 
* Deprecation Notice to Cloud Defend Rules

* Udpate names in investigation guide

* Adding deprecation note under Setup field

* reverting back to setup field name

---------

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
2025-03-07 00:20:00 -05:00
..
container_workload_protection.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
credential_access_aws_creds_search_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
credential_access_collection_sensitive_files_compression_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
credential_access_sensitive_keys_or_passwords_search_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
defense_evasion_ld_preload_shared_object_modified_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
discovery_suspicious_network_tool_launched_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
execution_container_management_binary_launched_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
execution_file_made_executable_via_chmod_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
execution_interactive_exec_to_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
execution_interactive_shell_spawned_from_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
execution_netcat_listener_established_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
initial_access_ssh_connection_established_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
lateral_movement_ssh_process_launched_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
persistence_ssh_authorized_keys_modification_inside_a_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
privilege_escalation_debugfs_launched_inside_a_privileged_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
privilege_escalation_mount_launched_inside_a_privileged_container.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
privilege_escalation_potential_container_escape_via_modified_notify_on_release_file.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00
privilege_escalation_potential_container_escape_via_modified_release_agent_file.toml
Deprecation Notice to Cloud Defend Rules (#4520)
2025-03-07 00:20:00 -05:00