Samirbous f36845318e [New] First Time Seen User Auth via DeviceCode Protocol (#4153) ...

* Create credential_access_first_time_seen_device_code_auth.toml

* Update credential_access_first_time_seen_device_code_auth.toml

* Update credential_access_first_time_seen_device_code_auth.toml

* Update rules/integrations/azure/credential_access_first_time_seen_device_code_auth.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update rules/integrations/azure/credential_access_first_time_seen_device_code_auth.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* Update credential_access_first_time_seen_device_code_auth.toml

---------

Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

2024-11-11 13:04:18 +00:00

..

aws

[Rule Tuning] Add Investigation Fields to Specific AWS Rules (#4261)

2024-11-08 23:11:18 -05:00

aws_bedrock

[Rule Tuning] Add Investigation Fields to Specific AWS Rules (#4261)

2024-11-08 23:11:18 -05:00

azure

[New] First Time Seen User Auth via DeviceCode Protocol (#4153)

2024-11-11 13:04:18 +00:00

beaconing

Prep for Release 8.17 (#4256)

2024-11-07 23:53:04 +05:30

cloud_defend

Prep for next release 8.16 (#3919)

2024-07-24 11:19:56 -04:00

cyberarkpas

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

ded

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

dga

Remove unwanted backticks (#3724)

2024-05-31 21:46:24 +05:30

endpoint

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

fim

[Docs | Rule Tuning] Add blog references to rules (#4097)

2024-09-25 15:19:20 -05:00

gcp

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

github

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

google_workspace

[Docs | Rule Tuning] Add blog references to rules (#4097)

2024-09-25 15:19:20 -05:00

kubernetes

Back-porting Version Trimming (#3704)

2024-05-23 00:45:10 +05:30

lmd

Update rule setup instructions for UEBA packages (#3652)

2024-05-28 14:21:46 -05:00

o365

[Rule Tuning] Add KEEP Command to all ES|QL Rules (#4146)

2024-10-09 21:08:38 -04:00

okta

[Rule Tuning] Remove Salesforce Client User-Agent Whitelisting in MFA Deactivation with no Re-Activation for Okta User Account (#4145)

2024-10-16 11:41:50 -04:00

problemchild

Fix Minstack version for windows integration - Pahse 2 (#4216)

2024-10-28 20:25:02 +05:30