sigma-rules

Files

T

Terrance DeJesus ef6344f5e6 [Rule Tuning] Tuning AWS STS Temporary Credentials via AssumeRole (#4228 )

* tuning 'AWS STS Temporary Credentials via AssumeRole'

* linted; adjusted OR in quer

* added investigation guide

* Update rules/integrations/aws/privilege_escalation_sts_temp_creds_via_assume_role.toml

* Update rules/integrations/aws/privilege_escalation_sts_temp_creds_via_assume_role.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* added new rule 'AWS STS Role Assumption by User'

* adjusted UUID

* Update rules/integrations/aws/privilege_escalation_role_assumption_by_service.toml

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

2024-11-06 12:01:07 -05:00

aws

[Rule Tuning] Tuning AWS STS Temporary Credentials via AssumeRole (#4228 )

2024-11-06 12:01:07 -05:00

aws_bedrock

Tune Bedrock rule to accept multivalued column (#4205 )

2024-10-23 20:48:56 +05:30

azure

[Rule Tuning] Add KEEP Command to all ES|QL Rules (#4146 )

2024-10-09 21:08:38 -04:00

beaconing

Revert "Prep for Release 8.16 (#3913 )"