sigma-rules

Files

T

Isai f2eb78219c [New Rule] AWS IAM User or Role Created Cloudformation Stack for First Time (#3923 )

* [New Rule] AWS IAM User or Role Created Cloudformation Stack for First Time

* Update discovery_new_terms_sts_getcalleridentity.toml

* Update execution_new_terms_ec2_instance_cloudformation_createstack.toml

* Update rules/integrations/aws/execution_new_terms_ec2_instance_cloudformation_createstack.toml

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

* rule name change, removed ec2

* Update rules/integrations/aws/execution_new_terms_cloudformation_createstack.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

2024-07-31 16:55:49 -04:00

aws

[New Rule] AWS IAM User or Role Created Cloudformation Stack for First Time (#3923 )

2024-07-31 16:55:49 -04:00

aws_bedrock

[New Rule] Unusual High Confidence Misconduct Blocks Detected (#3647 )

2024-05-06 07:32:02 -05:00

azure

[New Rule] Entra ID Device Code Auth with Broker Client (#3819 )

2024-07-01 10:31:26 -04:00

beaconing

Revert "Prep for Release 8.16 (#3913 )"