sigma-rules

Files

T

Jonhnathan b1989a921b [Security Content] Small tweaks on the setup guides (#3308 )

* [Security Content] Small tweaks on the setup guides

* Additional Fixes

* Avoid touching deprecated rules

Removed changes from:
- rules/integrations/beaconing/command_and_control_beaconing.toml
- rules/integrations/beaconing/command_and_control_beaconing_high_confidence.toml
- rules/linux/discovery_process_capabilities.toml
- rules/linux/privilege_escalation_dac_permissions.toml
- rules/linux/privilege_escalation_enlightenment_window_manager.toml
- rules/linux/privilege_escalation_gdb_sys_ptrace_elevation.toml
- rules/linux/privilege_escalation_gdb_sys_ptrace_netcon.toml
- rules/linux/privilege_escalation_suspicious_chown_fowner_elevation.toml
- rules/linux/privilege_escalation_suspicious_uid_guid_elevation.toml
- rules_building_block/discovery_capnetraw_capability.toml
- rules_building_block/persistence_cap_sys_admin_added_to_new_binary.toml

(selectively cherry picked from commit 458e67918a)

2024-03-11 12:14:53 +00:00

exfiltration_ml_high_bytes_destination_geo_country_iso_code.toml

[Security Content] Small tweaks on the setup guides (#3308 )

2024-03-11 12:14:53 +00:00

exfiltration_ml_high_bytes_destination_ip.toml

[Security Content] Small tweaks on the setup guides (#3308 )

2024-03-11 12:14:53 +00:00

exfiltration_ml_high_bytes_destination_port.toml

[Security Content] Small tweaks on the setup guides (#3308 )

2024-03-11 12:14:53 +00:00

exfiltration_ml_high_bytes_destination_region_name.toml

[Security Content] Small tweaks on the setup guides (#3308 )