security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f75b126ec48036f91d936a2b21cb841f8bf38d30
sigma-rules/rules/ml
T
History
Devon Kerr f75b126ec4 Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
..
ml_cloudtrail_error_message_spike.toml
[New Rule] Add Cloudtrail ML Rules
2020-07-14 15:16:58 -06:00
ml_cloudtrail_rare_error_code.toml
[New Rule] Add Cloudtrail ML Rules
2020-07-14 15:16:58 -06:00
ml_cloudtrail_rare_method_by_city.toml
[New Rule] Add Cloudtrail ML Rules
2020-07-14 15:16:58 -06:00
ml_cloudtrail_rare_method_by_country.toml
[New Rule] Add Cloudtrail ML Rules
2020-07-14 15:16:58 -06:00
ml_cloudtrail_rare_method_by_user.toml
[New Rule] Add Cloudtrail ML Rules
2020-07-14 15:16:58 -06:00
ml_linux_anomalous_network_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_linux_anomalous_network_port_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_linux_anomalous_network_service.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_linux_anomalous_network_url_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_linux_anomalous_process_all_hosts.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_linux_anomalous_user_name.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_packetbeat_dns_tunneling.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_packetbeat_rare_dns_question.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_packetbeat_rare_server_domain.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_packetbeat_rare_urls.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_packetbeat_rare_user_agent.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_rare_process_by_host_linux.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_rare_process_by_host_windows.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_suspicious_login_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_network_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_path_activity.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_process_all_hosts.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_process_creation.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_script.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_service.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_anomalous_user_name.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00
ml_windows_rare_user_runas_event.toml
Fix terminology and doc links (#54)
2020-07-13 12:47:42 -06:00
ml_windows_rare_user_type10_remote_login.toml
Update terminology in ML job rules
2020-07-14 21:22:34 -06:00