sigma-rules

Files

T

Terrance DeJesus 522719cc9e [New Rule] AWS EC2 Instance Connect SSH Public Key Uploaded (#3634 )

* new rule 'AWS EC2 Instance Connect SSH Public Key Uploaded'

* changed tactic to privilege escalation

* added additional reference

* added investigation guide

* updated summary

* changed risk score to medium; adjusted tags

* fixed mitre mapping

* Update rules/integrations/aws/privilege_escalation_ec2_instance_connect_ssh_public_key_uploaded.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit 9f67585332)

2024-06-05 14:36:53 +00:00

aws

[New Rule] AWS EC2 Instance Connect SSH Public Key Uploaded (#3634 )

2024-06-05 14:36:53 +00:00

azure

Back-porting Version Trimming (#3704 )

2024-05-22 19:18:10 +00:00

beaconing

Update rule setup instructions for UEBA packages (#3652 )

2024-05-28 19:24:45 +00:00

cloud_defend

Back-porting Version Trimming (#3704 )