sigma-rules

Files

T

Jonhnathan 7a2d7237b6 [Security Content] Add Investigation Guides - Cloud - 3 (#2132 )

* [Security Content] Add Investigation Guides - Cloud - 3

* Apply suggestions from code review

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>

* Update rules/integrations/aws/defense_evasion_cloudtrail_logging_suspended.toml

* update dates

* Apply suggestions from review

Co-authored-by: Joe Peeples <joe.peeples@elastic.co>

Removed changes from:
- rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml

(selectively cherry picked from commit 91c00fd442)

2022-07-27 18:41:05 +00:00

aws

[Security Content] Add Investigation Guides - Cloud - 3 (#2132 )

2022-07-27 18:41:05 +00:00

azure

[Security Content] Add Investigation Guides - Cloud - 3 (#2132 )

2022-07-27 18:41:05 +00:00

cyberarkpas

2058 add setup field to metadata (#2061 )

2022-07-18 21:25:32 +00:00

endpoint

Linux Shell Evasion Rule Tuning (#1878 )