Terrance DeJesus ec4523a6a9 [Rule Tuning] Expanding coverage for First Occurrence of Entra ID Auth via DeviceCode Protocol (#4466) ...

* rule tuning 'First Occurrence of Entra ID Auth via DeviceCode Protocol'

* bumping patch version

* fixed investigation guide unit test failure

* bump patch

2025-02-20 10:29:04 -05:00

..

aws

[New Rule] Adding Coverage for AWS SNS Topic Created by Rare User (#4455)

2025-02-20 10:05:40 -05:00

aws_bedrock

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

azure

[Rule Tuning] Expanding coverage for First Occurrence of Entra ID Auth via DeviceCode Protocol (#4466)

2025-02-20 10:29:04 -05:00

beaconing

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

cloud_defend

[Rule Tuning] Event Aggregation - Fix event.action & event.type conditions (#4445)

2025-02-07 18:42:28 -03:00

cyberarkpas

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

ded

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

dga

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

endpoint

[Rule Tuning] Decrease Interval to 1m for Endpoint Promotions (#4450)

2025-02-07 08:30:35 -06:00

fim

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

gcp

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

github

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

google_workspace

Fix spacing in Setup information (#4470)

2025-02-20 10:04:13 +05:30

kubernetes

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

lmd

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

o365

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

okta

Fix spacing in Setup information (#4470)

2025-02-20 10:04:13 +05:30

problemchild

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00