00_default_hunting.yml

name: ESCU Default Configuration Hunting
id: cc5895e8-3420-4ab7-af38-cf87a28f9c3b
date: '2021-12-21'
author: Patrick Bareiss
description: This configuration file applies to all detections of type hunting.
scheduling:
  cron_schedule: 0 * * * *
  earliest_time: -70m@m
  latest_time: -10m@m
  schedule_window: auto
tags:
  type: Hunting