FilesExpand file tree

develop

/

cloud

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

cloud

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
abnormally_high_number_of_cloud_infrastructure_api_calls.yml		abnormally_high_number_of_cloud_infrastructure_api_calls.yml
abnormally_high_number_of_cloud_instances_destroyed.yml		abnormally_high_number_of_cloud_instances_destroyed.yml
abnormally_high_number_of_cloud_instances_launched.yml		abnormally_high_number_of_cloud_instances_launched.yml
abnormally_high_number_of_cloud_security_group_api_calls.yml		abnormally_high_number_of_cloud_security_group_api_calls.yml
amazon_eks_kubernetes_cluster_scan_detection.yml		amazon_eks_kubernetes_cluster_scan_detection.yml
amazon_eks_kubernetes_pod_scan_detection.yml		amazon_eks_kubernetes_pod_scan_detection.yml
asl_aws_concurrent_sessions_from_different_ips.yml		asl_aws_concurrent_sessions_from_different_ips.yml
asl_aws_createaccesskey.yml		asl_aws_createaccesskey.yml
asl_aws_defense_evasion_delete_cloudtrail.yml		asl_aws_defense_evasion_delete_cloudtrail.yml
asl_aws_defense_evasion_delete_cloudwatch_log_group.yml		asl_aws_defense_evasion_delete_cloudwatch_log_group.yml
asl_aws_defense_evasion_impair_security_services.yml		asl_aws_defense_evasion_impair_security_services.yml
asl_aws_excessive_security_scanning.yml		asl_aws_excessive_security_scanning.yml
asl_aws_iam_delete_policy.yml		asl_aws_iam_delete_policy.yml
asl_aws_multi_factor_authentication_disabled.yml		asl_aws_multi_factor_authentication_disabled.yml
asl_aws_new_mfa_method_registered_for_user.yml		asl_aws_new_mfa_method_registered_for_user.yml
asl_aws_password_policy_changes.yml		asl_aws_password_policy_changes.yml
aws_ami_atttribute_modification_for_exfiltration.yml		aws_ami_atttribute_modification_for_exfiltration.yml
aws_concurrent_sessions_from_different_ips.yml		aws_concurrent_sessions_from_different_ips.yml
aws_console_login_failed_during_mfa_challenge.yml		aws_console_login_failed_during_mfa_challenge.yml
aws_create_policy_version_to_allow_all_resources.yml		aws_create_policy_version_to_allow_all_resources.yml
aws_createaccesskey.yml		aws_createaccesskey.yml
aws_createloginprofile.yml		aws_createloginprofile.yml
aws_credential_access_failed_login.yml		aws_credential_access_failed_login.yml
aws_credential_access_getpassworddata.yml		aws_credential_access_getpassworddata.yml
aws_credential_access_rds_password_reset.yml		aws_credential_access_rds_password_reset.yml
aws_cross_account_activity_from_previously_unseen_account.yml		aws_cross_account_activity_from_previously_unseen_account.yml
aws_defense_evasion_delete_cloudtrail.yml		aws_defense_evasion_delete_cloudtrail.yml
aws_defense_evasion_delete_cloudwatch_log_group.yml		aws_defense_evasion_delete_cloudwatch_log_group.yml
aws_defense_evasion_impair_security_services.yml		aws_defense_evasion_impair_security_services.yml
aws_defense_evasion_putbucketlifecycle.yml		aws_defense_evasion_putbucketlifecycle.yml
aws_defense_evasion_stop_logging_cloudtrail.yml		aws_defense_evasion_stop_logging_cloudtrail.yml
aws_defense_evasion_update_cloudtrail.yml		aws_defense_evasion_update_cloudtrail.yml
aws_detect_attach_to_role_policy.yml		aws_detect_attach_to_role_policy.yml
aws_detect_permanent_key_creation.yml		aws_detect_permanent_key_creation.yml
aws_detect_role_creation.yml		aws_detect_role_creation.yml
aws_detect_sts_assume_role_abuse.yml		aws_detect_sts_assume_role_abuse.yml
aws_detect_sts_get_session_token_abuse.yml		aws_detect_sts_get_session_token_abuse.yml
aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml		aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml
aws_detect_users_with_kms_keys_performing_encryption_s3.yml		aws_detect_users_with_kms_keys_performing_encryption_s3.yml
aws_disable_bucket_versioning.yml		aws_disable_bucket_versioning.yml
aws_ec2_snapshot_shared_externally.yml		aws_ec2_snapshot_shared_externally.yml
aws_ecr_container_scanning_findings_high.yml		aws_ecr_container_scanning_findings_high.yml
aws_ecr_container_scanning_findings_low_informational_unknown.yml		aws_ecr_container_scanning_findings_low_informational_unknown.yml
aws_ecr_container_scanning_findings_medium.yml		aws_ecr_container_scanning_findings_medium.yml
aws_ecr_container_upload_outside_business_hours.yml		aws_ecr_container_upload_outside_business_hours.yml
aws_ecr_container_upload_unknown_user.yml		aws_ecr_container_upload_unknown_user.yml
aws_excessive_security_scanning.yml		aws_excessive_security_scanning.yml
aws_exfiltration_via_anomalous_getobject_api_activity.yml		aws_exfiltration_via_anomalous_getobject_api_activity.yml
aws_exfiltration_via_batch_service.yml		aws_exfiltration_via_batch_service.yml
aws_exfiltration_via_bucket_replication.yml		aws_exfiltration_via_bucket_replication.yml
aws_exfiltration_via_datasync_task.yml		aws_exfiltration_via_datasync_task.yml
aws_exfiltration_via_ec2_snapshot.yml		aws_exfiltration_via_ec2_snapshot.yml
aws_high_number_of_failed_authentications_for_user.yml		aws_high_number_of_failed_authentications_for_user.yml
aws_high_number_of_failed_authentications_from_ip.yml		aws_high_number_of_failed_authentications_from_ip.yml
aws_iam_accessdenied_discovery_events.yml		aws_iam_accessdenied_discovery_events.yml
aws_iam_assume_role_policy_brute_force.yml		aws_iam_assume_role_policy_brute_force.yml
aws_iam_delete_policy.yml		aws_iam_delete_policy.yml
aws_iam_failure_group_deletion.yml		aws_iam_failure_group_deletion.yml
aws_iam_successful_group_deletion.yml		aws_iam_successful_group_deletion.yml
aws_lambda_updatefunctioncode.yml		aws_lambda_updatefunctioncode.yml
aws_multi_factor_authentication_disabled.yml		aws_multi_factor_authentication_disabled.yml
aws_multiple_failed_mfa_requests_for_user.yml		aws_multiple_failed_mfa_requests_for_user.yml
aws_multiple_users_failing_to_authenticate_from_ip.yml		aws_multiple_users_failing_to_authenticate_from_ip.yml
aws_network_access_control_list_created_with_all_open_ports.yml		aws_network_access_control_list_created_with_all_open_ports.yml
aws_network_access_control_list_deleted.yml		aws_network_access_control_list_deleted.yml
aws_new_mfa_method_registered_for_user.yml		aws_new_mfa_method_registered_for_user.yml
aws_password_policy_changes.yml		aws_password_policy_changes.yml
aws_s3_exfiltration_behavior_identified.yml		aws_s3_exfiltration_behavior_identified.yml
aws_saml_access_by_provider_user_and_principal.yml		aws_saml_access_by_provider_user_and_principal.yml
aws_saml_update_identity_provider.yml		aws_saml_update_identity_provider.yml
aws_setdefaultpolicyversion.yml		aws_setdefaultpolicyversion.yml
aws_successful_console_authentication_from_multiple_ips.yml		aws_successful_console_authentication_from_multiple_ips.yml
aws_successful_single_factor_authentication.yml		aws_successful_single_factor_authentication.yml
aws_unusual_number_of_failed_authentications_from_ip.yml		aws_unusual_number_of_failed_authentications_from_ip.yml
aws_updateloginprofile.yml		aws_updateloginprofile.yml
azure_active_directory_high_risk_sign_in.yml		azure_active_directory_high_risk_sign_in.yml
azure_ad_application_administrator_role_assigned.yml		azure_ad_application_administrator_role_assigned.yml
azure_ad_authentication_failed_during_mfa_challenge.yml		azure_ad_authentication_failed_during_mfa_challenge.yml
azure_ad_concurrent_sessions_from_different_ips.yml		azure_ad_concurrent_sessions_from_different_ips.yml
azure_ad_external_guest_user_invited.yml		azure_ad_external_guest_user_invited.yml
azure_ad_global_administrator_role_assigned.yml		azure_ad_global_administrator_role_assigned.yml
azure_ad_high_number_of_failed_authentications_for_user.yml		azure_ad_high_number_of_failed_authentications_for_user.yml
azure_ad_high_number_of_failed_authentications_from_ip.yml		azure_ad_high_number_of_failed_authentications_from_ip.yml
azure_ad_multi_factor_authentication_disabled.yml		azure_ad_multi_factor_authentication_disabled.yml
azure_ad_multiple_failed_mfa_requests_for_user.yml		azure_ad_multiple_failed_mfa_requests_for_user.yml
azure_ad_multiple_users_failing_to_authenticate_from_ip.yml		azure_ad_multiple_users_failing_to_authenticate_from_ip.yml
azure_ad_new_custom_domain_added.yml		azure_ad_new_custom_domain_added.yml
azure_ad_new_federated_domain_added.yml		azure_ad_new_federated_domain_added.yml
azure_ad_new_mfa_method_registered_for_user.yml		azure_ad_new_mfa_method_registered_for_user.yml
azure_ad_pim_role_assigned.yml		azure_ad_pim_role_assigned.yml
azure_ad_pim_role_assignment_activated.yml		azure_ad_pim_role_assignment_activated.yml
azure_ad_privileged_authentication_administrator_role_assigned.yml		azure_ad_privileged_authentication_administrator_role_assigned.yml
azure_ad_privileged_role_assigned.yml		azure_ad_privileged_role_assigned.yml
azure_ad_privileged_role_assigned_to_service_principal.yml		azure_ad_privileged_role_assigned_to_service_principal.yml
azure_ad_service_principal_created.yml		azure_ad_service_principal_created.yml
azure_ad_service_principal_new_client_credentials.yml		azure_ad_service_principal_new_client_credentials.yml
azure_ad_service_principal_owner_added.yml		azure_ad_service_principal_owner_added.yml
azure_ad_successful_authentication_from_different_ips.yml		azure_ad_successful_authentication_from_different_ips.yml
azure_ad_successful_powershell_authentication.yml		azure_ad_successful_powershell_authentication.yml
azure_ad_successful_single_factor_authentication.yml		azure_ad_successful_single_factor_authentication.yml
View all files