FilesExpand file tree

develop

/

macros

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

macros

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
aws_cloudwatchlogs_eks.yml		aws_cloudwatchlogs_eks.yml
aws_config.yml		aws_config.yml
aws_description.yml		aws_description.yml
aws_ecr_users.yml		aws_ecr_users.yml
aws_s3_accesslogs.yml		aws_s3_accesslogs.yml
aws_securityhub_finding.yml		aws_securityhub_finding.yml
aws_securityhub_firehose.yml		aws_securityhub_firehose.yml
brand_abuse_dns.yml		brand_abuse_dns.yml
brand_abuse_email.yml		brand_abuse_email.yml
brand_abuse_web.yml		brand_abuse_web.yml
circleci.yml		circleci.yml
cisco_networks.yml		cisco_networks.yml
cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml		cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml
cloudtrail.yml		cloudtrail.yml
cloudwatch_eks.yml		cloudwatch_eks.yml
cloudwatch_vpc.yml		cloudwatch_vpc.yml
cloudwatchlogs_vpcflow.yml		cloudwatchlogs_vpcflow.yml
dynamic_dns_providers.yml		dynamic_dns_providers.yml
dynamic_dns_web_traffic.yml		dynamic_dns_web_traffic.yml
ec2_modification_api_calls.yml		ec2_modification_api_calls.yml
evilginx_phishlets_0365.yml		evilginx_phishlets_0365.yml
evilginx_phishlets_amazon.yml		evilginx_phishlets_amazon.yml
evilginx_phishlets_aws.yml		evilginx_phishlets_aws.yml
evilginx_phishlets_facebook.yml		evilginx_phishlets_facebook.yml
evilginx_phishlets_github.yml		evilginx_phishlets_github.yml
evilginx_phishlets_google.yml		evilginx_phishlets_google.yml
evilginx_phishlets_outlook.yml		evilginx_phishlets_outlook.yml
exchange.yml		exchange.yml
f5_bigip_rogue.yml		f5_bigip_rogue.yml
filter_rare_process_allow_list.yml		filter_rare_process_allow_list.yml
github.yml		github.yml
github_known_users.yml		github_known_users.yml
google_gcp_pubnet_message.yml		google_gcp_pubnet_message.yml
google_gcp_pubsub_message.yml		google_gcp_pubsub_message.yml
gsuite_calendar.yml		gsuite_calendar.yml
gsuite_drive.yml		gsuite_drive.yml
gsuite_gmail.yml		gsuite_gmail.yml
is_windows_system_file.yml		is_windows_system_file.yml
kube_objects_events.yml		kube_objects_events.yml
kubernetes_azure.yml		kubernetes_azure.yml
kubernetes_container_controller.yml		kubernetes_container_controller.yml
linux_hosts.yml		linux_hosts.yml
netbackup.yml		netbackup.yml
network_acl_events.yml		network_acl_events.yml
notable.yml		notable.yml
o365_management_activity.yml		o365_management_activity.yml
okta.yml		okta.yml
osquery_process.yml		osquery_process.yml
powershell.yml		powershell.yml
previously_seen_cloud_api_calls_per_user_role_forget_window.yml		previously_seen_cloud_api_calls_per_user_role_forget_window.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml		previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml		previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_images_forget_window.yml		previously_seen_cloud_compute_images_forget_window.yml
previously_seen_cloud_compute_instance_type_forget_window.yml		previously_seen_cloud_compute_instance_type_forget_window.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml		previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml		previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml
previously_seen_cloud_provisioning_activity_forget_window.yml		previously_seen_cloud_provisioning_activity_forget_window.yml
previously_seen_cloud_region_forget_window.yml		previously_seen_cloud_region_forget_window.yml
previously_seen_cloud_regions_search_window_begin_offset.yml		previously_seen_cloud_regions_search_window_begin_offset.yml
previously_seen_windows_services_forget_window.yml		previously_seen_windows_services_forget_window.yml
previously_seen_windows_services_window.yml		previously_seen_windows_services_window.yml
previously_seen_zoom_child_processes_forget_window.yml		previously_seen_zoom_child_processes_forget_window.yml
previously_seen_zoom_child_processes_window.yml		previously_seen_zoom_child_processes_window.yml
previously_unseen_cloud_provisioning_activity_window.yml		previously_unseen_cloud_provisioning_activity_window.yml
printservice.yml		printservice.yml
process_bitsadmin.yml		process_bitsadmin.yml
process_certutil.yml		process_certutil.yml
process_cmd.yml		process_cmd.yml
process_copy.yml		process_copy.yml
process_csc.yml		process_csc.yml
process_curl.yml		process_curl.yml
process_dllhost.yml		process_dllhost.yml
process_dsquery.yml		process_dsquery.yml
process_dxdiag.yml		process_dxdiag.yml
process_esentutl.yml		process_esentutl.yml
process_fodhelper.yml		process_fodhelper.yml
process_gpupdate.yml		process_gpupdate.yml
process_hh.yml		process_hh.yml
process_installutil.yml		process_installutil.yml
process_microsoftworkflowcompiler.yml		process_microsoftworkflowcompiler.yml
process_msbuild.yml		process_msbuild.yml
process_mshta.yml		process_mshta.yml
process_net.yml		process_net.yml
process_netsh.yml		process_netsh.yml
process_nltest.yml		process_nltest.yml
process_ntdsutil.yml		process_ntdsutil.yml
process_powershell.yml		process_powershell.yml
process_procdump.yml		process_procdump.yml
process_psexec.yml		process_psexec.yml
process_rclone.yml		process_rclone.yml
process_reg.yml		process_reg.yml
process_regasm.yml		process_regasm.yml
process_regsvcs.yml		process_regsvcs.yml
process_regsvr32.yml		process_regsvr32.yml
process_route.yml		process_route.yml
process_runas.yml		process_runas.yml
process_rundll32.yml		process_rundll32.yml
process_schtasks.yml		process_schtasks.yml
process_sdelete.yml		process_sdelete.yml
process_setspn.yml		process_setspn.yml
View all files