FilesExpand file tree

develop

/

network

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

network

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
detect_arp_poisoning.yml		detect_arp_poisoning.yml
detect_dga_domains_using_pretrained_model_in_dsdl.yml		detect_dga_domains_using_pretrained_model_in_dsdl.yml
detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml		detect_dns_data_exfiltration_using_pretrained_model_in_dsdl.yml
detect_hosts_connecting_to_dynamic_domain_providers.yml		detect_hosts_connecting_to_dynamic_domain_providers.yml
detect_ipv6_network_infrastructure_threats.yml		detect_ipv6_network_infrastructure_threats.yml
detect_large_outbound_icmp_packets.yml		detect_large_outbound_icmp_packets.yml
detect_outbound_ldap_traffic.yml		detect_outbound_ldap_traffic.yml
detect_outbound_smb_traffic.yml		detect_outbound_smb_traffic.yml
detect_port_security_violation.yml		detect_port_security_violation.yml
detect_remote_access_software_usage_dns.yml		detect_remote_access_software_usage_dns.yml
detect_remote_access_software_usage_traffic.yml		detect_remote_access_software_usage_traffic.yml
detect_rogue_dhcp_server.yml		detect_rogue_dhcp_server.yml
detect_snicat_sni_exfiltration.yml		detect_snicat_sni_exfiltration.yml
detect_software_download_to_network_device.yml		detect_software_download_to_network_device.yml
detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml		detect_suspicious_dns_txt_records_using_pretrained_model_in_dsdl.yml
detect_traffic_mirroring.yml		detect_traffic_mirroring.yml
detect_unauthorized_assets_by_mac_address.yml		detect_unauthorized_assets_by_mac_address.yml
detect_windows_dns_sigred_via_splunk_stream.yml		detect_windows_dns_sigred_via_splunk_stream.yml
detect_windows_dns_sigred_via_zeek.yml		detect_windows_dns_sigred_via_zeek.yml
detect_zerologon_via_zeek.yml		detect_zerologon_via_zeek.yml
dns_query_length_outliers___mltk.yml		dns_query_length_outliers___mltk.yml
dns_query_length_with_high_standard_deviation.yml		dns_query_length_with_high_standard_deviation.yml
excessive_dns_failures.yml		excessive_dns_failures.yml
f5_big_ip_icontrol_rest_vulnerability_cve_2022_1388.yml		f5_big_ip_icontrol_rest_vulnerability_cve_2022_1388.yml
high_volume_of_bytes_out_to_url.yml		high_volume_of_bytes_out_to_url.yml
hosts_receiving_high_volume_of_network_traffic_from_email_server.yml		hosts_receiving_high_volume_of_network_traffic_from_email_server.yml
internal_horizontal_port_scan.yml		internal_horizontal_port_scan.yml
internal_vertical_port_scan.yml		internal_vertical_port_scan.yml
internal_vulnerability_scan.yml		internal_vulnerability_scan.yml
large_volume_of_dns_any_queries.yml		large_volume_of_dns_any_queries.yml
multiple_archive_files_http_post_traffic.yml		multiple_archive_files_http_post_traffic.yml
ngrok_reverse_proxy_on_network.yml		ngrok_reverse_proxy_on_network.yml
plain_http_post_exfiltrated_data.yml		plain_http_post_exfiltrated_data.yml
prohibited_network_traffic_allowed.yml		prohibited_network_traffic_allowed.yml
protocol_or_port_mismatch.yml		protocol_or_port_mismatch.yml
protocols_passing_authentication_in_cleartext.yml		protocols_passing_authentication_in_cleartext.yml
remote_desktop_network_bruteforce.yml		remote_desktop_network_bruteforce.yml
remote_desktop_network_traffic.yml		remote_desktop_network_traffic.yml
smb_traffic_spike.yml		smb_traffic_spike.yml
smb_traffic_spike___mltk.yml		smb_traffic_spike___mltk.yml
ssl_certificates_with_punycode.yml		ssl_certificates_with_punycode.yml
tor_traffic.yml		tor_traffic.yml
unusually_long_content_type_length.yml		unusually_long_content_type_length.yml
windows_ad_replication_service_traffic.yml		windows_ad_replication_service_traffic.yml
windows_ad_rogue_domain_controller_network_activity.yml		windows_ad_rogue_domain_controller_network_activity.yml
zeek_x509_certificate_with_punycode.yml		zeek_x509_certificate_with_punycode.yml
View all files