FilesExpand file tree

develop

/

macros

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

macros

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
aws_cloudwatchlogs_eks.yml		aws_cloudwatchlogs_eks.yml
aws_cross_account_activity_from_previously_unseen_account___dm_filter.yml		aws_cross_account_activity_from_previously_unseen_account___dm_filter.yml
aws_s3_accesslogs.yml		aws_s3_accesslogs.yml
aws_securityhub_firehose.yml		aws_securityhub_firehose.yml
brand_abuse_dns.yml		brand_abuse_dns.yml
brand_abuse_email.yml		brand_abuse_email.yml
brand_abuse_web.yml		brand_abuse_web.yml
cisco_networks.yml		cisco_networks.yml
clients_connecting_to_multiple_dns_servers.yml		clients_connecting_to_multiple_dns_servers.yml
cloudtrail.yml		cloudtrail.yml
cloudwatch_eks.yml		cloudwatch_eks.yml
cloudwatch_vpc.yml		cloudwatch_vpc.yml
cloudwatchlogs_vpcflow.yml		cloudwatchlogs_vpcflow.yml
create_or_delete_windows_shares.yml		create_or_delete_windows_shares.yml
detect_arp_poisoning_filter.yml		detect_arp_poisoning_filter.yml
detect_new_user_aws_console_login___dm_filter.yml		detect_new_user_aws_console_login___dm_filter.yml
detect_rogue_dhcp_server_filter.yml		detect_rogue_dhcp_server_filter.yml
dynamic_dns_providers.yml		dynamic_dns_providers.yml
dynamic_dns_web_traffic.yml		dynamic_dns_web_traffic.yml
ec2_modification_api_calls.yml		ec2_modification_api_calls.yml
evilginx_phishlets_0365.yml		evilginx_phishlets_0365.yml
evilginx_phishlets_amazon.yml		evilginx_phishlets_amazon.yml
evilginx_phishlets_aws.yml		evilginx_phishlets_aws.yml
evilginx_phishlets_facebook.yml		evilginx_phishlets_facebook.yml
evilginx_phishlets_github.yml		evilginx_phishlets_github.yml
evilginx_phishlets_google.yml		evilginx_phishlets_google.yml
evilginx_phishlets_outlook.yml		evilginx_phishlets_outlook.yml
f5_bigip_rogue.yml		f5_bigip_rogue.yml
filter_rare_process_whitelist.yml		filter_rare_process_whitelist.yml
google_gcp_pubnet_message.yml		google_gcp_pubnet_message.yml
google_gcp_pubsub_message.yml		google_gcp_pubsub_message.yml
is_windows_system_file.yml		is_windows_system_file.yml
kubernetes_azure.yml		kubernetes_azure.yml
kubernetes_azure_detect_most_active_service_accounts_by_pod_namespace.yml		kubernetes_azure_detect_most_active_service_accounts_by_pod_namespace.yml
kubernetes_azure_detect_rbac_authorization_by_account.yml		kubernetes_azure_detect_rbac_authorization_by_account.yml
kubernetes_azure_detect_sensitive_object_access.yml		kubernetes_azure_detect_sensitive_object_access.yml
kubernetes_azure_detect_sensitive_role_access.yml		kubernetes_azure_detect_sensitive_role_access.yml
kubernetes_azure_detect_service_accounts_forbidden_failure_access.yml		kubernetes_azure_detect_service_accounts_forbidden_failure_access.yml
kubernetes_azure_detect_suspicious_kubectl_calls.yml		kubernetes_azure_detect_suspicious_kubectl_calls.yml
kubernetes_azure_pod_scan_fingerprint_detection_filter.yml		kubernetes_azure_pod_scan_fingerprint_detection_filter.yml
kubernetes_azure_scan_fingerprint_filter.yml		kubernetes_azure_scan_fingerprint_filter.yml
netbackup.yml		netbackup.yml
network_acl_events.yml		network_acl_events.yml
okta.yml		okta.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml		previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml		previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml		previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_regions_search_window_begin_offset.yml		previously_seen_cloud_regions_search_window_begin_offset.yml
previously_seen_windows_services_forget_window.yml		previously_seen_windows_services_forget_window.yml
previously_seen_windows_services_window.yml		previously_seen_windows_services_window.yml
previously_seen_zoom_child_processes_forget_window.yml		previously_seen_zoom_child_processes_forget_window.yml
previously_seen_zoom_child_processes_window.yml		previously_seen_zoom_child_processes_window.yml
prohibited_apps_launching_cmd.yml		prohibited_apps_launching_cmd.yml
prohibited_softwares.yml		prohibited_softwares.yml
ransomware_extensions.yml		ransomware_extensions.yml
ransomware_notes.yml		ransomware_notes.yml
remove_valid_domains.yml		remove_valid_domains.yml
s3_accesslogs.yml		s3_accesslogs.yml
security_content_ctime.yml		security_content_ctime.yml
security_content_summariesonly.yml		security_content_summariesonly.yml
security_group_api_calls.yml		security_group_api_calls.yml
stream_dns.yml		stream_dns.yml
stream_http.yml		stream_http.yml
stream_tcp.yml		stream_tcp.yml
suspicious_email_attachments.yml		suspicious_email_attachments.yml
suspicious_writes.yml		suspicious_writes.yml
sysmon.yml		sysmon.yml
system_network_configuration_discovery_tools.yml		system_network_configuration_discovery_tools.yml
uncommon_processes.yml		uncommon_processes.yml
wineventlog_security.yml		wineventlog_security.yml
wineventlog_system.yml		wineventlog_system.yml
wmi.yml		wmi.yml
View all files